Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/_wAQfV2Ux5_WE_1hL-x8d6vABlE.roa
File: _wAQfV2Ux5_WE_1hL-x8d6vABlE.roa (raw, json)
Hash identifier: b7OaPS9phtloi0XnzdrCkOy1hA2NCmKCJrUbpWRkKgY=
Subject key identifier: FF:00:10:7D:5D:94:C7:9F:D6:13:FD:61:2F:EC:7C:77:AB:C0:06:51
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 45CC
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/_wAQfV2Ux5_WE_1hL-x8d6vABlE.roa
Signing time: Mon 04 Apr 2022 00:30:07 +0000
ROA not before: Mon 04 Apr 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17868 (0x45cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 4 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=FF00107D5D94C79FD613FD612FEC7C77ABC00651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:63:34:2e:3e:54:6b:cb:6d:d4:bd:49:8d:2e:
56:a8:b8:db:48:21:11:cb:c4:92:ff:50:af:5d:74:
e1:3e:be:bd:bb:e6:bd:39:82:f0:8e:72:1f:84:42:
d6:96:57:5d:1b:db:8d:6b:6e:2f:86:90:71:3c:2c:
31:b6:13:e0:e9:4d:88:79:5e:02:63:94:e2:61:e5:
e4:ff:57:26:d0:4f:81:12:72:3e:88:a4:bf:b6:b8:
b5:1c:3c:c6:07:7b:56:f9:a6:79:05:59:c4:ea:ed:
4c:f5:51:69:7c:b8:77:e8:67:1a:67:3c:96:db:0e:
48:44:dc:34:20:a3:f0:2e:86:fd:d8:99:96:7b:23:
9e:2a:cb:18:78:6f:a8:a7:22:37:8b:97:eb:96:5b:
94:9c:de:29:93:88:60:ca:26:6f:4b:23:83:35:87:
34:4f:34:8f:d9:3c:5a:59:4b:4f:94:08:6e:51:6e:
bc:49:c6:07:a1:2a:dd:18:eb:52:ac:89:20:2f:cb:
65:82:f6:d9:05:9b:ad:39:75:b4:47:a5:c8:4a:86:
ef:ea:54:b4:da:5a:96:9f:f8:61:49:e6:a9:f1:88:
16:a9:7f:5f:5c:70:e5:df:f7:a1:48:0e:dd:f7:a2:
e2:95:78:8b:b8:9f:9b:13:2e:b0:77:0c:ea:47:7e:
40:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:00:10:7D:5D:94:C7:9F:D6:13:FD:61:2F:EC:7C:77:AB:C0:06:51
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/_wAQfV2Ux5_WE_1hL-x8d6vABlE.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:00:38:2e:ad:46:65:7b:79:c7:bc:3c:04:ee:b6:fb:61:09:
e7:99:6b:8d:86:b3:4b:0e:38:1a:22:73:02:94:59:6e:94:f9:
7e:49:3b:6a:d1:56:ad:37:86:1d:fe:b0:f7:62:e7:b2:07:76:
39:37:fa:df:f9:e0:e8:ab:04:b0:1b:1f:fb:dd:de:23:cb:2e:
75:46:98:08:75:e9:0a:e4:14:4b:05:26:4d:91:88:67:1f:5e:
b3:87:c8:4b:8c:bf:d3:bd:03:3c:8e:00:8c:4d:22:03:13:8a:
52:a9:53:9d:39:64:74:7e:83:33:63:1d:d5:a0:2f:1e:09:be:
db:70:2d:86:c8:5b:a2:83:05:e4:f1:42:b5:b6:a5:e7:4b:ca:
67:ee:a3:79:65:b9:f5:b7:98:31:b9:db:9b:a8:5d:0d:b6:4b:
29:2b:2c:b4:e5:52:7c:7f:b2:e1:0d:1c:2e:72:bc:b4:60:84:
95:58:40:36:fc:2a:d3:07:01:d7:ba:e1:e6:52:11:46:e0:02:
95:7d:10:0a:39:fc:f0:c6:04:ec:8c:f9:19:53:75:c0:ae:05:
de:f0:23:00:7e:22:5d:1f:fe:6c:c5:1c:3b:87:d8:3b:cf:33:
c0:d1:17:a8:91:ee:fb:d5:0c:e9:39:1d:db:48:8b:c3:d3:92:
26:70:2a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org