Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/UIeBuhGGw7sA4Nij-5Z51x242cQ.roa
File: UIeBuhGGw7sA4Nij-5Z51x242cQ.roa (raw, json)
Hash identifier: c7DO38HIwpHu4AVWb7t0A98EErcAoFkjtts6mET3d20=
Subject key identifier: 50:87:81:BA:11:86:C3:BB:00:E0:D8:A3:FB:96:79:D7:1D:B8:D9:C4
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4589
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/UIeBuhGGw7sA4Nij-5Z51x242cQ.roa
Signing time: Wed 30 Mar 2022 00:30:10 +0000
ROA not before: Wed 30 Mar 2022 00:30:10 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17801 (0x4589)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 30 00:30:10 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=508781BA1186C3BB00E0D8A3FB9679D71DB8D9C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6a:c6:be:b7:2a:67:77:f7:0d:13:7e:5e:21:
2e:5e:a8:d6:eb:29:ca:58:ca:e4:a8:3c:21:18:e5:
7b:d3:d3:0d:ba:38:60:41:2e:9f:78:32:cb:53:b3:
74:1c:a5:d4:56:ae:71:0a:aa:93:39:a7:c4:c0:2a:
9d:f7:1d:13:7b:19:cf:a9:86:77:bc:fa:9c:c1:92:
95:20:4e:8c:cd:2d:68:a5:43:be:13:45:f7:c1:9b:
06:3f:6c:81:6e:ec:47:f8:fa:6f:6e:1d:1b:89:f7:
20:d6:e4:ce:9d:dd:57:23:4d:15:40:5b:bb:06:1c:
3f:6a:56:28:79:57:5c:62:39:a6:41:cf:7e:57:31:
f5:ac:da:c3:35:d0:a5:39:2a:38:78:21:d7:c4:cf:
ad:8b:0b:1d:f8:35:26:a6:fb:a9:96:3e:a1:a1:86:
84:ba:bf:74:77:4e:63:2b:00:75:7a:b4:8d:eb:4c:
f3:8b:c7:36:e0:0f:33:23:39:39:4e:fe:ef:34:d2:
88:b6:05:2c:51:00:4d:a2:93:62:ae:80:95:4d:4b:
13:c6:35:7a:98:f1:60:98:77:a3:e7:4b:44:59:bb:
37:71:22:30:a6:1c:52:1a:a3:9d:08:96:52:f1:93:
8a:3a:08:ac:f7:54:6b:3e:42:ce:be:2f:72:7b:59:
75:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:87:81:BA:11:86:C3:BB:00:E0:D8:A3:FB:96:79:D7:1D:B8:D9:C4
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/UIeBuhGGw7sA4Nij-5Z51x242cQ.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
27:55:49:5c:b0:78:1f:a6:00:f8:66:db:62:29:18:19:66:d5:
eb:62:38:a9:25:57:2d:42:7c:d1:d2:f4:25:20:69:7a:5e:27:
80:fa:62:7a:de:f9:1c:95:be:c9:76:75:ad:69:cc:b2:45:65:
dd:c1:bf:78:c7:ef:7c:0f:5f:c8:ed:56:6b:0d:24:41:88:c4:
a2:03:2d:75:53:b0:28:e8:f2:6e:77:e2:cc:45:11:26:b8:9f:
b7:30:39:23:a2:03:4d:10:ca:81:63:11:e6:db:a0:8a:11:30:
91:31:84:02:d7:8c:1a:26:25:70:73:ef:83:55:cf:ee:25:43:
91:fe:54:8f:6c:45:6b:20:fb:6a:3d:f8:84:a0:1d:bb:f2:70:
5d:be:1b:17:9f:db:40:d0:05:07:05:34:53:05:cc:04:0e:3d:
c6:ad:4c:d3:ae:43:5e:c1:04:21:32:47:a5:65:3c:14:8f:6a:
2c:b3:be:d2:8d:4e:75:1c:04:b9:9a:84:40:26:6d:3c:a5:d6:
2f:50:65:72:9e:30:87:96:2f:f9:d8:ea:09:9f:0c:7c:bd:b0:
3c:01:e1:83:64:e2:e9:33:74:c0:c7:99:3a:8f:5f:2d:3d:80:
d3:e6:62:57:b9:41:99:d1:74:05:b7:20:a7:13:5d:4e:bc:36:
e9:33:b1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org