Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/558psWmqxrJyhXWBLoMWMNyMcnU.roa
File: 558psWmqxrJyhXWBLoMWMNyMcnU.roa (raw, json)
Hash identifier: FjqzAXC9Gnuv83zK1lI4EQJyZGsqZXUhd0dVdQTv8AM=
Subject key identifier: E7:9F:29:B1:69:AA:C6:B2:72:85:75:81:2E:83:16:30:DC:8C:72:75
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4593
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/558psWmqxrJyhXWBLoMWMNyMcnU.roa
Signing time: Thu 31 Mar 2022 00:30:06 +0000
ROA not before: Thu 31 Mar 2022 00:30:06 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17811 (0x4593)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 31 00:30:06 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=E79F29B169AAC6B2728575812E831630DC8C7275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:52:98:fa:a3:3d:1d:04:b9:90:32:5f:0b:14:
4c:0d:22:a9:1a:44:42:39:e5:b4:04:0a:d4:6f:e3:
68:9b:27:fa:9c:fb:37:2e:f3:1e:c7:44:d7:e5:2c:
8e:e6:45:35:26:0a:c2:1e:30:f4:71:45:07:45:a5:
b0:cf:20:04:2e:01:ea:d1:ca:1a:d9:c0:ea:a7:68:
84:55:92:9a:64:a8:5a:9e:a8:01:4b:42:f5:64:aa:
8e:1f:aa:26:64:cf:da:37:ee:71:71:81:57:64:44:
3d:17:01:c5:bc:5e:29:4e:26:2a:c6:c3:a3:e8:d9:
b4:cb:42:8e:0f:3d:51:fc:37:f0:0b:3c:8f:3b:0d:
a2:7d:62:3e:68:49:b6:c4:90:16:67:57:1e:1f:37:
19:2b:4e:90:1b:6b:85:fd:df:a8:cf:62:fc:d3:59:
d8:a8:d5:f8:89:db:ff:42:ed:91:41:65:41:dc:19:
db:80:2b:e3:71:f2:0f:6f:a1:05:80:83:f6:23:ae:
c4:4b:ee:59:33:46:0d:c7:76:6b:b5:b5:8b:ba:7a:
b3:2e:61:84:b1:23:fc:a0:80:9b:d9:8a:fe:49:1e:
71:de:cc:fe:28:c5:6b:dd:e6:5e:32:4e:12:92:f2:
cb:68:ea:6c:21:12:05:f0:64:72:19:85:30:20:1a:
0e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9F:29:B1:69:AA:C6:B2:72:85:75:81:2E:83:16:30:DC:8C:72:75
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/558psWmqxrJyhXWBLoMWMNyMcnU.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
90:a9:bb:85:fc:2c:ed:bf:a3:f5:ed:fc:c5:44:e9:c1:cb:d5:
c8:62:1d:b6:c6:f4:1d:ce:9e:38:fb:55:25:d6:9f:66:0e:ae:
f6:9c:2f:20:ab:c3:21:a0:c2:29:e3:5b:57:93:f7:cb:e9:35:
70:80:3f:cd:cc:60:f6:d2:b7:df:30:f9:bb:6c:3b:55:3a:9e:
94:e9:fb:54:a3:1f:bc:3d:d5:60:26:3c:a6:13:bd:ac:cc:6e:
51:f3:e4:ea:06:71:95:e7:1e:17:7b:d6:f0:c1:43:56:6f:02:
6e:4c:b9:bb:e5:e0:54:f7:61:a3:0e:2a:6f:40:b8:76:f4:0e:
24:43:74:b8:5b:c8:b0:23:37:8d:a2:36:e9:2e:32:2c:f6:f0:
a5:a8:75:25:f9:58:fe:21:35:54:cd:8d:34:c1:e6:ed:c4:58:
02:8b:f6:88:1a:ce:f3:52:48:2e:6d:80:79:01:e0:37:ca:30:
84:80:b7:5c:cf:1b:92:e6:ba:de:5b:21:a8:75:24:b8:61:62:
df:ba:6f:a5:f7:96:a1:e7:fd:da:65:57:31:85:72:72:7e:1d:
d9:78:af:2c:83:c0:de:c3:2e:34:3a:d6:e0:52:82:10:50:7d:
3d:2b:fe:55:43:ff:9c:5d:ed:0e:da:2b:6f:b3:d9:c8:70:1a:
0a:d7:00:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org