Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/UDY_ckJ0k6YizsGKsMw9M-ITdcw.roa
File: UDY_ckJ0k6YizsGKsMw9M-ITdcw.roa (raw, json)
Hash identifier: e8Jxn1+jN8TBdpKi7quCT1F4N1lJ3424B4gZOeqt7dk=
Subject key identifier: 50:36:3F:72:42:74:93:A6:22:CE:C1:8A:B0:CC:3D:33:E2:13:75:CC
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4604
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/UDY_ckJ0k6YizsGKsMw9M-ITdcw.roa
Signing time: Fri 08 Apr 2022 00:30:07 +0000
ROA not before: Fri 08 Apr 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17924 (0x4604)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 8 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=50363F72427493A622CEC18AB0CC3D33E21375CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6d:fe:dc:ca:03:39:64:f8:22:31:35:eb:9a:
87:50:a1:81:82:45:70:c2:89:24:e4:10:d9:e1:e6:
b9:4e:3c:f7:be:8b:b1:90:66:4e:32:f4:2f:57:b6:
8d:f9:74:4c:76:ff:fb:68:14:40:f2:c2:43:f3:87:
3d:8a:f1:a9:94:0a:38:68:43:31:c1:3f:da:a0:9e:
66:05:66:a3:1b:4b:2c:8c:7f:7e:c8:d2:03:98:b7:
67:fd:40:f6:99:c8:18:f9:98:49:57:91:6b:14:db:
d0:82:28:bc:e8:9c:60:d0:83:fd:46:60:97:57:03:
31:3e:b1:ec:f5:ae:35:af:8f:41:be:a8:a5:4f:d1:
fe:97:58:81:f8:e0:ca:ec:4c:bf:b9:6e:b0:d2:d9:
b2:fd:01:01:09:c3:b7:9c:03:93:93:64:90:9e:1b:
1b:c2:01:96:42:da:d7:ce:fc:51:2a:68:70:67:c3:
ef:8f:37:b5:f3:8e:83:6f:5c:bd:86:77:27:1d:88:
62:d6:aa:b3:8c:62:37:8a:d9:5b:6e:27:fa:3f:4b:
34:b3:50:4d:60:4e:29:0e:3a:98:5c:42:6b:b6:ce:
b2:a1:ac:50:f2:60:88:0c:a2:64:c9:f0:fd:1d:21:
a2:dc:5e:7c:6c:95:94:e1:80:0c:86:be:59:61:90:
33:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:36:3F:72:42:74:93:A6:22:CE:C1:8A:B0:CC:3D:33:E2:13:75:CC
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/UDY_ckJ0k6YizsGKsMw9M-ITdcw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:cb:12:f5:8b:64:c8:f4:eb:7e:67:8f:7b:86:62:8f:1c:6c:
cb:21:e9:30:6b:96:73:d1:e0:21:95:dd:64:4d:c7:46:ca:84:
b7:c7:db:96:55:d8:f0:4e:13:b9:7c:60:7b:72:15:88:e1:28:
db:0c:88:bf:26:a8:34:04:30:de:bc:e0:5d:80:cc:5a:ea:ad:
37:07:44:94:ee:88:3c:b5:b7:8f:39:2f:f8:b0:c5:3c:b9:33:
2d:8d:ad:33:57:b5:ea:79:a7:91:1e:a7:dc:fe:08:a2:a3:56:
a1:5b:5e:5b:8b:af:07:6a:66:84:a2:3f:44:2c:b8:8c:d8:9d:
c6:73:99:83:7c:e2:44:24:01:d3:5f:44:f1:d1:11:a8:e5:73:
d6:b0:65:14:c9:18:a0:55:0c:47:5a:f2:62:b8:f8:9c:3f:35:
fd:da:0f:dd:20:59:cc:c0:79:f7:dc:55:9e:26:27:25:3b:49:
5d:91:69:cd:9f:9d:58:dc:5e:12:f8:79:ed:74:94:dd:a2:a6:
be:7c:1a:86:26:98:31:81:c3:9b:76:c9:f8:42:a8:db:e8:b1:
1d:5f:d1:2a:17:2d:fc:3f:9e:0e:d8:f9:f3:9f:08:41:b3:e0:
da:5a:7b:e3:18:58:a7:39:73:f6:c4:72:48:d3:f4:10:8a:c2:
88:36:f1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org