Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/TS0PF1Sp2VJdISspfeSG--R7uLY.roa
File: TS0PF1Sp2VJdISspfeSG--R7uLY.roa (raw, json)
Hash identifier: wDXy9EXtB7q9plVn19IKAMjLa8lWTwz+qT0Mypw3Dtc=
Subject key identifier: 4D:2D:0F:17:54:A9:D9:52:5D:21:2B:29:7D:E4:86:FB:E4:7B:B8:B6
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 47D2
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/TS0PF1Sp2VJdISspfeSG--R7uLY.roa
Signing time: Wed 11 May 2022 00:30:11 +0000
ROA not before: Wed 11 May 2022 00:30:11 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18386 (0x47d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 11 00:30:11 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=4D2D0F1754A9D9525D212B297DE486FBE47BB8B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4f:69:a3:9c:92:06:c9:cb:e3:08:08:a8:4b:
d4:01:e9:3a:69:fd:95:8c:ee:3a:90:96:75:68:7a:
8e:cd:4d:14:ad:45:d6:c6:36:a8:9a:4c:16:58:5f:
31:d4:28:76:89:99:f1:3c:99:9b:22:3b:53:ae:ab:
a3:09:d3:46:bf:1a:ea:9e:f8:91:a2:93:01:65:44:
29:59:d6:65:c5:95:3b:ae:56:79:aa:f0:b7:c6:03:
18:4b:1c:de:53:82:4e:a2:5b:7c:aa:ac:57:ff:6b:
60:37:28:9d:9f:a2:10:69:e5:b4:19:24:ec:90:2d:
a5:e0:ea:45:2d:9c:3c:fa:3b:df:58:b8:6a:61:5d:
2d:a8:83:69:df:1c:7b:18:f1:a2:d4:82:b8:7f:a9:
40:fc:cd:4c:5e:d7:fa:bf:5b:60:02:be:8e:43:8e:
a4:ea:b2:a6:46:61:13:95:67:7c:48:37:b3:61:44:
47:96:04:ec:95:5e:c1:65:e0:09:f9:32:42:12:19:
3b:56:de:6c:92:f8:f2:01:ee:4f:51:55:23:e1:0e:
83:7b:d8:31:44:09:69:82:0d:68:7b:e1:ee:a2:66:
2a:e9:24:84:56:ea:97:24:cd:d0:f9:bb:21:f0:66:
3c:75:3f:ff:74:c3:d5:69:ff:56:04:47:07:c7:6b:
ad:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2D:0F:17:54:A9:D9:52:5D:21:2B:29:7D:E4:86:FB:E4:7B:B8:B6
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/TS0PF1Sp2VJdISspfeSG--R7uLY.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
85:1a:3e:5d:f0:b1:e5:9b:c5:7b:77:83:de:26:45:3a:1e:ed:
be:b2:30:80:ad:4a:2e:d8:6e:fd:cb:10:7d:13:14:14:ff:c9:
37:28:71:76:bf:9c:d4:b6:46:6c:59:8c:5c:cd:43:c8:8a:46:
df:c4:5b:c4:f2:ab:02:7c:13:7f:97:65:1b:df:ba:00:74:f2:
6e:9e:de:1b:20:04:89:f7:76:0e:94:bd:7e:74:21:79:23:5a:
4f:eb:28:0a:2b:5a:14:ce:22:27:1c:d2:43:49:cb:f5:41:50:
88:ed:18:b9:f5:02:8f:25:70:ba:dd:d4:d1:d3:c8:d2:33:81:
7a:b1:ed:a4:d6:a8:61:94:a8:66:b0:3d:f4:54:9f:d1:ab:30:
a6:58:a4:47:e6:72:a0:9a:58:3f:68:d7:1c:60:1d:bb:77:db:
13:19:d7:66:be:7a:e0:6b:2b:0e:c8:44:b4:cf:a7:2a:9c:09:
70:7d:96:01:f2:c6:36:a7:4e:5d:ae:34:44:dc:57:e7:e8:30:
b4:6e:f0:5c:b0:f7:af:fb:e9:e3:a9:c6:ad:c7:7a:a3:fa:07:
6e:5f:57:30:f8:99:c8:f5:fa:92:da:d5:14:d3:8e:82:1a:78:
44:80:2e:eb:95:45:5a:ac:58:d5:39:28:4e:28:d1:88:78:01:
bd:64:43:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org