Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/TnXdMIy2flzgKCBLGgkSXBmoiOw.roa
File: TnXdMIy2flzgKCBLGgkSXBmoiOw.roa (raw, json)
Hash identifier: BImyquErY/CmOPt66t4XMd9hgzUU5E5lwL6MOXzOd2A=
Subject key identifier: 4E:75:DD:30:8C:B6:7E:5C:E0:28:20:4B:1A:09:12:5C:19:A8:88:EC
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 426E
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/TnXdMIy2flzgKCBLGgkSXBmoiOw.roa
Signing time: Tue 01 Feb 2022 00:30:05 +0000
ROA not before: Tue 01 Feb 2022 00:30:05 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17006 (0x426e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 1 00:30:05 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=4E75DD308CB67E5CE028204B1A09125C19A888EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0d:dc:af:c5:5d:3d:3b:92:00:e4:55:0a:ed:
3d:78:dc:f0:91:72:e1:e7:2e:2b:54:58:f9:0b:f4:
c0:58:5f:c5:dc:99:44:e0:a6:2a:9a:16:b3:59:e7:
cd:37:5f:e0:2a:c2:84:24:84:9e:c8:73:87:2a:00:
4d:05:1e:4e:36:09:4b:b4:f4:bd:db:5d:7c:b8:07:
f2:41:b9:3c:66:5c:45:fb:db:94:f8:ce:32:e5:d1:
01:51:37:13:72:a8:43:de:21:59:7b:ae:52:37:4a:
6e:d9:a3:f3:f9:46:63:4b:9e:79:c5:f1:0e:44:dd:
5b:c3:c5:e3:bf:c6:f7:88:42:e9:48:ce:d8:4e:2a:
68:c7:dd:4b:40:58:76:e8:bf:dc:b7:10:20:b9:a7:
97:de:03:1f:bd:e0:ec:8f:e0:5a:ec:5a:e7:5f:7a:
1d:45:39:84:fc:bf:23:58:49:aa:a9:9e:0b:4e:65:
9e:96:61:06:9c:9e:56:53:af:5d:1e:5e:b5:fa:a8:
e7:ac:6b:40:ef:1f:63:1d:1e:4c:5f:35:03:6f:d6:
67:54:ae:9c:66:7a:21:f1:7f:2b:3d:83:b6:aa:fe:
2e:46:86:12:9e:8b:4d:8c:03:6f:3a:8d:7d:07:31:
41:59:d9:a7:09:c7:f5:8f:ed:4f:5b:b8:1a:9b:04:
84:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:75:DD:30:8C:B6:7E:5C:E0:28:20:4B:1A:09:12:5C:19:A8:88:EC
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/TnXdMIy2flzgKCBLGgkSXBmoiOw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
20:7b:1d:e8:d4:ed:2e:9a:7e:32:e2:5d:1f:d9:f4:a1:fc:8c:
1e:8c:b3:50:df:dc:95:9d:ba:37:c7:1f:f6:d9:ab:bb:d6:b6:
75:67:bf:76:79:4b:78:d7:5f:d9:2e:da:94:bd:56:f7:a5:4f:
eb:3a:65:a8:07:f3:2c:87:b8:ad:04:1c:5f:c4:84:a5:f9:f6:
45:c7:9a:f3:a2:2e:5a:ef:87:60:7a:76:41:a0:29:d5:d9:d3:
da:39:35:f7:d9:46:9a:2e:a4:48:f6:36:1c:50:37:26:c3:6e:
54:62:b1:d1:0d:49:ff:8f:bd:f8:83:96:c1:41:69:a2:63:28:
92:44:63:6a:a9:3c:58:78:96:d1:d5:9a:f6:d1:65:31:57:13:
53:64:03:ed:8e:48:97:10:82:b8:88:8d:9b:12:f0:85:40:1e:
6d:9f:8d:9f:94:d4:2a:5f:a8:12:38:5a:56:c5:9b:40:bb:58:
ef:b9:8f:25:51:82:cb:76:46:1f:bc:50:f7:c1:ed:d5:15:44:
1b:31:64:cd:80:a4:3f:cb:b2:fe:99:c7:1f:45:53:72:c0:0b:
9c:ef:e3:7b:ca:f9:1b:ac:19:ae:df:0a:37:ff:d6:ba:7e:98:
80:b1:38:25:b1:06:fe:91:3f:29:24:72:00:23:69:0d:32:ae:
bb:7e:b1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org