Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/1wr3Knm2gTM4rpcOwY8b_XZjAu8.roa
File: 1wr3Knm2gTM4rpcOwY8b_XZjAu8.roa (raw, json)
Hash identifier: NF2/Ef78BG5yzde2q07bIJITE1QCW0gH8lxS8PzFl4I=
Subject key identifier: D7:0A:F7:2A:79:B6:81:33:38:AE:97:0E:C1:8F:1B:FD:76:63:02:EF
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 486C
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/1wr3Knm2gTM4rpcOwY8b_XZjAu8.roa
Signing time: Sun 22 May 2022 00:30:08 +0000
ROA not before: Sun 22 May 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18540 (0x486c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 22 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=D70AF72A79B6813338AE970EC18F1BFD766302EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2b:50:de:31:05:0d:db:bf:94:cf:cb:61:1b:
fa:d6:99:2b:f9:d8:27:12:70:51:bf:d8:85:6d:eb:
ab:82:84:42:2c:d6:c7:41:68:90:2d:e0:d5:60:54:
ec:ea:8f:99:37:fe:fd:d0:96:0d:6a:f3:30:90:36:
42:ae:79:c6:3e:ac:3b:8a:7f:cc:6a:aa:1f:80:bb:
00:ff:57:c1:5f:62:c9:6f:9d:11:ba:25:61:66:8d:
c1:48:27:aa:5b:54:b5:80:40:a6:ce:c1:43:47:bd:
1b:e4:71:5e:e5:56:5a:95:df:b6:89:ac:b0:65:8d:
bd:c3:c9:7e:36:a5:9a:d9:76:c0:d3:99:e1:40:0a:
28:45:2d:cb:3d:82:9e:e5:da:e5:7a:e9:04:d0:61:
2c:b8:ca:02:dd:8d:87:01:89:9b:eb:03:b0:d5:fd:
4e:f0:d3:91:0f:f8:54:7e:d7:34:b5:9e:3c:4e:9b:
aa:71:01:7d:31:76:5a:df:f4:76:23:9e:d6:0b:72:
20:10:d7:a1:aa:d4:d9:f8:14:73:50:3d:89:95:43:
82:10:2e:af:1c:45:7e:a4:a2:a9:e1:3b:9e:ad:a5:
71:7f:45:fc:87:54:91:44:14:f4:87:30:1a:fe:c3:
0b:97:f5:4c:82:66:8d:e8:55:29:bb:ea:c9:4a:a6:
0e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0A:F7:2A:79:B6:81:33:38:AE:97:0E:C1:8F:1B:FD:76:63:02:EF
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/1wr3Knm2gTM4rpcOwY8b_XZjAu8.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
84:db:dc:48:6b:63:10:d9:67:ca:1d:cd:15:63:1c:b2:27:94:
7b:56:ee:46:f0:48:47:ac:3d:f8:74:35:34:c7:f1:d8:8f:6a:
91:aa:3e:10:ba:1c:87:1b:4c:ed:6b:13:ff:ab:37:98:44:81:
97:d5:e2:fe:be:6f:89:2d:61:cf:ad:53:21:44:a0:08:f7:b6:
c8:4d:ec:a7:2f:70:05:fc:e9:2b:4b:9c:6d:95:cb:50:7f:c8:
2c:0e:31:b5:ed:19:93:38:ed:f3:12:5b:80:83:1f:d6:77:0e:
2c:8e:e0:4e:8f:f2:fa:f8:af:a1:16:8b:cf:58:d8:61:3c:b0:
80:5c:0e:f8:ad:ea:02:78:88:31:66:29:db:02:30:ce:19:da:
e1:7c:92:57:5e:8c:fc:2f:ae:ee:6d:c4:50:fa:1b:88:60:2e:
f6:4c:ee:d5:ee:62:e6:81:aa:0c:41:ac:9a:33:b6:d0:21:e0:
b9:0e:ee:70:6b:7f:88:fd:d5:d3:d7:09:04:57:fa:92:e0:54:
b3:98:e8:64:ef:b5:fc:90:ed:de:4f:f6:98:42:6e:02:e1:67:
11:a7:f5:ce:00:9c:be:23:5c:3e:d1:e8:dd:8f:0d:eb:64:1a:
30:17:40:04:c2:6a:e1:0f:b1:d4:4a:af:f6:e7:74:43:cd:41:
3c:66:dc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:52 2024 by rpki-client on console-fra.rpki-client.org