Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/37DYdz5L6ohDBBF-mfLTyj9qpak.roa
File: 37DYdz5L6ohDBBF-mfLTyj9qpak.roa (raw, json)
Hash identifier: xtqSYoq/HWUsbRdQoEm/xzHVEJ2U9IYLOY20FohbG4Q=
Subject key identifier: DF:B0:D8:77:3E:4B:EA:88:43:04:11:7E:99:F2:D3:CA:3F:6A:A5:A9
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4456
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/37DYdz5L6ohDBBF-mfLTyj9qpak.roa
Signing time: Tue 08 Mar 2022 00:36:43 +0000
ROA not before: Tue 08 Mar 2022 00:36:43 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17494 (0x4456)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 8 00:36:43 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=DFB0D8773E4BEA884304117E99F2D3CA3F6AA5A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:52:8a:4a:be:c6:e9:a3:73:d3:2a:a1:c1:b2:
69:7f:6c:f9:93:c6:56:a3:c6:43:73:de:ba:89:7b:
31:8c:fa:c1:85:29:b8:75:9b:d2:58:66:a0:7c:5e:
50:c8:0f:0a:50:be:de:1d:18:e8:a0:81:76:ac:68:
3a:46:59:a4:76:d5:ed:92:81:8d:dd:95:78:7e:00:
95:82:8e:0e:55:3c:f7:c2:86:6c:26:7f:cb:9f:00:
3a:67:10:13:fd:c6:f7:b7:ea:2d:85:32:7e:43:2b:
6b:b7:6c:7f:d4:79:9c:21:d7:6e:5b:fe:42:7f:cb:
68:9a:c6:86:a1:c0:b5:fc:7c:fe:7c:5f:83:b1:18:
a7:48:c4:58:54:64:79:c4:e1:ff:24:75:b7:c9:4d:
45:4d:b3:4c:e7:6a:17:51:c9:63:38:8b:64:5f:6c:
e3:6b:91:39:10:09:68:8b:a2:4c:e8:d0:30:bb:84:
6c:33:60:e5:f7:c5:f8:ff:8a:20:91:06:9b:94:e1:
00:8b:04:dc:10:6b:89:64:55:b5:0a:04:9c:8f:05:
11:a9:24:ef:5d:d5:0d:ec:2a:5c:cd:89:39:b9:ed:
5d:3d:47:18:65:2a:8d:c5:8b:54:8b:bd:6a:10:ac:
e1:e4:2d:0c:f3:1b:c8:83:4a:a7:80:ae:23:89:40:
1b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B0:D8:77:3E:4B:EA:88:43:04:11:7E:99:F2:D3:CA:3F:6A:A5:A9
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/37DYdz5L6ohDBBF-mfLTyj9qpak.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
05:8c:6c:94:59:81:02:26:3e:d9:b4:68:90:e5:f1:60:3e:46:
f6:5c:c7:ef:f2:d6:fd:b5:e7:6a:2a:24:51:30:07:6d:a6:b1:
43:2f:bd:7a:32:96:ca:51:75:1a:d2:95:6a:b2:ac:46:b9:a7:
36:f4:af:1e:f9:a2:0b:ed:4b:75:36:df:b0:13:27:44:c6:33:
90:e9:a5:ef:43:a8:97:bb:0d:74:04:9b:71:7f:0b:fe:26:1d:
80:a3:50:84:49:18:dc:3c:c0:ad:11:2a:0e:a8:fd:1a:cc:da:
b7:ad:5a:7b:c2:e0:a3:fe:13:96:01:72:67:47:c5:1c:5f:fc:
83:36:fb:e0:87:d4:f0:de:9c:48:da:0f:a9:17:2c:7f:ab:89:
26:00:1d:e9:65:92:ae:b7:7f:33:f7:63:ef:2c:b8:58:18:0c:
22:7a:48:cc:af:a5:b8:ba:f6:b0:61:10:1f:84:56:f8:01:51:
90:c9:de:5d:02:e4:e7:02:01:1d:ff:4e:4f:85:d9:53:47:fd:
9a:13:be:23:44:8a:c0:7f:9b:d2:53:02:8e:b5:a8:71:6c:51:
36:fb:8e:dc:58:ac:7c:a1:d2:dd:41:2a:cb:cd:1b:5a:b7:2d:
83:30:e4:fc:b9:25:b8:a7:fc:16:3b:13:d4:1a:0d:99:03:05:
a5:82:79:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:52 2024 by rpki-client on console-fra.rpki-client.org