Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/YBdOz1cxyq0f894f6C9mu-695dg.roa
File: YBdOz1cxyq0f894f6C9mu-695dg.roa (raw, json)
Hash identifier: aCa51X3Bs33yd4HUdl+vPwscddX41oq+XMHYo71rT3E=
Subject key identifier: 60:17:4E:CF:57:31:CA:AD:1F:F3:DE:1F:E8:2F:66:BB:EE:BD:E5:D8
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 44F9
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/YBdOz1cxyq0f894f6C9mu-695dg.roa
Signing time: Sun 20 Mar 2022 00:30:19 +0000
ROA not before: Sun 20 Mar 2022 00:30:19 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17657 (0x44f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 20 00:30:19 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=60174ECF5731CAAD1FF3DE1FE82F66BBEEBDE5D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e1:5a:ec:f2:24:ef:3b:5c:80:0d:c1:62:ff:
d5:cb:c7:39:44:ff:3e:0b:30:92:c8:9b:b2:02:57:
1f:06:97:7a:66:73:6e:1e:a8:d6:ed:a5:ad:4c:42:
4f:23:49:2a:95:6e:84:c0:82:d0:73:28:c1:d3:30:
c1:65:4e:3e:fd:b8:25:92:e8:f1:67:da:75:59:ad:
e6:0d:cd:04:61:4b:a9:ca:85:9e:91:2a:c8:b8:f2:
24:21:57:1b:16:24:79:d6:6a:37:be:9b:e1:2c:44:
af:57:8c:d1:df:eb:ec:a2:bb:39:21:f0:90:d8:e4:
20:70:40:ef:1c:56:a4:4a:be:dd:99:2e:b8:b1:b4:
de:22:c8:6c:61:e1:2b:11:f4:18:21:27:7c:ca:32:
82:57:b7:6c:1c:73:c8:10:c2:68:67:a1:80:6c:89:
bb:7a:7d:46:8f:38:2e:bd:36:d8:08:48:33:89:de:
c4:24:e7:01:3d:28:42:cb:13:46:a9:72:8f:44:fb:
7b:5d:05:f4:d4:69:1e:25:a4:12:93:16:59:a6:48:
f0:8e:99:90:f8:0f:eb:38:7e:6c:32:70:ea:c0:2f:
f8:f5:74:4d:e8:ff:3a:e2:d3:7e:ab:62:18:18:45:
68:f0:fe:42:b0:9c:9f:08:5b:b2:97:f8:ff:ba:be:
64:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:17:4E:CF:57:31:CA:AD:1F:F3:DE:1F:E8:2F:66:BB:EE:BD:E5:D8
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/YBdOz1cxyq0f894f6C9mu-695dg.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:1d:ad:37:77:d2:0f:78:e2:61:66:1d:bf:54:11:49:fd:f9:
bf:98:aa:80:fe:d5:31:32:c4:9f:ff:2d:cb:32:94:97:9e:89:
32:71:5e:ec:ea:e2:e9:b6:4c:83:51:34:3c:f8:05:04:52:e0:
95:60:58:f3:50:a7:13:60:56:8d:32:67:fc:25:8f:4f:bb:b5:
dc:1d:b2:e4:52:63:af:69:30:ee:b6:be:b6:da:1d:0b:e1:58:
7f:80:b2:86:2e:44:cd:93:38:0e:4f:2d:de:6a:8c:43:d0:57:
d4:f8:55:52:af:2b:9e:58:2e:96:93:ef:98:da:dc:46:a6:54:
cb:cb:da:c2:7b:2f:b2:8f:4b:c7:65:89:33:98:2e:92:ac:09:
f3:39:a0:7e:69:4b:89:4f:c8:aa:fd:be:76:4d:a2:cb:49:e7:
8a:54:78:41:a4:e2:28:f4:34:0a:73:5d:5c:73:a5:6d:a9:83:
50:2f:ce:14:93:26:b9:58:0f:82:54:52:b3:35:13:1d:1a:8c:
fd:b3:fc:2d:d3:27:07:98:ef:6d:f6:54:3c:c6:c2:93:83:0d:
ab:47:bb:5f:bf:33:7c:73:af:fd:c8:73:c4:57:b6:ad:b5:24:
5a:63:e2:db:14:75:a3:99:1a:e7:02:55:ea:dc:41:97:56:5b:
81:99:74:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org