Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/2whaF2ObnmUc_T5wTDVvBvqm65I.roa
File: 2whaF2ObnmUc_T5wTDVvBvqm65I.roa (raw, json)
Hash identifier: WuGtMUv7w0MF9X+ciTFV3No888wlOBj/ixYgI9iKr/8=
Subject key identifier: DB:08:5A:17:63:9B:9E:65:1C:FD:3E:70:4C:35:6F:06:FA:A6:EB:92
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 464A
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/2whaF2ObnmUc_T5wTDVvBvqm65I.roa
Signing time: Wed 13 Apr 2022 00:30:05 +0000
ROA not before: Wed 13 Apr 2022 00:30:05 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17994 (0x464a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 13 00:30:05 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=DB085A17639B9E651CFD3E704C356F06FAA6EB92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d4:be:c7:16:ef:ab:c5:28:17:73:f5:c7:de:
86:d0:f0:4b:32:6a:55:16:31:32:81:f1:96:90:1a:
a9:62:ff:e2:7c:d9:56:96:9c:5d:18:b0:56:b1:23:
06:42:e6:d6:74:36:c4:68:12:d4:00:b0:b6:3d:ef:
22:f7:db:16:24:9d:98:36:bf:5c:5f:8f:ec:4b:03:
6f:62:37:71:85:48:dc:64:c7:cd:1c:7c:65:88:fd:
3c:12:05:7a:e7:50:56:bc:1e:5d:e2:ac:30:32:98:
bb:3a:e7:4c:75:b8:d6:26:58:30:7b:40:b6:68:ad:
c3:a4:cf:0b:3d:fa:4e:a8:ed:fe:28:f9:6f:d6:34:
29:ce:25:41:68:c4:e1:6e:01:f2:33:a6:63:b9:89:
20:9e:c1:e1:c9:4e:32:86:11:f9:94:9e:e0:54:c0:
a1:d1:a9:03:9a:8f:c8:c2:25:da:76:c0:c3:fb:89:
e3:65:f3:69:99:9f:60:c0:85:3c:22:71:aa:43:e2:
9f:17:06:d5:59:83:a7:9c:02:f4:75:33:28:da:1c:
c0:8d:49:17:f1:70:1f:4f:1b:ee:f2:62:5a:3d:ed:
f1:fc:1b:e3:f9:fc:7c:9b:1f:eb:b0:b0:95:a7:98:
86:00:9c:71:6c:bf:b1:8d:c1:5d:9f:28:1b:b7:a5:
ea:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:08:5A:17:63:9B:9E:65:1C:FD:3E:70:4C:35:6F:06:FA:A6:EB:92
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/2whaF2ObnmUc_T5wTDVvBvqm65I.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
54:c5:5f:5a:dc:f5:b7:9f:bf:fe:32:3d:27:03:ef:5b:bf:c9:
97:a7:53:bb:61:c3:d0:1e:00:46:36:86:ff:c7:e2:d2:d2:74:
83:dc:16:40:3e:06:b8:90:05:48:0b:a9:17:d2:53:6d:65:06:
57:5b:c1:82:23:33:4e:ff:3d:b0:53:72:94:34:4d:35:76:68:
6c:38:c8:cf:b0:85:a2:e7:ed:87:9a:ff:33:3f:78:e4:db:97:
36:31:b7:19:e2:d6:2f:c4:ab:76:c3:18:8d:0f:77:09:1e:38:
3b:e3:c7:a3:84:d5:84:cd:26:84:66:a1:63:99:1f:20:ff:ac:
40:66:d8:ae:f6:73:33:8c:5b:4d:63:f0:da:08:95:76:b0:08:
75:21:55:f7:b3:d2:48:ac:bd:3b:62:dc:a9:84:59:05:92:72:
79:01:79:ce:e7:33:c9:c0:01:6f:40:ed:5f:77:38:23:7c:5d:
4c:84:6b:a3:ef:7b:3e:bf:4b:8d:8f:fb:01:89:fe:36:46:9c:
52:f3:a5:60:82:c6:33:b7:2d:99:0a:6c:53:2b:29:2c:d1:0f:
ae:20:e7:f4:9b:9b:0d:d2:f5:b2:76:7b:10:88:7e:bd:ce:9d:
8d:98:f0:fa:20:3d:fd:81:0c:2a:cb:21:ff:d1:ca:45:bd:94:
b8:5b:2a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org