Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/JpyTUN23vCHlYli07lRoxGfT5zw.roa
File: JpyTUN23vCHlYli07lRoxGfT5zw.roa (raw, json)
Hash identifier: pZIAGx510enCKjwKRmaPqMbJm2uyVnZPvdMPzpJq09s=
Subject key identifier: 26:9C:93:50:DD:B7:BC:21:E5:62:58:B4:EE:54:68:C4:67:D3:E7:3C
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4907
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/JpyTUN23vCHlYli07lRoxGfT5zw.roa
Signing time: Wed 01 Jun 2022 00:30:10 +0000
ROA not before: Wed 01 Jun 2022 00:30:10 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18695 (0x4907)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 1 00:30:10 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=269C9350DDB7BC21E56258B4EE5468C467D3E73C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e9:be:31:5c:c6:59:f9:ca:ff:af:72:9d:bd:
db:08:4a:a4:95:94:99:e2:7d:a5:16:6f:db:df:d3:
e9:28:d1:7a:90:62:1d:de:9a:2a:ce:67:8e:35:20:
16:57:f5:38:51:a6:0e:64:eb:10:0f:53:53:9a:1d:
08:de:af:8b:d5:92:46:ad:80:b9:79:b9:a5:e2:29:
57:0d:60:dc:c9:8f:ab:b9:c7:2b:b8:4c:5e:1f:7d:
23:85:98:02:5c:3f:11:87:62:e3:2e:51:f9:fc:5d:
55:61:a2:2e:1f:c0:f8:c2:18:84:b3:3f:c4:1a:d6:
eb:18:0b:36:cb:e3:29:22:83:d2:0f:04:f7:d3:e2:
f3:8f:02:92:8c:f7:e4:45:d1:bf:17:e2:92:f5:63:
7b:14:d6:f5:ad:bf:9e:94:c0:4c:33:2a:2a:93:25:
57:50:0c:92:4c:3b:1d:ea:ef:4a:63:53:2e:6a:b8:
dc:f3:15:d2:69:db:68:65:3a:a8:97:3d:b4:9b:96:
67:4d:59:5b:43:a3:94:c8:c7:1b:11:77:e4:fb:ea:
df:7c:6d:a2:16:da:91:43:27:50:6a:99:18:22:ae:
81:ee:b4:27:20:8b:b4:3e:50:ad:d8:30:0c:2d:a6:
03:2e:87:cd:ce:1d:53:05:54:43:7a:51:c1:1a:a7:
fa:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9C:93:50:DD:B7:BC:21:E5:62:58:B4:EE:54:68:C4:67:D3:E7:3C
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/JpyTUN23vCHlYli07lRoxGfT5zw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.188.0/24
Signature Algorithm: sha256WithRSAEncryption
80:df:0c:11:93:cd:25:14:5b:25:fd:84:8c:14:6f:bc:e7:6b:
38:3c:a1:2e:76:17:17:ec:71:c9:eb:5b:bf:66:02:fd:e8:74:
6e:7e:20:a5:a1:22:cc:d6:76:04:9e:4b:5f:74:25:03:41:16:
21:e6:1e:84:0f:c4:4d:eb:3f:e0:c6:be:1b:88:6a:65:3b:99:
0f:dd:c3:f3:01:c1:33:47:a2:59:90:2c:ab:90:70:23:4a:50:
f2:2e:26:13:a3:24:74:38:97:fd:0e:cf:99:0a:62:a7:07:cf:
ee:05:1c:ae:5f:39:e7:4a:6f:84:d6:fe:c2:42:74:eb:3f:71:
7d:8a:39:ab:f0:7a:88:74:8c:e7:9f:1d:8b:58:1f:cd:be:62:
f9:f7:56:f9:62:f3:1c:3d:71:8b:d8:6e:ab:33:58:b2:c8:d2:
52:37:2b:eb:30:15:a7:97:68:37:28:61:b4:5a:cc:15:92:4c:
5c:1d:23:6c:28:58:a7:40:e4:57:7f:7f:a1:4c:63:95:f9:cf:
21:bc:bd:e3:87:cd:81:c5:50:14:32:a3:25:58:bd:78:7f:d5:
d0:7f:bc:46:c7:cb:39:5b:01:88:93:71:3b:72:a2:b2:24:3d:
8d:a4:8c:b2:8b:cc:65:ce:5b:90:36:6e:7b:81:95:87:ff:b4:
1b:49:0b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org