Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/Av3_gat7T1w3lXFypwNDTnxfciU.roa
File: Av3_gat7T1w3lXFypwNDTnxfciU.roa (raw, json)
Hash identifier: wcFMqYMBmN3yYOYx58IlAdRVItlBJA0F0wzwJSeHe5g=
Subject key identifier: 02:FD:FF:81:AB:7B:4F:5C:37:95:71:72:A7:03:43:4E:7C:5F:72:25
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 44C0
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Av3_gat7T1w3lXFypwNDTnxfciU.roa
Signing time: Wed 16 Mar 2022 00:30:07 +0000
ROA not before: Wed 16 Mar 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17600 (0x44c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 16 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=02FDFF81AB7B4F5C37957172A703434E7C5F7225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f1:18:3e:9e:07:71:4b:a3:5e:80:d7:1e:51:
14:2a:2b:0f:38:9e:4f:dc:a3:95:f9:4f:9d:2d:80:
d3:f6:3b:90:9d:22:59:38:76:9a:b6:46:d7:fb:7a:
cf:52:16:11:2d:a5:a8:2c:d7:90:35:e4:2e:06:2c:
c0:19:59:c1:40:9d:ff:ae:13:71:c9:3c:8d:aa:5f:
c1:59:05:04:63:7a:73:c2:53:35:60:d5:53:ae:3d:
c3:9b:02:66:a0:95:e7:ac:00:ec:38:64:65:de:65:
6c:66:4c:b7:78:76:a5:60:8c:1a:0a:ee:ee:54:70:
d9:b4:40:1b:bc:4b:38:6d:6b:9e:0c:40:57:50:03:
f1:8a:be:38:ba:a6:90:a3:93:0e:93:c4:88:7e:76:
e7:af:82:b7:1f:80:e9:49:78:28:91:93:d6:02:fc:
ef:72:48:ad:c7:ad:59:6d:8e:2f:fa:3d:f4:66:32:
f2:1f:1e:08:1e:59:9c:b5:70:d2:69:73:cf:4d:a8:
5b:5a:d9:cb:14:e9:e0:54:3a:c4:34:9f:ff:70:98:
08:00:9b:c5:aa:a2:a3:b8:f4:eb:ce:73:18:12:f0:
4c:1a:bd:f6:c7:76:97:db:ba:4d:6a:d7:58:03:b0:
34:c5:87:b9:5d:ac:03:02:49:55:2d:23:5b:56:e8:
59:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FD:FF:81:AB:7B:4F:5C:37:95:71:72:A7:03:43:4E:7C:5F:72:25
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Av3_gat7T1w3lXFypwNDTnxfciU.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:c7:ea:d1:22:7f:fd:84:db:be:ec:c6:de:97:4f:af:58:81:
56:7b:a1:42:5b:2a:00:d4:ba:29:da:de:51:29:5e:bb:41:54:
8a:a2:6a:9a:be:17:48:a7:19:79:24:80:81:38:db:1a:f1:32:
e3:e2:0e:83:ca:ef:8a:c0:27:6d:d9:6a:41:39:bf:ed:cb:ab:
2b:3c:9a:f8:d3:02:df:be:d7:9c:db:77:c1:74:c2:11:a3:53:
e9:eb:f2:fd:cc:0e:df:9d:56:28:0e:a9:33:be:9b:58:34:25:
96:ef:19:ff:6f:03:33:ee:e8:f6:42:92:4d:83:78:b3:63:fc:
2d:3f:c5:dd:f3:52:33:2c:74:9c:ee:6f:c7:57:0d:9e:6f:d5:
58:e4:83:cb:d0:72:cf:32:b9:e2:cd:19:69:86:81:04:25:f0:
43:e7:4a:be:cc:59:be:40:00:46:08:f4:69:a8:6e:f8:ab:83:
08:57:a7:a0:e4:0a:94:f2:91:9c:28:e6:af:6e:4b:a2:ee:5f:
0b:fe:53:6f:fe:fd:61:60:b5:3a:ae:06:45:20:3d:75:3d:0d:
8a:20:35:5b:f5:4c:7a:ca:d0:ba:4d:8a:60:a4:23:64:20:49:
a0:2e:57:a7:06:d9:5d:56:a3:cf:10:73:70:c0:36:03:d3:60:
11:52:ed:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org