Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/a_-qvEfrbqckXcAX5cX4MAaQFHA.roa
File: a_-qvEfrbqckXcAX5cX4MAaQFHA.roa (raw, json)
Hash identifier: Q1zpokkmkylvMql4M1hPyMswwHuQj2S9x5nnvTwTmIM=
Subject key identifier: 6B:FF:AA:BC:47:EB:6E:A7:24:5D:C0:17:E5:C5:F8:30:06:90:14:70
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 488C
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/a_-qvEfrbqckXcAX5cX4MAaQFHA.roa
Signing time: Tue 24 May 2022 00:30:08 +0000
ROA not before: Tue 24 May 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18572 (0x488c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 24 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=6BFFAABC47EB6EA7245DC017E5C5F83006901470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:11:0a:51:1e:c3:d6:a1:da:dd:22:a3:c1:3f:
4c:55:7a:6c:0b:ef:85:74:11:c6:b2:d0:15:c2:e8:
9f:e2:1b:b0:43:50:ad:8a:56:a7:7c:68:be:a6:12:
f7:0f:e8:38:22:db:68:f4:fc:d8:90:29:f1:39:67:
9a:d9:63:d0:d6:35:5a:95:63:56:2d:99:3a:8a:9d:
cc:36:e2:a0:66:2c:96:66:6f:56:21:ae:20:7f:42:
d6:82:08:d4:5d:31:ae:5b:03:a1:74:3f:7c:f5:da:
bf:c6:fe:46:c3:bb:d3:2e:dd:f1:9b:c4:f5:6a:36:
25:2d:30:6a:08:5c:65:a3:e7:68:5f:e4:ac:e5:a0:
4e:4b:7e:32:84:3c:c0:34:b3:e6:b5:2b:09:d0:98:
6b:09:5a:07:2d:fe:91:25:2c:c2:53:b1:c3:7c:18:
63:45:8c:f7:4b:db:07:ff:28:c4:04:f6:de:1d:5f:
39:a5:ca:cc:44:db:49:a2:7a:d8:a0:62:77:97:2a:
62:35:6d:51:9a:ab:f5:27:dc:3b:16:5f:d8:8c:b5:
d3:57:9d:0a:74:40:32:e7:5c:fe:a9:fe:af:85:fa:
67:6a:dc:14:f7:25:69:6b:33:8c:dc:9e:5a:cc:ff:
2f:dc:d3:15:b4:1e:d7:0d:85:4d:b3:55:b6:8c:ec:
07:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:FF:AA:BC:47:EB:6E:A7:24:5D:C0:17:E5:C5:F8:30:06:90:14:70
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/a_-qvEfrbqckXcAX5cX4MAaQFHA.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:c8:6b:98:48:e3:9a:a9:3a:f6:58:41:65:d0:4c:4f:7e:9e:
69:78:51:5b:8c:c3:0d:47:7f:2d:d1:14:8d:09:f6:46:ff:10:
1e:55:93:86:50:b6:3d:fd:57:44:07:8f:d6:ae:d3:33:c3:6f:
2a:e5:46:ed:ba:65:7d:46:57:67:64:13:f7:67:e1:9a:2a:98:
93:4d:c6:fa:e5:0c:d4:2f:79:25:42:03:30:d5:28:51:6a:61:
03:fa:18:d4:bf:00:23:9c:4d:7d:af:a5:27:bf:e2:13:93:56:
3f:41:15:2c:e0:3c:de:00:bf:7a:56:4c:91:57:2c:5d:49:72:
e2:0a:3c:11:f3:d6:3c:60:bd:43:27:53:d6:a6:9f:6f:da:1f:
e6:98:e6:1a:43:60:6a:02:ea:9f:92:69:70:0d:00:a4:a4:4f:
2b:7c:29:ad:f9:a6:b8:33:40:ec:19:a6:51:6f:d4:15:5b:99:
86:0d:d0:65:66:14:78:31:c8:6b:a4:38:b1:fd:a2:07:fe:6d:
1f:96:11:07:00:de:de:84:bd:0a:45:08:24:3c:77:84:60:eb:
89:2c:d9:d5:a9:39:19:ab:ba:15:c3:52:e3:97:a1:77:45:cc:
69:a5:01:ec:1f:ae:4c:b5:87:0f:c7:03:ea:f8:2f:34:b2:09:
e4:dc:31:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org