Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/a4PEvUHgTQU3wtLHUXqNH8J_4qA.roa
File: a4PEvUHgTQU3wtLHUXqNH8J_4qA.roa (raw, json)
Hash identifier: /9acCn4LX24UWOaTaFupdPm6oElBeGzpU3bLQS6/XFQ=
Subject key identifier: 6B:83:C4:BD:41:E0:4D:05:37:C2:D2:C7:51:7A:8D:1F:C2:7F:E2:A0
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 48A4
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/a4PEvUHgTQU3wtLHUXqNH8J_4qA.roa
Signing time: Thu 26 May 2022 00:30:16 +0000
ROA not before: Thu 26 May 2022 00:30:16 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18596 (0x48a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 26 00:30:16 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=6B83C4BD41E04D0537C2D2C7517A8D1FC27FE2A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f8:44:b4:9f:ef:1f:18:33:db:88:a3:ad:5c:
eb:ea:43:46:16:7b:48:2c:05:27:e0:df:86:eb:ad:
e4:07:6e:fa:f0:73:d3:9d:96:b9:65:54:96:2f:5a:
41:0d:58:65:4a:aa:65:08:77:12:62:f6:08:0c:27:
b8:e8:40:01:67:88:d7:37:2e:a2:cb:13:68:4b:d9:
53:f0:90:39:b3:72:1d:54:f4:ee:d7:93:c4:9a:54:
24:95:a3:f6:b3:e4:70:bc:39:24:48:dc:e0:17:8f:
1f:24:dc:21:b4:ad:53:d0:6c:ff:d1:37:5d:6f:f4:
08:08:7a:00:1f:6c:9d:11:59:77:c3:8a:33:7e:ea:
72:fc:90:f3:50:bc:3d:2b:d6:6e:74:40:20:1f:74:
14:85:25:cd:b8:8c:16:c5:5d:a0:32:8f:25:39:fa:
e0:28:a0:6b:fa:1c:c6:e7:6d:c8:fe:7e:f2:ef:a6:
82:aa:ff:65:27:99:15:87:34:79:f5:e5:5c:a3:62:
a3:f9:7e:1c:e9:d8:1d:be:da:c7:6f:4f:82:a8:5d:
9c:b5:e8:6c:e9:99:ea:15:2d:08:57:d1:86:a8:e1:
58:42:69:77:ee:62:1b:22:77:cd:bf:9e:8c:af:cd:
4f:7d:9a:5d:54:a6:bf:b8:19:07:c3:c4:5d:62:72:
ae:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:83:C4:BD:41:E0:4D:05:37:C2:D2:C7:51:7A:8D:1F:C2:7F:E2:A0
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/a4PEvUHgTQU3wtLHUXqNH8J_4qA.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:f4:91:ba:1e:0e:4a:47:69:93:f3:53:1a:f0:e1:e1:a0:0a:
02:17:9f:67:2d:d4:d3:c2:e8:f0:1d:7f:68:b8:31:f4:d4:2c:
10:e8:3c:cb:b6:22:69:98:b0:89:4f:43:67:ef:0e:17:97:8f:
8f:c0:67:dc:f7:a9:4b:16:42:14:34:d8:92:f7:f7:04:35:54:
bf:c0:81:27:66:34:c9:60:eb:08:19:a6:93:9d:89:7a:57:bf:
c9:35:11:bb:d0:10:bc:f4:75:12:41:8d:0a:88:d7:fc:fc:63:
36:6b:8f:96:7b:57:77:0b:26:5d:90:f7:ad:9b:8f:24:d4:51:
4a:87:27:bc:72:05:43:c3:48:3d:e7:e7:7a:81:d0:15:88:2a:
e5:ea:f1:ff:3d:5c:02:66:f3:d2:87:82:4d:41:44:b7:4c:89:
c9:e9:ed:2d:37:8b:2b:e5:0d:9d:c0:7d:1e:30:b7:c7:14:de:
16:3c:f3:af:82:1c:73:88:13:9e:31:ec:96:60:cc:4a:8f:1c:
e2:55:89:09:10:19:a2:a2:65:8c:af:51:2c:8b:70:ac:e7:e5:
0b:74:67:f4:71:2d:84:b3:4f:44:ab:6b:7b:5c:05:bc:4a:c7:
dd:7a:e2:9f:98:12:9f:2c:01:8c:5d:19:c9:19:fa:93:4d:44:
cc:6f:d3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org