Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/0uT-RMltlGJcRuoZCbCGzGoYZH4.roa
File: 0uT-RMltlGJcRuoZCbCGzGoYZH4.roa (raw, json)
Hash identifier: 3UVYPIsnfQKwlDcSjUqrMkr9WsNgjW5UXZqD6rpTyYI=
Subject key identifier: D2:E4:FE:44:C9:6D:94:62:5C:46:EA:19:09:B0:86:CC:6A:18:64:7E
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 42D0
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/0uT-RMltlGJcRuoZCbCGzGoYZH4.roa
Signing time: Tue 08 Feb 2022 00:30:04 +0000
ROA not before: Tue 08 Feb 2022 00:30:04 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17104 (0x42d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 8 00:30:04 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=D2E4FE44C96D94625C46EA1909B086CC6A18647E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f4:24:01:a9:27:d8:bd:dc:3a:31:a4:51:37:
00:73:a1:00:a8:00:7f:50:8f:59:1c:c4:de:54:6a:
47:9b:3f:43:1d:f8:9f:59:84:c6:8c:a7:01:ff:ba:
52:f1:5d:51:2d:c6:5f:fc:b3:16:cc:ed:f0:2e:76:
c9:e2:9b:91:ea:51:26:27:e0:c8:d5:af:52:bc:65:
e1:c3:0d:dc:dd:85:6a:d5:d2:de:38:a9:5f:0f:b7:
4f:95:00:90:15:9d:df:d2:94:05:6b:4f:ea:b1:8c:
aa:89:87:d3:4d:94:5c:95:59:46:5d:11:06:cf:85:
94:4c:47:c7:eb:79:93:eb:80:ef:f2:83:36:51:06:
74:01:a1:79:cb:fc:13:bb:52:42:c9:6f:cc:8a:e7:
2c:ef:9f:fd:bd:fe:3d:14:23:0b:ba:76:94:63:80:
31:6f:99:2e:ee:36:b5:fc:de:b3:11:26:0a:a7:77:
40:18:e1:34:3c:96:bf:6f:3b:13:39:7f:2d:24:ae:
62:ce:73:2f:9a:f6:b4:a3:75:7a:8c:ae:94:e4:b1:
9c:d9:e2:fd:a2:a6:fb:09:af:97:6b:20:74:5e:51:
42:f8:b7:93:0c:2f:e5:7c:40:3f:25:7d:08:d1:66:
d6:79:23:60:9f:ce:d2:3c:ed:4c:8a:b1:5b:45:06:
59:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E4:FE:44:C9:6D:94:62:5C:46:EA:19:09:B0:86:CC:6A:18:64:7E
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/0uT-RMltlGJcRuoZCbCGzGoYZH4.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
99:58:09:77:3e:51:0c:cc:81:38:c7:29:9b:bb:a7:33:93:33:
15:e0:b8:7a:8f:af:92:90:61:77:23:79:17:5c:88:b3:9e:97:
d1:36:99:b0:8d:69:aa:7a:b7:bd:2c:fc:b8:be:f9:8a:a4:ae:
be:bb:b4:85:c4:58:1a:67:60:a7:a8:2b:54:31:bf:7f:f0:d4:
a5:f4:95:47:ee:cd:52:90:80:ae:0d:c8:09:dc:77:de:f5:00:
28:9d:81:5c:f8:05:f7:84:3d:15:8b:f4:a0:f9:fe:6c:26:80:
f4:7c:25:85:61:9f:e0:61:ac:8c:87:05:5c:90:3b:09:48:e0:
be:6e:61:70:9d:fd:b5:62:27:d4:05:c1:9a:86:3f:c4:4c:31:
4b:62:8f:f4:1c:6f:dc:36:e4:90:64:03:b8:11:17:d3:a0:9b:
ee:e2:9d:05:51:1f:55:b5:01:b1:19:da:a4:01:35:4b:2a:d8:
1e:e5:ad:35:f4:b6:13:34:66:a2:2e:ad:80:c1:06:46:05:8a:
3b:a5:be:58:33:34:27:49:11:e0:ef:21:d1:d8:27:17:5c:a9:
c5:15:07:10:f5:c9:bd:04:03:04:39:90:35:8a:ba:47:de:96:
96:03:64:07:0b:36:df:59:8a:d7:8b:b9:c9:43:f8:1f:7f:a0:
41:90:86:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org