Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/VxZl9SQqRS_KyLSe_Ejqw06QXkA.roa
File: VxZl9SQqRS_KyLSe_Ejqw06QXkA.roa (raw, json)
Hash identifier: A5XIHeWcUXQg8XX7Ueg95fMDJpaOnZQDmIGfvuGcAyo=
Subject key identifier: 57:16:65:F5:24:2A:45:2F:CA:C8:B4:9E:FC:48:EA:C3:4E:90:5E:40
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4397
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/VxZl9SQqRS_KyLSe_Ejqw06QXkA.roa
Signing time: Tue 22 Feb 2022 00:30:11 +0000
ROA not before: Tue 22 Feb 2022 00:30:11 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17303 (0x4397)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 22 00:30:11 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=571665F5242A452FCAC8B49EFC48EAC34E905E40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:63:e1:ea:e9:72:b4:bc:12:a4:59:31:fa:cc:
a4:3a:bb:9e:fe:8b:2d:33:a5:0c:54:27:bc:a7:0b:
f2:63:9b:a9:04:e2:16:e9:36:5f:e3:39:0b:e2:3d:
c7:3c:33:89:58:33:9e:c0:0c:09:9c:68:32:40:1b:
87:4c:8b:a6:28:a1:f7:c9:e3:1b:8e:0a:03:8b:a0:
5d:dc:ff:84:d8:84:cb:38:8f:3a:be:50:be:bb:52:
bd:a9:b8:70:89:5e:f4:38:a0:dd:7d:8a:77:4e:0b:
6f:0f:05:d2:28:5c:15:60:79:f4:93:35:47:ef:4c:
26:80:e1:ec:56:8d:61:3f:61:30:ca:df:cb:8d:58:
2d:bc:19:7b:65:e1:96:eb:95:ef:18:f8:b7:06:cf:
38:d1:8b:5a:57:01:5a:d2:0b:41:db:6c:f7:12:d4:
f0:30:e3:93:d8:d7:b0:9c:48:29:0e:fe:f8:c8:68:
34:75:bd:7d:c0:ee:fd:77:2a:9c:67:08:76:c0:a0:
1b:c7:24:a6:21:97:2f:39:0c:7a:df:86:c4:e8:c7:
3f:49:e3:d1:10:7d:e3:b4:fd:a4:ae:ca:6b:c4:13:
c6:51:36:ee:b8:ce:5f:f7:aa:19:5b:71:8a:e1:36:
13:de:26:e7:04:ed:af:e6:c2:00:c4:bd:73:21:5f:
6f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:16:65:F5:24:2A:45:2F:CA:C8:B4:9E:FC:48:EA:C3:4E:90:5E:40
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/VxZl9SQqRS_KyLSe_Ejqw06QXkA.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
01:20:d5:3f:e1:da:59:61:b3:d4:82:6d:12:91:a7:80:35:29:
50:92:75:b8:9e:d7:f2:db:76:9e:53:43:0b:ed:3b:94:75:d6:
b5:6c:2f:87:c6:f8:0d:0c:e9:61:d2:10:89:6a:10:02:e8:40:
87:19:9d:43:27:3d:40:22:3f:51:40:47:1b:24:9c:e1:8f:2a:
63:bf:9d:eb:58:b6:9d:39:df:88:95:9b:6a:cd:cb:ba:5b:37:
79:9a:00:b9:cb:72:28:59:a1:a8:82:9c:0d:9c:d3:b7:86:d5:
a8:35:bf:1c:85:12:a4:ec:6c:67:aa:d2:7a:e6:03:ee:5d:3c:
f1:9f:3c:02:2e:8b:78:70:39:77:eb:f4:a6:b2:a1:fd:3d:79:
a2:3c:ce:d8:d9:55:95:c6:df:fa:6c:07:3e:af:b4:42:5f:5d:
32:6f:9b:da:37:ad:b7:16:61:3c:6e:a9:29:a6:c2:45:bc:41:
07:d6:55:3e:c9:5b:93:45:32:dd:10:4a:42:93:2d:8d:e1:7d:
c0:c0:63:50:a6:fe:3c:f7:bc:0d:11:bf:7d:6b:f8:21:6d:cc:
f0:81:f2:04:e2:9e:cf:dd:cb:61:2d:d7:be:f2:30:62:1f:7a:
6c:be:39:5a:16:f0:3c:32:05:9f:9a:0f:91:a4:07:25:f0:db:
13:fb:05:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org