Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/QrY9LpAGrRrYqaSZ9qCU8PXy93A.roa
File: QrY9LpAGrRrYqaSZ9qCU8PXy93A.roa (raw, json)
Hash identifier: PB3WeJEwGYq2XxI2tBWGgxIdrMVVci8Cffzon/Xooqs=
Subject key identifier: 42:B6:3D:2E:90:06:AD:1A:D8:A9:A4:99:F6:A0:94:F0:F5:F2:F7:70
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 477E
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/QrY9LpAGrRrYqaSZ9qCU8PXy93A.roa
Signing time: Thu 05 May 2022 00:30:07 +0000
ROA not before: Thu 05 May 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18302 (0x477e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 5 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=42B63D2E9006AD1AD8A9A499F6A094F0F5F2F770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f2:4c:20:39:6f:1f:a4:34:ae:84:4c:a7:c4:
ed:a0:1b:51:8b:b3:8a:8e:ac:ae:fb:67:d8:9b:6d:
d5:ce:88:dd:e3:41:80:42:46:5b:0d:0e:d5:4f:29:
a0:8e:7c:7c:31:37:dd:3a:49:c3:d7:32:f8:a4:11:
7e:82:4e:8a:c9:51:cd:a7:0f:89:b3:58:cc:ae:76:
b2:58:72:68:57:a6:a0:f8:be:f3:2e:ca:c1:d7:22:
02:31:e9:87:fa:9f:e0:52:9b:95:68:e5:fc:f9:1f:
26:02:88:d2:8c:bb:38:6b:d4:1d:56:a1:51:92:27:
46:56:fe:88:c8:5d:d0:d1:79:60:cf:1a:5a:cc:eb:
18:eb:6d:3f:df:c1:f6:8b:a8:3e:b3:cd:85:ec:22:
9c:5e:1a:a3:24:25:4a:ec:75:be:d2:2b:69:af:98:
39:10:13:d7:27:e5:11:41:e6:9c:49:9a:40:a9:38:
ff:b5:29:5e:e3:9a:11:5c:61:a0:31:93:5e:72:d7:
a7:2c:ed:38:30:e1:79:fe:c2:e5:7f:1a:51:33:5b:
9d:45:42:89:b5:6f:bc:87:fc:c6:ec:92:d5:cd:c5:
c9:6e:9c:77:63:2d:e5:5b:da:d7:31:65:c5:3f:2b:
2c:c5:6d:e6:a8:bc:8a:a5:2d:ca:5d:d5:b5:b8:9e:
cf:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B6:3D:2E:90:06:AD:1A:D8:A9:A4:99:F6:A0:94:F0:F5:F2:F7:70
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/QrY9LpAGrRrYqaSZ9qCU8PXy93A.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
af:32:81:af:6a:73:5b:46:57:3a:0d:43:f6:07:ed:59:9d:51:
7e:79:1a:86:7d:44:6f:b8:45:da:41:39:7f:51:1b:48:ea:b8:
be:db:8e:cf:dd:76:41:e5:d3:87:4f:f9:c8:f3:3c:e7:18:29:
de:94:2f:fd:58:0b:64:32:63:83:2d:a2:8a:04:e1:1b:b6:44:
36:3d:b5:53:1a:c3:cb:ef:7a:05:55:56:f3:44:e2:5d:97:4b:
a9:7c:ad:48:27:fb:d2:25:cd:d7:e1:65:be:bb:d8:09:56:1a:
ce:1b:0d:e7:2a:fe:c7:56:45:f5:f9:2f:09:5d:08:e7:9b:45:
32:1c:5c:6e:63:35:b4:6b:a9:99:56:ce:d8:e7:86:ca:1a:7e:
e0:8e:57:72:a6:15:92:da:31:a7:1d:a3:61:7a:7a:6d:26:a3:
1a:61:c5:91:1f:7e:74:3d:08:80:b1:b0:2a:77:ac:71:72:84:
0e:8d:e7:8b:5f:d0:8c:9f:4d:14:65:27:34:c6:63:b3:c6:c7:
b5:63:5b:e7:7e:a7:bc:eb:2d:53:dd:d9:91:f4:8d:8c:7b:11:
bf:7e:e6:05:b6:2e:05:14:9c:f4:6f:36:93:72:52:2e:eb:ff:
4b:6d:9f:ef:72:65:5a:48:ad:cc:42:8c:d9:fd:89:28:c4:f4:
3b:62:28:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org