Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/S_KRT3d5if9grF15KB4OqGb8uX0.roa
File: S_KRT3d5if9grF15KB4OqGb8uX0.roa (raw, json)
Hash identifier: lSCBVb3cVtFEF6X6GAWQB1Z8MxVCOc8AxwUOdtsU7qg=
Subject key identifier: 4B:F2:91:4F:77:79:89:FF:60:AC:5D:79:28:1E:0E:A8:66:FC:B9:7D
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 479A
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/S_KRT3d5if9grF15KB4OqGb8uX0.roa
Signing time: Sat 07 May 2022 00:30:09 +0000
ROA not before: Sat 07 May 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18330 (0x479a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 7 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=4BF2914F777989FF60AC5D79281E0EA866FCB97D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7c:06:d5:cf:12:0c:8d:79:8c:81:8e:6f:11:
fb:67:71:be:af:22:5c:7f:8f:85:94:23:30:62:83:
e1:f0:f0:aa:22:4c:e9:c2:8c:61:4c:e5:0a:97:0c:
4f:a5:24:8a:12:57:71:c6:f8:04:36:4b:94:e2:1c:
1d:5e:1b:18:6b:0e:6a:e4:49:4b:e2:fb:f1:71:68:
ed:4f:23:cf:aa:f1:7c:b8:ca:2e:b5:a3:f2:c8:92:
3b:b3:b6:ee:19:45:c8:a7:7a:c2:eb:3e:e7:0e:35:
d6:b2:d1:13:35:23:7b:9f:a8:91:0f:f3:8d:45:5b:
68:ac:ff:9b:d0:fc:ff:59:84:38:d3:8f:21:38:ca:
89:77:4e:bd:cf:2d:ba:98:ba:e3:1d:b6:c7:07:1c:
2f:3a:f6:e3:db:61:95:eb:f9:0e:58:ff:59:53:ea:
97:d1:fa:5a:d2:e7:7d:38:c1:c1:05:63:a8:74:85:
8c:04:f0:98:a2:09:ad:ea:63:84:c6:49:21:22:7e:
7d:41:92:18:14:f3:6a:ba:ed:70:3f:5b:31:9f:4c:
d3:dc:5f:52:2c:14:f8:f4:3f:9a:a4:8a:ff:1f:14:
e3:7c:68:f6:53:9e:9f:de:0c:60:3b:6e:eb:15:cc:
6d:0f:0b:41:d3:8b:a4:04:ea:7a:c5:f1:36:a4:31:
f9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F2:91:4F:77:79:89:FF:60:AC:5D:79:28:1E:0E:A8:66:FC:B9:7D
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/S_KRT3d5if9grF15KB4OqGb8uX0.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:fc:22:c7:96:ec:3e:41:0b:53:a4:e4:b4:37:22:d5:36:65:
d8:e5:33:2b:c4:1c:05:52:11:16:4c:19:71:cd:5c:d7:3a:0a:
65:ed:1c:b0:76:ad:a9:c7:ad:d1:97:b6:14:c3:78:24:03:ec:
36:78:cf:4f:1b:5e:07:e4:c4:3c:63:e3:c6:70:21:fb:41:a0:
02:61:ae:3f:60:58:17:d5:ec:cf:ab:4a:d3:e8:b7:c0:e0:c9:
be:e7:a8:ed:52:02:60:f2:57:11:97:3b:da:51:e1:12:b9:6a:
a1:67:92:c9:5e:65:eb:dc:bb:a1:63:5a:c7:b5:f9:a8:67:93:
ec:e1:cc:6f:a8:54:57:7f:85:82:60:71:36:45:9f:57:0e:8e:
b6:64:a7:30:9e:fd:f5:af:1c:88:6c:73:3e:18:bd:ff:52:4e:
ce:87:f7:0c:ed:57:0d:7b:3e:a7:c6:89:75:6c:a0:ed:82:53:
f2:d6:ff:b9:49:c1:12:53:bd:5e:88:90:e4:f2:a4:dc:ec:b6:
3a:4c:04:61:fa:9c:71:7b:e0:cf:33:a4:f3:db:fa:f8:bc:a2:
3a:bd:4f:55:ee:f8:59:00:27:fc:db:4e:f2:c4:43:5e:f6:11:
d4:5f:99:1b:0c:a2:ea:a0:ee:f4:b4:07:ff:09:a9:33:cb:e8:
ca:6f:7c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org