Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/3setJV4o_0fZQ1NfZmBXJfpDxok.roa
File: 3setJV4o_0fZQ1NfZmBXJfpDxok.roa (raw, json)
Hash identifier: PfpNOMuqfqR9EjyUnZksM5gribzInJ8IRtTuiyaCk00=
Subject key identifier: DE:C7:AD:25:5E:28:FF:47:D9:43:53:5F:66:60:57:25:FA:43:C6:89
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4298
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/3setJV4o_0fZQ1NfZmBXJfpDxok.roa
Signing time: Fri 04 Feb 2022 00:30:07 +0000
ROA not before: Fri 04 Feb 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17048 (0x4298)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 4 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=DEC7AD255E28FF47D943535F66605725FA43C689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ce:2b:0c:a7:bf:0e:6c:16:8a:a8:2c:f5:96:
12:c8:dd:69:e5:bc:86:58:55:b5:8f:07:83:ef:d1:
63:eb:f6:ad:41:d3:58:43:84:ac:2b:05:72:b2:25:
ff:5a:62:86:b8:11:94:f2:3d:3e:21:79:3e:24:d8:
f1:d9:9d:5f:ab:d1:a6:8b:0d:a6:9e:19:dd:19:4f:
16:ed:a6:26:f5:49:42:31:ea:0e:fd:11:cb:2d:ac:
91:10:d5:42:57:96:d5:17:bc:c3:d3:90:a8:e6:83:
33:5b:bb:df:ab:0e:24:2d:8e:e1:75:c2:02:e9:33:
ee:3d:fe:cb:16:8e:02:2e:83:4b:9e:6d:ec:f9:9c:
8b:21:9c:e5:33:b5:89:ee:20:1f:fe:47:bd:17:ea:
7d:8a:0b:c0:38:7e:de:4f:1e:84:74:74:6b:46:36:
4e:98:ee:a3:76:46:1b:8f:ea:63:f8:4e:b8:d9:5b:
86:e9:71:b5:3e:4e:2a:e9:28:e5:87:82:6c:0f:b4:
67:2d:23:57:c5:ac:be:2c:29:4f:53:79:31:26:e1:
fb:a4:02:d0:d4:95:5f:8f:f4:21:34:74:32:86:d8:
03:1f:c8:bf:de:05:55:5b:f9:10:15:87:cb:6f:6e:
44:5a:d9:04:60:07:00:31:30:32:7f:9f:5e:46:83:
75:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C7:AD:25:5E:28:FF:47:D9:43:53:5F:66:60:57:25:FA:43:C6:89
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/3setJV4o_0fZQ1NfZmBXJfpDxok.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:19:8a:4c:42:dd:1f:c4:e9:16:cc:32:16:91:43:04:8d:c5:
97:b0:ce:67:8b:be:54:f6:fc:59:41:1c:77:87:c2:e0:28:bb:
c8:a2:85:d2:b7:43:ef:41:37:3d:1a:49:03:49:8f:90:bf:1e:
16:8e:fb:5d:97:ea:8b:f1:78:3b:77:45:94:d0:10:7d:a7:5e:
13:0e:14:2a:a8:90:b2:a5:25:18:11:b9:92:7f:92:0a:ce:7c:
3c:89:fa:c6:61:26:08:cd:5d:9b:d1:cd:16:88:76:4e:c4:47:
09:2d:fd:54:ff:36:60:43:ea:54:ab:83:fa:12:51:b3:4a:92:
c1:d0:c7:8c:73:6d:ca:9c:8e:19:70:a5:22:1c:79:99:25:57:
58:91:f4:25:ad:67:b3:bb:c0:4f:a4:1b:ee:76:90:c6:c7:99:
8d:32:49:08:d5:85:6d:66:23:c7:09:ae:6b:f4:42:c9:cb:f8:
ef:8a:ad:ec:02:fd:f0:9c:4d:76:89:11:bd:1d:ed:07:b9:e7:
c7:d9:82:99:fc:5d:b3:31:6c:a6:98:f3:fc:19:32:9d:af:80:
aa:47:bd:c5:76:8c:21:cf:5f:40:88:2b:19:ee:a3:fd:9b:d9:
a1:b4:98:95:b3:f5:21:d3:5f:48:e1:a3:f7:c1:22:5d:0a:10:
90:8c:39:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:52 2024 by rpki-client on console-fra.rpki-client.org