Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/oJHiv7UHIOq99iUIBl7G9Lun_F0.roa
File: oJHiv7UHIOq99iUIBl7G9Lun_F0.roa (raw, json)
Hash identifier: dAr2K5pkrsU87pg55lwQhsDVN4jYDwWsa4LOgxLOlwI=
Subject key identifier: A0:91:E2:BF:B5:07:20:EA:BD:F6:25:08:06:5E:C6:F4:BB:A7:FC:5D
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 473C
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/oJHiv7UHIOq99iUIBl7G9Lun_F0.roa
Signing time: Sat 30 Apr 2022 00:30:10 +0000
ROA not before: Sat 30 Apr 2022 00:30:10 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18236 (0x473c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 30 00:30:10 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=A091E2BFB50720EABDF62508065EC6F4BBA7FC5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9d:64:14:28:f7:6b:65:1f:bd:c2:84:4f:d9:
a7:e8:3a:6d:16:8a:ba:61:e1:31:15:df:53:4e:51:
01:00:85:24:ef:83:2f:43:36:77:3d:12:99:f4:39:
2e:b2:60:54:cd:5b:de:01:38:c1:04:ae:3b:e1:b0:
b0:e6:9b:48:98:e4:b2:19:8a:e7:5b:68:15:76:ee:
f6:f9:16:4a:ec:b4:56:6b:8d:05:e6:8f:c8:7b:d6:
ba:3d:d2:66:01:fd:f3:ab:73:39:20:7e:66:67:f3:
08:94:36:fb:8b:21:5b:6f:21:fb:ff:a7:32:ae:fa:
68:32:37:4c:1d:fe:a3:85:44:e2:5d:49:d3:d7:19:
98:c5:cc:82:00:4d:78:c1:71:38:b7:b1:86:7a:34:
08:6e:1e:7f:30:0f:d2:79:4c:94:0d:ca:62:a0:1c:
db:38:90:2c:9a:38:17:2c:05:4c:94:93:e6:db:9c:
e7:9c:64:fa:e2:a7:ad:df:20:4e:eb:10:65:5c:ea:
93:17:c8:f3:07:c9:aa:54:5c:ee:4c:ea:57:0d:fd:
f2:54:38:7d:49:91:38:9d:9c:6b:f5:3f:db:a0:02:
4c:1f:81:90:c7:c4:40:98:9d:30:25:37:6b:70:4a:
ea:39:6f:e1:8c:b0:4b:ed:0b:4b:24:62:3c:e1:50:
1e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:91:E2:BF:B5:07:20:EA:BD:F6:25:08:06:5E:C6:F4:BB:A7:FC:5D
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/oJHiv7UHIOq99iUIBl7G9Lun_F0.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:f9:6b:7a:30:74:1e:8c:db:58:26:f5:ab:5a:e3:5d:05:c8:
ad:6d:bb:d4:dc:8b:34:44:4a:64:f4:58:0d:2f:24:60:e8:8e:
25:66:16:fc:cb:56:40:f8:fe:58:b3:ae:1c:8b:9e:e0:5c:ee:
ef:14:65:41:b5:3f:55:c1:72:d7:2d:11:92:e7:67:21:47:4e:
99:73:b3:d0:e6:87:30:dc:eb:4a:0b:34:1b:e8:b4:34:6b:ce:
60:1a:9b:90:81:be:5f:81:6b:aa:0f:b1:0d:90:82:cb:0d:db:
fa:24:2a:f7:73:a0:6b:c1:a9:61:ab:e4:85:8b:25:3d:1c:a8:
76:29:3f:4d:16:0e:35:90:09:f7:bc:99:75:29:ed:4c:b6:c8:
bc:1d:dc:c2:0c:93:a5:c1:63:2e:c0:90:95:7b:03:4f:07:6e:
d2:58:1e:dc:f4:80:90:84:66:1a:a8:2f:a1:0c:11:b0:18:4b:
91:81:e2:fc:a6:9e:1c:7b:b0:9f:ca:b8:c1:af:f2:ac:a1:0d:
0f:69:d8:73:71:f6:67:54:e3:9b:98:a8:2a:2a:c6:76:8c:eb:
78:27:c3:58:cb:ec:d3:01:19:9b:2a:26:30:bc:c7:a8:5e:9c:
43:9e:2d:d9:8f:a7:67:3a:ed:1c:5d:2c:0e:89:37:f0:1b:b6:
e8:40:e9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org