Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/GK5ohml6PdaySroOprYRMCk-1xM.roa
File: GK5ohml6PdaySroOprYRMCk-1xM.roa (raw, json)
Hash identifier: Knze0unTb5oZIqTcDH8vtDqVwZC54Lz/SRqBdoD0oMY=
Subject key identifier: 18:AE:68:86:69:7A:3D:D6:B2:4A:BA:0E:A6:B6:11:30:29:3E:D7:13
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4903
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/GK5ohml6PdaySroOprYRMCk-1xM.roa
Signing time: Wed 01 Jun 2022 00:30:08 +0000
ROA not before: Wed 01 Jun 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18691 (0x4903)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 1 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=18AE6886697A3DD6B24ABA0EA6B61130293ED713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:04:c4:50:22:4f:1d:50:4e:41:b7:d5:43:37:
b7:0a:b7:e5:5b:8e:b9:ab:e6:75:3c:d2:8c:6d:4b:
b3:97:d3:b5:fe:1e:96:4a:1e:44:c8:e1:3a:e3:85:
52:be:bd:b4:ed:59:02:90:60:55:8a:d7:d2:00:6d:
0f:4b:12:ea:96:60:59:9e:68:cb:cd:9b:0a:33:fe:
67:16:32:74:58:cc:14:5a:d8:97:83:1c:88:ad:c2:
bc:51:ee:ec:09:62:68:27:e1:13:91:05:ff:93:c0:
4a:c9:e7:14:ba:f2:69:02:0d:89:6c:5b:24:f4:f7:
43:ff:d4:04:7e:48:ae:10:87:35:aa:e5:af:10:cc:
96:e7:27:25:9f:c6:ee:23:7e:fa:1c:f4:1e:40:54:
53:0f:03:8d:6c:f9:0f:15:7d:f4:c7:4b:86:42:9c:
5a:9a:c4:65:64:43:d5:4b:4f:e0:31:71:4c:9b:f4:
f5:e5:67:b1:0f:ee:ea:31:a2:13:92:84:60:4f:d4:
0b:4d:d1:2f:31:13:ae:d1:fb:19:9e:88:a9:90:13:
62:09:c4:9f:9b:46:5e:e5:bb:23:91:ce:4a:10:52:
e7:1d:eb:88:df:f0:4a:45:97:a9:60:d0:93:a2:ce:
b5:77:f2:3a:e6:8e:d1:ba:20:2b:cd:fb:97:c5:30:
49:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AE:68:86:69:7A:3D:D6:B2:4A:BA:0E:A6:B6:11:30:29:3E:D7:13
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/GK5ohml6PdaySroOprYRMCk-1xM.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:b6:e4:f1:15:20:80:cb:26:4f:8b:ae:fd:03:5a:ef:a3:e2:
7a:c4:96:56:d8:23:b1:b6:17:7f:3e:50:7f:f9:9b:3c:6b:39:
ef:dd:61:00:f1:04:dc:32:bb:f7:c5:4a:bc:83:42:56:16:a0:
43:71:0b:7e:6b:ab:f8:75:92:0b:f0:8f:4d:46:0a:52:4d:8a:
33:47:df:16:3f:d7:03:f4:93:8c:11:83:1e:96:d1:ad:a5:7c:
96:b7:2a:1a:30:47:6e:24:a2:20:3a:2e:62:33:fd:bb:6e:c6:
46:5a:c7:0e:10:33:94:50:6c:a9:ba:a1:4b:ab:e3:3d:6d:14:
bd:50:fa:26:dc:ba:27:d9:57:68:a2:4e:de:a1:cb:84:ec:fe:
17:07:6a:29:f4:b0:c7:58:81:89:06:ec:23:88:82:bf:95:ce:
4e:ba:cb:cd:62:c9:bc:6d:46:e3:1d:59:7d:28:fb:8d:c1:9d:
59:62:28:3c:dd:93:8d:46:6a:60:95:c5:c6:ef:c5:cc:18:05:
79:17:7f:c7:26:8b:b9:c4:c9:9c:76:2b:69:f6:11:a1:3d:09:
73:e1:22:0b:ac:6f:29:2f:b3:c3:c7:af:81:34:c5:72:73:6a:
3b:73:3b:1b:2b:a9:d7:c3:cc:37:4f:64:06:13:15:94:6b:1c:
35:8f:2e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org