Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/oLzDvEgIWLc--Flqss1Fenhwvp4.roa
File: oLzDvEgIWLc--Flqss1Fenhwvp4.roa (raw, json)
Hash identifier: w5AZ7JViRHlGQwjxfDrQUYRLkHHQoa1CRCc0+7eHYLs=
Subject key identifier: A0:BC:C3:BC:48:08:58:B7:3E:F8:59:6A:B2:CD:45:7A:78:70:BE:9E
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4658
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/oLzDvEgIWLc--Flqss1Fenhwvp4.roa
Signing time: Thu 14 Apr 2022 00:30:10 +0000
ROA not before: Thu 14 Apr 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18008 (0x4658)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 14 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=A0BCC3BC480858B73EF8596AB2CD457A7870BE9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2f:bc:fb:ca:8d:2a:1b:52:75:7c:21:bc:46:
13:29:fb:e5:af:cf:40:8f:35:a3:bd:71:2d:f6:f2:
e8:dd:6e:cf:a8:01:46:85:42:49:00:30:20:51:92:
ca:b6:68:03:32:82:94:b3:c4:c3:9c:81:a5:5a:99:
fc:f1:68:d9:bc:85:b8:a4:6a:30:97:3e:45:e5:32:
60:5f:64:5f:38:ed:d3:2c:a5:42:15:06:e0:ff:0d:
e2:1b:89:13:c6:49:e8:fd:36:36:89:5c:38:0a:3d:
c8:47:4d:d8:75:8a:a6:f4:5e:82:7f:f1:cf:20:a7:
5c:c7:d6:ca:9c:f5:cf:49:47:ad:02:f3:d3:d7:c6:
04:09:d8:06:76:14:9e:3d:7a:38:d1:a8:9b:c0:1a:
02:d5:a9:2c:01:3b:b7:ae:b3:21:73:f3:2a:cd:5b:
48:5f:e0:5e:00:32:30:9f:5f:25:eb:83:bf:c7:73:
86:2b:61:9c:37:ec:46:3f:03:1f:c2:1c:7b:1a:51:
1c:b3:bd:85:2a:c0:ec:61:0c:57:33:db:d5:84:0c:
98:9b:e5:63:16:7a:a4:55:2d:d3:60:53:3d:05:b0:
f0:97:4a:30:3f:92:3b:44:81:5e:d6:91:51:e7:b6:
a3:86:fe:d8:24:39:f2:6f:53:03:46:56:2e:09:df:
bb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:BC:C3:BC:48:08:58:B7:3E:F8:59:6A:B2:CD:45:7A:78:70:BE:9E
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/oLzDvEgIWLc--Flqss1Fenhwvp4.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
44:de:9b:ed:b6:0e:b5:d0:39:b0:53:83:72:94:76:66:bb:04:
94:2b:58:48:0b:18:1d:de:6f:00:f7:d4:81:f7:f6:02:3e:40:
a1:9e:a0:f9:74:3a:67:56:c7:be:12:02:d7:0c:d0:0a:9d:4e:
6f:da:9f:e8:94:e0:f1:ef:87:30:92:ca:76:49:be:27:0f:77:
2a:c3:31:2e:9f:b9:48:86:c4:3b:c3:d3:5d:e7:df:b0:db:e4:
45:79:32:a5:58:3d:5c:30:e3:67:19:c2:f0:ea:40:1f:91:b5:
06:e8:bd:4a:47:ed:49:fe:bf:43:80:0d:38:84:e5:6e:83:e7:
60:38:e6:fb:d4:4c:b6:70:67:0d:14:b0:2c:d3:11:af:91:cf:
55:59:fd:ef:ee:02:12:8f:f5:8b:67:b3:1e:41:43:84:76:a3:
33:dc:87:0a:e3:3b:ad:e5:3a:e8:03:cb:ff:1a:b3:2b:8e:7b:
36:38:ab:d9:3f:57:af:b7:b8:c6:ce:63:3f:a2:98:72:41:1f:
88:4d:ab:53:8b:17:3c:b5:19:00:73:77:53:cd:28:70:07:a2:
6e:5a:fc:2d:94:e4:de:dd:70:83:13:48:cd:43:a9:5a:11:32:
d1:6a:91:d0:08:4b:06:7c:0c:88:8e:44:c5:d2:29:71:67:d7:
be:11:85:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org