Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/rTTFgYNKO99QKyYgw3s_5bxE0UI.roa
File: rTTFgYNKO99QKyYgw3s_5bxE0UI.roa (raw, json)
Hash identifier: 9dp+7W8gbxhMaCZs7tQ9WKCd2XwKsoYTbP86A9Ry9ZA=
Subject key identifier: AD:34:C5:81:83:4A:3B:DF:50:2B:26:20:C3:7B:3F:E5:BC:44:D1:42
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 49A3
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/rTTFgYNKO99QKyYgw3s_5bxE0UI.roa
Signing time: Fri 10 Jun 2022 00:30:06 +0000
ROA not before: Fri 10 Jun 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18851 (0x49a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 10 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=AD34C581834A3BDF502B2620C37B3FE5BC44D142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c4:09:7d:e4:2c:22:62:6d:dc:1d:80:72:f0:
3e:df:3e:86:96:21:d5:c6:61:b0:71:d4:ee:91:09:
af:b0:38:ca:bd:63:c0:47:30:c6:52:b6:06:60:b6:
ea:f8:fb:0a:a1:b7:82:ea:c0:2c:63:f0:69:5e:66:
6a:49:73:09:8d:91:ad:e2:be:59:04:b6:07:cb:b7:
3a:e6:58:80:52:ed:cc:2d:16:a6:e0:d1:01:c4:a7:
f7:ee:ba:30:14:a5:04:d9:de:4e:16:50:a1:3a:00:
1e:b8:5a:55:c2:00:c3:01:1c:b4:d6:70:03:89:9a:
d1:b3:1e:cf:5c:38:bc:10:c1:08:2b:2e:32:1b:33:
e2:f9:d1:f9:53:e8:d3:0e:56:1f:de:9f:d2:c5:4e:
ab:68:13:95:03:84:09:f8:19:69:da:9f:d2:25:10:
62:2a:69:43:43:1a:f9:ce:e2:44:7c:e5:30:f8:fb:
f0:0d:a7:94:8b:96:63:02:b1:26:32:a3:09:a5:4e:
cd:8a:c1:26:b7:10:a4:a8:c4:c4:6a:68:65:11:b6:
4b:13:b3:e9:c8:02:35:b2:43:ee:f7:92:0f:62:0b:
e4:ea:95:c7:1f:60:17:1a:9f:dd:9c:24:fa:8a:02:
34:74:c4:12:cb:6b:2a:af:c4:c5:00:04:35:74:c7:
13:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:34:C5:81:83:4A:3B:DF:50:2B:26:20:C3:7B:3F:E5:BC:44:D1:42
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/rTTFgYNKO99QKyYgw3s_5bxE0UI.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
35:7d:cc:5a:92:e3:cc:5a:94:c3:70:e1:bf:4d:a3:a1:ec:fa:
62:81:5a:9a:1d:92:f4:86:c7:2d:4f:44:25:80:c9:34:11:e8:
0a:df:31:a1:98:18:9b:6a:80:0d:69:57:f3:cd:bc:81:5d:1f:
4a:ee:2a:0d:4a:45:a2:99:8c:ce:98:51:c1:17:71:42:b1:25:
62:2d:49:c0:88:be:d6:b0:72:40:f4:32:22:46:60:cb:dc:3f:
c5:d4:b8:1d:b4:77:d8:08:3a:e6:4b:56:3e:ca:93:67:3c:0a:
1e:89:23:12:8c:92:83:bb:ba:a3:bf:32:ab:a4:a2:bd:db:b0:
b8:47:8e:93:f7:d4:e7:7f:36:13:94:a9:b2:2d:4f:27:97:48:
12:24:53:28:08:47:67:8e:ac:03:2e:3b:6b:c4:23:17:84:16:
91:a7:c8:39:2c:c1:45:86:7b:d1:86:5e:2c:f3:89:4f:1c:90:
34:57:18:76:14:9e:e2:99:30:de:85:85:19:eb:ef:8b:65:c8:
ce:3d:59:ce:11:ca:bc:a2:64:f2:10:0e:8c:2f:e1:fc:20:b9:
13:d5:41:f6:da:ee:f1:03:e6:69:0a:95:9c:6a:43:ec:cf:bc:
7c:bc:2a:10:b8:7c:f6:4b:09:90:08:2c:3b:de:1e:21:52:96:
0b:d7:cb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org