Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/PqEjk7JMKc1IYmeBv2zgbM3po10.roa
File: PqEjk7JMKc1IYmeBv2zgbM3po10.roa (raw, json)
Hash identifier: 7+WpkmoXT/UnlQC/k0y/s6DnwkewGSqNmsmACiO60+0=
Subject key identifier: 3E:A1:23:93:B2:4C:29:CD:48:62:67:81:BF:6C:E0:6C:CD:E9:A3:5D
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 46BA
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/PqEjk7JMKc1IYmeBv2zgbM3po10.roa
Signing time: Thu 21 Apr 2022 00:30:08 +0000
ROA not before: Thu 21 Apr 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18106 (0x46ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 21 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=3EA12393B24C29CD48626781BF6CE06CCDE9A35D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9d:e6:50:6e:fc:67:f4:40:42:24:cc:69:54:
27:96:86:bb:59:81:e3:08:93:58:e6:85:b4:a2:a5:
c0:a4:00:08:80:82:cd:64:6b:6e:7f:fc:f6:cb:f5:
e4:b7:0e:c4:7e:03:3e:85:f5:b8:b6:0d:99:23:d9:
33:1e:2c:35:6b:4f:ab:72:a4:aa:ff:36:77:9c:74:
ba:a0:1e:7e:eb:8d:81:ed:99:4e:f0:4d:3d:38:31:
23:65:48:31:2f:b2:88:c2:10:62:13:18:93:77:67:
b2:3c:14:9c:33:fa:57:9f:42:dd:3d:1b:be:c9:0b:
48:bc:2d:2e:05:22:f0:3f:36:3f:68:58:0d:9c:86:
47:32:32:dc:6f:c8:8c:b2:60:f5:84:3b:eb:02:a8:
36:61:d5:cb:6b:99:d5:36:83:14:37:f4:26:7e:9f:
0b:b5:6e:65:37:1b:7c:52:8e:d1:e5:a9:35:11:3c:
f9:f2:9f:ae:01:1d:36:5c:82:c4:d2:c7:2a:7c:18:
33:c4:cc:1e:37:5f:31:63:3e:08:b5:e2:8c:68:bd:
90:17:4b:37:82:28:aa:97:d0:0f:0b:97:32:f6:ec:
1b:a2:a4:19:66:d6:fc:9f:dd:06:ba:2c:b3:39:f3:
5b:59:3e:fa:9e:a9:7d:2e:a1:67:49:35:9a:cb:ab:
b4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A1:23:93:B2:4C:29:CD:48:62:67:81:BF:6C:E0:6C:CD:E9:A3:5D
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/PqEjk7JMKc1IYmeBv2zgbM3po10.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:80:85:c1:63:cb:36:70:fb:07:e2:db:b3:5d:d9:54:2e:95:
ce:3c:3d:32:0b:dd:62:f7:6a:a5:7f:95:7e:c4:73:87:6b:6e:
d3:16:10:68:2d:64:2b:06:f0:c4:8d:f0:2b:01:34:3a:e3:9a:
a5:85:ef:e0:5d:40:60:3d:5c:c9:c4:8b:d9:63:5c:9b:3e:8d:
58:2d:32:97:ba:05:3d:12:e4:8e:c6:c5:c5:ba:63:fb:e9:16:
dd:46:fe:15:52:27:e9:1f:54:6a:70:ca:51:bb:ad:c6:d4:2e:
03:a1:3e:2b:bc:90:f5:9d:5e:f2:a1:67:f0:2e:eb:96:4d:06:
df:76:aa:a6:4a:2e:f7:33:64:db:b9:27:18:b7:4c:87:79:41:
33:56:70:c6:1d:36:6e:fc:b1:e4:5f:cc:a9:86:1f:dc:e2:28:
d0:06:0f:64:c3:22:c6:b6:4f:ce:23:42:8b:3f:80:f0:27:59:
bb:e5:09:04:3c:75:20:e1:f7:7d:5e:23:fe:b1:29:57:97:8f:
1d:90:52:69:4b:a5:e8:56:ed:b2:3c:90:5a:7b:27:3e:e3:d7:
3b:3c:0b:c3:24:02:6e:e0:53:7c:11:2d:80:b3:5f:f5:12:cb:
46:e0:c7:f1:2d:c1:06:6e:e5:d7:49:bf:6a:73:3e:09:3d:2e:
62:d8:57:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org