Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/wcsTXuDalAK6A6701Tqbr-S1CEk.roa
File: wcsTXuDalAK6A6701Tqbr-S1CEk.roa (raw, json)
Hash identifier: QXSeWSopY468xyp914fqDBKA/hejWnlwbY+EZriuEr0=
Subject key identifier: C1:CB:13:5E:E0:DA:94:02:BA:03:AE:F4:D5:3A:9B:AF:E4:B5:08:49
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 47B6
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/wcsTXuDalAK6A6701Tqbr-S1CEk.roa
Signing time: Mon 09 May 2022 00:30:09 +0000
ROA not before: Mon 09 May 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18358 (0x47b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 9 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=C1CB135EE0DA9402BA03AEF4D53A9BAFE4B50849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:dc:69:f8:f8:5f:4c:4a:a0:c4:a5:4b:76:79:
96:27:50:b8:09:4c:21:0c:45:09:53:50:2c:90:43:
4b:a8:f3:43:87:b7:66:2f:f6:f0:40:c2:0d:b7:63:
ac:6e:93:88:98:c2:06:3d:d9:e0:ac:0c:6e:db:27:
17:9d:60:2d:10:90:5a:a3:76:6a:8d:8e:5c:67:eb:
04:84:57:71:e6:e1:c9:9b:7e:a5:bd:73:6c:bf:41:
92:40:7d:e3:35:67:a8:8a:ce:e2:0f:13:68:12:fd:
26:f7:8f:8b:7f:e0:fa:74:a0:0f:38:a2:57:c0:5f:
7f:37:a6:a8:b5:7f:37:b5:e5:6a:36:aa:6f:c6:08:
f5:21:dc:74:5c:b8:6d:4f:70:7d:02:1e:41:99:26:
2b:fc:c0:41:92:b7:76:2c:7e:ab:1f:a2:7c:42:57:
da:3f:9a:eb:99:52:17:d9:ac:55:ab:91:fa:b4:c3:
45:9b:ae:3a:e4:64:45:92:f0:57:19:18:85:16:85:
4c:21:02:2f:d8:a0:de:af:65:10:00:7a:9f:30:55:
a8:7b:8b:55:99:21:fb:e3:81:51:ac:b3:39:94:c1:
1d:6c:4d:91:13:f1:73:38:92:14:77:7b:64:a7:3e:
fd:73:a7:54:3a:0c:6c:1b:98:45:5b:cd:ee:af:28:
30:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CB:13:5E:E0:DA:94:02:BA:03:AE:F4:D5:3A:9B:AF:E4:B5:08:49
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/wcsTXuDalAK6A6701Tqbr-S1CEk.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
49:cf:be:04:5e:c1:b3:c5:6f:12:d8:94:9a:9e:ea:c9:a1:7e:
27:52:38:41:56:3f:1a:82:c3:27:74:9d:c2:98:11:df:54:6a:
b0:8d:6c:08:c9:31:2b:e5:73:bf:44:6b:2f:26:35:81:89:3e:
79:ef:74:fb:7d:28:64:7d:c7:a3:27:5b:c2:b1:a5:3f:18:ed:
87:9e:29:4e:2d:10:51:1f:e7:8f:8b:f8:f7:41:5b:43:4e:74:
c1:5e:18:3c:80:c1:24:ae:39:0a:9b:01:97:a5:e2:50:e2:7f:
ea:44:c0:0b:09:02:e6:b7:ac:a5:be:2e:27:ef:81:0a:32:16:
d2:fc:5e:61:4a:cb:3b:ce:e9:e7:cf:82:34:7c:aa:d3:d6:9b:
ac:47:72:b0:da:bb:c1:13:64:04:7e:94:19:cd:df:56:ea:12:
b7:0f:3e:21:a8:00:dc:62:cb:b8:c7:d6:0c:14:68:2e:8e:80:
b6:2e:87:28:61:17:65:bd:df:c7:40:f2:30:f3:ae:03:14:ba:
ec:73:26:ef:a2:1c:7b:2f:0f:8a:1d:f7:74:fa:61:c8:80:e5:
e8:4c:12:99:1e:8c:30:3c:e6:2f:db:bc:c2:b3:6a:c4:9c:b2:
a5:e4:eb:7f:41:c0:10:8e:d7:77:9b:cb:c9:72:80:f0:91:bc:
2f:0f:85:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org