Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/-xMusu1Fsdf_cR9HiNq0XvZKsf0.roa
File: -xMusu1Fsdf_cR9HiNq0XvZKsf0.roa (raw, json)
Hash identifier: XpLb3pnP5ad+4zRlXEVX0lq4ZSRfkmkmoXZqjr8+Kyg=
Subject key identifier: FB:13:2E:B2:ED:45:B1:D7:FF:71:1F:47:88:DA:B4:5E:F6:4A:B1:FD
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 465C
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/-xMusu1Fsdf_cR9HiNq0XvZKsf0.roa
Signing time: Thu 14 Apr 2022 00:30:12 +0000
ROA not before: Thu 14 Apr 2022 00:30:12 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18012 (0x465c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 14 00:30:12 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=FB132EB2ED45B1D7FF711F4788DAB45EF64AB1FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:32:67:f7:a4:89:55:6a:b0:42:d7:39:99:da:
4e:1a:07:ba:1d:2b:0b:56:cb:f3:52:80:20:26:8c:
d6:86:b7:a8:eb:e7:59:03:44:39:3a:3d:8b:c9:bf:
89:3b:88:73:19:ed:65:ea:a0:62:8a:e3:4e:3a:4e:
94:d4:de:38:70:6c:70:c6:f2:01:6a:c0:99:82:c7:
c9:c2:58:38:8b:c2:31:27:5b:28:03:be:6d:10:8f:
03:0e:ff:0c:fb:ba:e6:19:8b:b0:8a:76:b3:30:29:
73:68:c4:9d:a4:0a:c0:f6:6e:40:d9:ae:43:79:1f:
ce:38:31:59:4c:b8:4e:33:a1:7c:a9:53:22:fe:44:
62:18:79:72:a2:b0:a3:1d:52:e0:e4:70:e7:fd:54:
a7:18:08:03:c9:9a:b7:e6:6e:44:09:1f:3b:8d:9d:
19:88:c0:ff:d7:de:25:40:84:e0:e9:8a:23:65:1d:
ad:8b:26:79:4c:4f:db:78:7c:ea:15:b2:93:3c:cf:
43:d4:c6:d0:72:6e:3e:27:03:70:66:1a:7d:7e:80:
6b:0f:53:99:fe:a3:e3:43:e4:48:1f:d1:d8:5f:d5:
30:72:f5:26:46:a3:81:8a:97:a1:83:a3:66:0c:ef:
dd:ed:08:f5:50:22:51:56:3a:eb:fa:34:0f:f9:08:
16:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:13:2E:B2:ED:45:B1:D7:FF:71:1F:47:88:DA:B4:5E:F6:4A:B1:FD
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/-xMusu1Fsdf_cR9HiNq0XvZKsf0.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
96:2c:59:bd:38:33:83:b7:f4:e5:53:56:64:21:ce:87:e6:7a:
54:35:bc:a2:2e:ce:e1:93:9c:ad:c3:62:13:85:10:b9:9e:5e:
5e:9b:52:2a:f0:16:2e:95:30:eb:0e:3f:d4:14:4d:90:8a:74:
5d:15:ed:fd:ef:7b:79:85:c6:9d:a4:66:b3:b1:5f:db:d3:77:
65:17:7b:eb:b8:4e:34:35:89:17:6e:68:08:34:45:bf:94:fc:
74:b7:ee:80:40:99:af:c3:e1:9e:e5:0c:31:bd:a2:42:46:51:
d2:3b:0c:d8:48:77:fb:1f:9e:22:eb:a9:81:2a:3f:af:6d:7b:
57:44:16:b5:57:54:5a:0d:ed:2d:d3:01:82:da:62:67:a6:01:
f2:2e:0b:67:05:69:0f:87:ec:0d:63:20:19:0b:7e:a9:ba:45:
b4:ae:81:f0:e9:5e:b5:e2:fc:86:a9:eb:f1:cb:aa:49:76:8f:
90:f5:7b:7d:f0:bd:04:e3:4f:55:d1:e9:96:36:27:4a:32:3e:
a4:a8:d2:25:5e:ec:07:3e:90:fa:18:96:ae:f9:a5:81:9c:77:
77:7c:9c:05:8c:e9:c0:49:49:3f:a8:67:59:3c:91:74:42:e5:
23:dd:2e:a9:d4:b3:0a:f5:ef:44:43:e2:9b:94:7c:99:3e:3d:
3a:c0:04:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:52 2024 by rpki-client on console-fra.rpki-client.org