Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/Vehoef_lSWQfzB9vVuvXTzHmp7o.roa
File: Vehoef_lSWQfzB9vVuvXTzHmp7o.roa (raw, json)
Hash identifier: Hz+7gA2Vg23NMRWnUt3joISy/jURRjLaXrTFFKI94KY=
Subject key identifier: 55:E8:68:79:FF:E5:49:64:1F:CC:1F:6F:56:EB:D7:4F:31:E6:A7:BA
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4389
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Vehoef_lSWQfzB9vVuvXTzHmp7o.roa
Signing time: Mon 21 Feb 2022 00:30:07 +0000
ROA not before: Mon 21 Feb 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17289 (0x4389)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 21 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=55E86879FFE549641FCC1F6F56EBD74F31E6A7BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8a:5d:e8:75:4d:e6:77:d9:bd:37:de:41:ce:
7f:65:b1:f3:91:53:b8:52:1b:b8:de:cd:89:87:f8:
82:93:d9:61:49:94:55:90:84:72:04:6a:ce:6a:8f:
0b:e6:1d:9b:ce:4f:8a:e7:bb:ac:61:5d:19:ed:0d:
46:ab:14:39:bd:9c:18:21:7c:19:04:53:bc:45:e8:
bf:c9:47:90:ac:46:c9:7d:1f:53:91:70:39:2f:5b:
af:72:ee:22:14:c5:62:30:dd:47:33:77:07:41:de:
6e:ff:2e:9a:cd:44:b5:37:f9:17:d0:5d:b4:cf:f8:
bf:83:88:3f:16:a6:50:6d:e6:2c:d9:e2:26:c6:b1:
7a:1e:f0:d7:55:f9:a6:14:92:fb:a4:0e:09:1f:d6:
2f:67:b5:44:26:ab:5f:7a:64:4b:2f:26:ae:b1:51:
14:ba:6e:53:a5:d3:52:50:3d:eb:78:6f:9e:84:19:
94:8d:88:38:04:8a:b2:84:00:dd:cf:21:43:8c:97:
8f:42:bb:df:7f:2f:4d:43:dd:db:a5:9c:24:4a:64:
a9:93:50:21:48:a5:28:8b:0f:f1:72:5b:95:e1:5f:
15:00:6d:83:b7:af:7b:e2:a4:f7:bc:19:75:2e:3d:
6a:5e:f3:a1:6a:19:01:e5:47:8d:ae:08:ef:5b:50:
57:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E8:68:79:FF:E5:49:64:1F:CC:1F:6F:56:EB:D7:4F:31:E6:A7:BA
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Vehoef_lSWQfzB9vVuvXTzHmp7o.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
92:30:11:40:86:9e:be:70:92:bc:fa:b1:45:a9:2d:e5:7b:8f:
c7:03:20:9f:d1:c5:5b:38:c1:2d:73:82:58:ea:8b:3e:41:0a:
47:d3:76:3b:46:fd:fa:1b:ee:d3:4a:2f:e7:51:58:1a:7a:e4:
32:86:c7:49:48:6a:3d:92:91:4f:57:15:69:84:3f:30:24:86:
a5:47:85:9c:72:67:82:76:44:05:4f:03:ae:a9:a2:e4:ea:f1:
8a:5d:58:b3:9e:a7:4e:a1:31:98:c2:af:7b:fc:bb:a1:a4:71:
6f:23:5a:2c:cf:7c:8c:d4:2d:cc:8d:94:a2:ff:b3:cd:52:6a:
ca:13:f6:2f:a6:eb:c7:ea:71:98:1e:11:a9:34:ec:15:55:c1:
47:4c:6b:4f:ed:1a:85:f5:76:d1:2f:85:ef:6b:36:e7:5c:59:
f7:78:dd:3c:cc:f0:de:0b:76:43:e9:0e:bb:1c:e5:f5:1e:f0:
36:fc:e5:d0:35:94:50:4b:c1:c1:ba:c7:6f:31:27:d4:62:61:
b9:e2:71:db:64:62:82:43:6f:05:a4:ad:9f:a8:7a:49:83:ed:
a0:3f:87:b6:36:d2:74:e4:e9:c3:00:4e:73:60:2f:e9:b2:49:
25:46:be:c6:8e:ea:87:8e:88:d8:c8:53:37:66:a5:74:77:8e:
76:69:65:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org