Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/pEDnd_txMdgEdj_6vMF21_zyjEI.roa
File: pEDnd_txMdgEdj_6vMF21_zyjEI.roa (raw, json)
Hash identifier: g0sWdZoJQShaFLgxnIkFvQs3FLIFFmk9/kM3d9rM7lQ=
Subject key identifier: A4:40:E7:77:FB:71:31:D8:04:76:3F:FA:BC:C1:76:D7:FC:F2:8C:42
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 42EC
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/pEDnd_txMdgEdj_6vMF21_zyjEI.roa
Signing time: Thu 10 Feb 2022 00:30:08 +0000
ROA not before: Thu 10 Feb 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17132 (0x42ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 10 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=A440E777FB7131D804763FFABCC176D7FCF28C42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d1:af:17:23:ba:2f:ff:a8:3a:5b:08:d2:15:
ed:fa:59:e1:11:c2:17:63:2a:7e:c1:4f:b9:0b:f3:
58:fe:f9:db:c4:82:08:93:70:b2:c1:bd:32:5f:93:
54:08:6d:83:6d:8c:e7:ad:f8:80:5c:61:22:cb:11:
15:74:73:87:26:54:e1:db:22:f1:12:c0:cc:c8:a1:
94:25:fa:d2:47:c9:c3:23:6d:7e:dd:6d:97:88:ef:
01:31:2b:38:90:4a:b6:cc:f3:5a:db:41:8e:d8:0d:
90:38:d7:d2:62:c2:37:ce:32:c4:8e:f0:13:75:c4:
ba:cd:3c:20:64:74:bc:9a:39:12:15:58:44:47:82:
4b:5d:bf:05:41:a8:f8:9c:41:be:43:1b:fc:2d:27:
d9:31:f3:95:b6:3f:bf:75:ed:e1:02:5c:c0:03:05:
d2:71:b5:80:50:7a:40:f2:91:a4:3e:0f:4d:4a:4f:
d9:8e:b3:dc:0a:f4:99:fa:ef:48:98:3d:f4:14:3f:
31:f2:ca:7c:af:0b:ef:fc:52:b6:d9:27:18:1d:db:
99:52:03:8a:dc:b3:fd:e9:6f:b6:46:26:05:57:8e:
17:ae:16:8c:1f:1f:73:6c:99:5b:d3:f4:70:53:dc:
44:07:ce:a1:21:3c:5d:a5:48:1b:fd:0a:1d:f7:d4:
ca:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:40:E7:77:FB:71:31:D8:04:76:3F:FA:BC:C1:76:D7:FC:F2:8C:42
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/pEDnd_txMdgEdj_6vMF21_zyjEI.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
41:93:dc:1d:11:29:f9:1a:73:aa:54:d0:fb:41:79:db:07:af:
1c:e6:62:42:81:9b:6d:ad:ae:7d:48:c4:37:79:ab:9c:7b:49:
b7:7f:1d:59:be:09:f2:55:de:da:62:c6:24:dd:c2:bd:e3:70:
2a:f8:04:f6:48:c8:21:77:d6:33:51:b1:33:19:3e:76:70:5e:
1a:12:bf:9e:fe:0a:f7:e4:f8:91:ea:08:d6:92:f2:5d:f1:a4:
a7:0f:5a:d1:a1:7d:b9:38:ca:49:bb:45:07:6c:5f:3e:e1:bb:
de:ff:9c:57:49:06:c0:fb:c2:2f:52:d5:d6:ed:b2:dd:c1:47:
4a:36:77:91:ab:f7:fb:de:ef:9d:be:29:1a:8d:0e:48:42:51:
01:be:0d:ec:56:49:77:20:79:87:e8:1f:5d:47:15:9c:8f:2d:
cd:27:01:2d:43:00:79:87:f7:a1:61:7c:f7:20:c8:07:cf:ee:
b5:ae:18:fb:dd:1f:1a:37:cf:bc:99:a1:4c:b3:99:01:f8:a8:
38:53:f6:bb:ee:f0:1c:08:81:50:d7:93:38:e5:96:d2:cc:85:
4a:56:af:2d:ff:78:36:8e:7f:69:c1:97:07:d9:af:81:0c:a8:
36:f4:f1:9c:a2:b6:7d:1a:d6:17:c6:e3:4d:e4:81:05:5d:1a:
a0:99:8f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org