Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/OQ0xQXcwAGEu35T2sUKOtRB7Z_A.roa
File: OQ0xQXcwAGEu35T2sUKOtRB7Z_A.roa (raw, json)
Hash identifier: UVhuoiYtuTteVRt4zilZ9Y4NLbJCnmBMQiD1s9txIAc=
Subject key identifier: 39:0D:31:41:77:30:00:61:2E:DF:94:F6:B1:42:8E:B5:10:7B:67:F0
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4585
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/OQ0xQXcwAGEu35T2sUKOtRB7Z_A.roa
Signing time: Wed 30 Mar 2022 00:30:08 +0000
ROA not before: Wed 30 Mar 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17797 (0x4585)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 30 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=390D3141773000612EDF94F6B1428EB5107B67F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:af:fd:31:a5:70:33:29:35:92:33:07:00:a1:
72:ea:ab:c4:c8:4d:1f:6b:cf:67:ea:70:c8:2b:df:
9d:ca:4e:96:15:66:6f:a6:4d:b6:7b:1c:3f:c4:40:
81:4b:7b:07:5f:be:34:0c:1b:48:f0:66:de:e9:10:
b6:33:e6:5e:20:eb:10:b7:8d:27:28:7a:57:06:77:
94:5f:15:59:7f:a5:be:f0:37:7c:d6:af:35:56:75:
f1:ec:8c:e4:f3:85:c5:2a:a2:b8:fa:b5:7e:db:c9:
f7:a0:dd:99:8e:48:68:89:6e:f5:94:9d:59:bb:09:
2b:6f:01:24:78:87:88:74:b2:d6:82:61:6a:30:ff:
94:3e:b1:eb:f7:e0:d1:4c:9f:1e:39:13:24:48:ba:
2c:f6:da:ca:c4:f0:06:1c:0c:3f:82:fe:ae:56:81:
20:24:58:12:40:ac:f4:a2:9b:78:8f:6f:36:a8:8b:
3c:20:ee:14:2b:9c:f3:28:08:27:13:93:f1:2a:4e:
33:b4:b3:f8:d1:ba:a6:60:eb:cd:63:6f:09:8a:b7:
4e:93:d3:06:32:1c:b0:e8:00:0f:53:68:39:ee:cc:
30:f1:27:ff:ea:56:de:0c:6e:19:e5:1f:4e:70:29:
74:27:76:ac:0e:45:e4:95:77:cb:31:d7:cb:df:bc:
80:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:0D:31:41:77:30:00:61:2E:DF:94:F6:B1:42:8E:B5:10:7B:67:F0
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/OQ0xQXcwAGEu35T2sUKOtRB7Z_A.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:2f:18:fc:c0:21:a6:a0:17:66:ee:b0:d3:a6:97:50:d6:85:
6a:2b:64:10:2d:d5:0e:c0:c9:ca:6a:64:f1:2f:8e:8b:28:5a:
45:0c:59:31:45:4e:08:1f:22:0d:58:e7:08:c1:9f:68:56:9b:
a7:c5:a2:84:f4:c4:75:fa:40:88:cd:2d:71:d6:b0:27:1f:11:
39:1a:61:92:4b:c9:b3:36:f6:d9:ff:1e:6f:fd:82:e2:5b:e6:
6a:f5:ac:b6:db:9c:b5:c1:01:ca:85:8e:2c:bf:92:ac:72:24:
32:71:a1:03:a1:d0:1d:1d:57:2e:5e:e9:0d:64:d0:19:5c:30:
0d:7f:34:81:67:64:6e:46:e0:01:a2:2b:91:11:75:04:ad:61:
2b:8c:03:34:d6:57:21:42:d0:c1:80:37:29:6b:8a:86:08:aa:
fe:74:fb:e6:e8:b3:38:f9:41:d2:2d:11:5d:31:ab:d2:5d:33:
30:8c:c3:e1:01:4f:61:ae:c3:20:d5:8a:f6:10:78:23:09:6d:
67:a8:e3:43:f4:93:c0:7a:69:53:9e:14:10:37:05:af:5f:54:
45:4a:5d:a6:c3:f6:bf:9e:5b:ce:0b:6c:9f:92:c2:b2:d4:a8:
14:8f:e8:e1:8b:54:b9:b3:bc:ba:90:a7:af:a7:e9:d5:9d:92:
1c:cd:14:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org