Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/zPWQtEb4onh0Ujjqp-K9z4uQzgE.roa
File: zPWQtEb4onh0Ujjqp-K9z4uQzgE.roa (raw, json)
Hash identifier: QuzbSL65FvX0MwCxBtHne2hG2hHQo7NQ14fC0M0vrnM=
Subject key identifier: CC:F5:90:B4:46:F8:A2:78:74:52:38:EA:A7:E2:BD:CF:8B:90:CE:01
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 443B
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/zPWQtEb4onh0Ujjqp-K9z4uQzgE.roa
Signing time: Sun 06 Mar 2022 00:30:11 +0000
ROA not before: Sun 06 Mar 2022 00:30:11 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17467 (0x443b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 6 00:30:11 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=CCF590B446F8A278745238EAA7E2BDCF8B90CE01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d1:e3:45:40:7d:34:a9:db:0b:22:16:ee:82:
a4:a0:5d:45:c2:1a:14:6e:59:1f:3e:46:88:d6:86:
56:46:e1:71:6c:35:bf:8b:33:4e:07:03:9d:ee:21:
74:52:dc:7b:71:1d:ed:33:5c:21:28:c2:b3:42:6f:
29:dd:77:96:3c:3a:f0:14:90:0e:ae:45:33:7a:ae:
dc:ce:a5:4a:6b:39:9f:d9:ff:b4:8f:a9:95:6c:e4:
52:4a:1e:c4:e2:2c:42:0e:98:75:4b:c4:34:fb:8c:
1e:b3:fb:c2:a6:f0:e7:c9:f1:69:fc:06:ec:82:de:
aa:9c:a7:8b:7d:e0:b9:f4:e3:7b:e1:13:a0:d6:f8:
87:69:08:17:b4:28:29:0f:91:a5:a8:7d:ea:ac:fa:
39:d1:ff:1d:d3:2c:01:a4:46:36:c6:1d:71:b9:f8:
47:88:45:2c:14:1c:ee:56:92:ef:1c:c3:37:47:12:
3d:8f:86:c6:a2:27:67:da:31:75:29:c0:c6:21:29:
a3:6b:64:b1:ad:16:31:6f:7f:bc:b0:3c:43:ce:dc:
58:02:ef:3f:aa:4b:d5:3c:75:9c:c7:ac:82:d4:77:
02:45:1a:d9:0a:22:fb:2d:7c:aa:87:35:8a:a7:86:
bd:3d:28:2d:c8:df:df:a4:28:06:01:4c:66:b2:6e:
47:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F5:90:B4:46:F8:A2:78:74:52:38:EA:A7:E2:BD:CF:8B:90:CE:01
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/zPWQtEb4onh0Ujjqp-K9z4uQzgE.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
03:ae:20:98:b4:c3:48:4b:b5:48:7b:e8:ca:38:ed:99:6b:5c:
cb:d7:7d:40:73:f0:2f:07:f1:27:13:dd:97:fb:ba:a2:7b:60:
ea:b7:e5:e8:89:d7:60:99:54:8a:c2:ca:4d:a4:4c:92:00:83:
0d:f0:1f:18:f9:cb:c5:2a:8f:8a:be:e0:3f:ca:47:c2:1e:9c:
b4:c7:ea:23:00:37:dd:2f:cb:3b:b1:3a:af:9d:12:18:38:26:
47:0b:28:af:77:35:a3:91:0c:e8:2b:0a:b5:7f:41:0d:2b:32:
ee:5f:3b:72:68:9b:5b:57:b8:5c:57:20:21:66:2c:e7:7b:21:
06:eb:96:f8:7e:41:e2:1c:de:39:94:6b:34:af:c6:7b:bb:ec:
d3:20:ff:9a:69:bf:37:c4:ac:19:19:2a:4b:a0:cc:87:ae:dd:
4c:9f:d3:7c:85:0a:ce:ea:4b:1e:a6:10:2a:9b:2e:74:18:92:
16:94:81:a9:6f:71:db:5b:0d:9e:53:70:f2:65:ff:fb:9d:79:
88:58:d0:48:1e:a4:a9:77:60:f9:a9:c0:6b:f8:64:79:23:93:
be:b8:d1:10:57:f1:b8:3d:34:8b:38:2d:8e:0c:13:84:32:6b:
1e:42:7c:ab:f5:b1:4a:e9:64:6a:86:b6:df:44:8d:34:d7:8c:
4c:b8:8e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:53 2023 by rpki-client on console-ams.rpki-client.org