Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/Wa5jiHtbzF2o-Ts8DSX2Aj7jOQ4.roa
File: Wa5jiHtbzF2o-Ts8DSX2Aj7jOQ4.roa (raw, json)
Hash identifier: U9D9CNGKXEAC1CZD0pG7qf/HSUNexW4v8qRMlG66+DM=
Subject key identifier: 59:AE:63:88:7B:5B:CC:5D:A8:F9:3B:3C:0D:25:F6:02:3E:E3:39:0E
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 48B2
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Wa5jiHtbzF2o-Ts8DSX2Aj7jOQ4.roa
Signing time: Fri 27 May 2022 00:30:08 +0000
ROA not before: Fri 27 May 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18610 (0x48b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 27 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=59AE63887B5BCC5DA8F93B3C0D25F6023EE3390E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:22:26:37:81:00:74:26:cf:41:3d:f8:e5:be:
9a:c9:d4:75:f3:ac:ad:b8:0e:c4:45:41:1e:52:ec:
d0:4f:ce:1e:dd:b9:e4:fc:d7:b6:a7:e5:25:27:5e:
f2:8d:d2:bf:ca:6a:e3:1d:cb:84:41:6e:14:23:3b:
5a:8b:8c:26:a9:14:66:41:fc:c2:c9:bc:f8:bc:e7:
c5:65:78:7b:f5:cc:d5:92:52:02:24:f5:17:40:32:
c2:57:af:e3:9b:b8:e8:63:e0:49:ee:bd:13:e7:b5:
a8:ca:ba:c5:99:30:95:f8:cf:5a:76:a2:6f:e0:03:
73:89:a3:d2:73:d3:3b:e9:3b:ba:4e:d2:05:ae:2d:
ae:a1:f9:e6:71:dc:09:80:67:b2:84:6e:f3:fa:f9:
96:84:61:40:5b:21:9b:39:67:1b:15:2f:33:07:19:
96:57:0f:b8:81:2e:73:b4:2f:b4:32:74:e7:04:0a:
70:0c:96:d2:83:31:0c:9a:fb:f0:e0:71:02:88:1f:
fd:d0:a6:e3:20:76:21:4a:63:49:d4:32:2a:f0:a5:
d6:1f:bc:50:e5:09:a3:3b:ec:6f:fe:19:cf:3e:21:
66:2c:e3:26:51:27:ab:32:4e:8a:eb:19:fa:71:c6:
ab:59:aa:f9:d9:e8:cd:18:ff:1f:b9:24:d1:1a:22:
6f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AE:63:88:7B:5B:CC:5D:A8:F9:3B:3C:0D:25:F6:02:3E:E3:39:0E
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Wa5jiHtbzF2o-Ts8DSX2Aj7jOQ4.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:73:fc:a5:8b:5f:ae:8a:cc:97:1b:01:75:ee:52:2d:39:78:
cc:e4:b1:70:09:4a:05:17:26:1b:59:4a:06:24:73:5c:f5:0d:
2b:ed:e8:5f:fd:ff:1c:00:bc:d4:8b:09:e4:2b:56:95:43:6f:
13:e2:5d:e5:e8:86:75:b2:e2:c4:4a:74:0f:48:fb:ec:4f:f6:
15:3f:80:cd:cc:75:81:e6:a4:95:b6:64:10:8a:b3:18:7e:62:
57:cb:50:e1:af:bd:f9:2d:31:b3:74:f0:ff:35:31:5a:9b:59:
6d:eb:94:0c:37:fe:b3:cf:20:6f:22:e3:07:8f:28:f7:45:af:
a4:29:66:f2:ea:d6:81:f6:cd:a1:80:7b:be:02:68:66:04:93:
3c:d6:4f:3b:2d:3c:d9:75:23:bc:76:02:50:c6:07:e9:2c:3f:
d5:cc:4f:73:c1:15:4c:65:a0:57:60:3d:0d:cf:50:af:62:71:
30:4a:d0:e0:48:e4:77:34:04:30:8b:2c:35:c1:e9:1c:b8:7e:
87:91:db:39:54:eb:35:d6:83:99:d3:f0:88:80:0c:55:ca:a5:
c7:2f:6a:e3:62:24:c3:fb:46:fb:c1:d5:77:05:81:6e:d6:e0:
76:0f:81:6e:71:58:b8:a9:de:a6:37:7f:9b:d6:50:13:8e:a3:
b2:7c:ae:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org