Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/S_E1Ac1ESSk8lhO1mvhT7N0Bjb8.roa
File: S_E1Ac1ESSk8lhO1mvhT7N0Bjb8.roa (raw, json)
Hash identifier: xh0zhka82fOv4XzLCcHtjwMie7mq4xaUgdtPRdzErOM=
Subject key identifier: 4B:F1:35:01:CD:44:49:29:3C:96:13:B5:9A:F8:53:EC:DD:01:8D:BF
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 47E0
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/S_E1Ac1ESSk8lhO1mvhT7N0Bjb8.roa
Signing time: Thu 12 May 2022 00:30:08 +0000
ROA not before: Thu 12 May 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18400 (0x47e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 12 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=4BF13501CD4449293C9613B59AF853ECDD018DBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b1:86:dd:72:07:d5:60:af:5d:53:cd:d6:ee:
d9:a9:a6:f7:2d:2b:20:d9:37:e3:ff:2b:db:e5:d2:
a8:f5:35:d3:e2:ab:18:bf:54:86:6f:b2:58:05:66:
3f:d3:da:47:cd:b8:f1:1a:47:86:54:d1:7d:4a:08:
76:a4:8f:32:8c:44:f3:a4:9c:3e:72:9a:bd:64:1f:
86:b1:19:50:fc:9e:43:eb:a0:e3:25:0b:bf:49:7c:
fe:7f:a2:ee:48:44:66:f6:54:c0:6f:2b:e8:3b:db:
4d:74:14:c8:33:74:fc:ba:6f:e3:0c:95:24:dc:ad:
3f:30:0f:87:64:a2:16:7e:e4:74:26:36:17:db:33:
8b:a5:15:96:92:03:d5:2a:5d:c2:1f:c4:af:03:5d:
a7:e5:12:1b:8d:cc:8d:6e:12:88:90:b3:d7:93:d8:
79:a4:93:45:8c:2f:32:34:57:34:24:b1:d4:3c:13:
1c:ec:49:93:3a:02:af:08:81:4b:8d:e0:f4:a8:75:
34:72:8e:cc:15:63:8d:83:a0:7a:19:c1:bd:04:4f:
71:14:22:73:3a:6d:c9:2c:4f:91:49:4b:6a:90:bb:
c7:99:c3:1c:75:39:9b:02:b8:32:47:fd:56:51:2f:
13:6b:00:c6:a1:71:b9:dd:fb:9a:b9:c0:66:c4:d9:
84:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F1:35:01:CD:44:49:29:3C:96:13:B5:9A:F8:53:EC:DD:01:8D:BF
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/S_E1Ac1ESSk8lhO1mvhT7N0Bjb8.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
63:bd:a4:de:25:43:10:84:ef:16:b5:1c:00:6b:85:c8:5a:01:
42:6c:c1:a0:3e:10:e4:49:8f:f3:31:ff:7d:52:29:e0:f9:35:
1d:d8:a5:8a:be:4c:a0:87:9a:69:35:87:02:6d:58:cb:b3:0d:
2c:d2:ee:f4:fa:db:3a:b4:ec:be:3f:1f:4e:21:99:72:c9:9c:
27:e1:ed:fb:05:ce:1f:72:a2:4e:f6:01:34:ff:53:0d:fb:97:
cd:d6:12:33:aa:ec:a5:07:91:d4:9f:94:73:8a:82:11:d1:fe:
24:84:19:37:bd:60:da:34:0a:b8:2b:77:93:e5:e3:36:b3:ea:
52:f8:07:4e:10:0c:15:fc:a5:f4:07:c2:7e:8d:a8:c9:33:4b:
b3:f0:21:81:08:32:fe:ce:7b:f8:d1:73:71:1d:3e:eb:0e:3f:
b9:85:c6:a7:12:ee:a1:9c:ee:5e:29:7a:20:17:77:93:d2:85:
90:12:3c:ff:91:44:db:61:b1:6e:6c:32:1b:a1:86:0d:08:eb:
ea:40:4c:cc:f5:b4:be:41:88:b5:91:f7:66:8d:fd:17:0a:2f:
8e:80:da:4a:5e:93:2a:b4:07:20:0a:92:a5:1e:2b:4f:f6:8c:
d6:5f:b3:ba:16:ac:59:81:10:51:56:76:f9:1c:7a:4f:e6:ec:
8a:03:5b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org