Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/bXyjPhme2OBOkIeEf1wrOIt4C4M.roa
File: bXyjPhme2OBOkIeEf1wrOIt4C4M.roa (raw, json)
Hash identifier: qfPl06XGolpQvEUHeJYoVkVP4tx1qGGz263CNp4euNU=
Subject key identifier: 6D:7C:A3:3E:19:9E:D8:E0:4E:90:87:84:7F:5C:2B:38:8B:78:0B:83
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 454D
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/bXyjPhme2OBOkIeEf1wrOIt4C4M.roa
Signing time: Sat 26 Mar 2022 00:30:07 +0000
ROA not before: Sat 26 Mar 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17741 (0x454d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 26 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=6D7CA33E199ED8E04E9087847F5C2B388B780B83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:30:b6:c5:f4:dc:8a:eb:3e:e8:d6:8d:ad:24:
bb:94:84:5b:17:ec:9d:76:5a:6d:f0:22:e1:1d:de:
41:fe:30:dc:34:a6:35:6b:e8:8b:f6:80:11:55:c8:
d3:6f:a4:28:a7:c7:e3:1c:c7:99:76:21:37:75:5e:
73:09:25:a5:7e:e7:40:5f:7c:f9:2a:4b:16:38:13:
7d:32:f3:9a:a1:c5:03:3e:bb:87:4f:4e:8a:1d:3d:
82:6d:96:48:48:9f:fa:25:b7:94:65:2b:01:ee:36:
76:c8:ad:c3:66:f9:22:66:e4:81:2b:ce:6c:a9:6e:
50:e4:06:45:f7:34:0e:bf:24:2d:e0:8f:a7:e7:9f:
73:a6:94:a6:90:dc:0a:d9:50:c5:ef:39:4b:4b:2d:
70:41:84:c7:ad:07:0f:5c:fe:53:a7:80:40:4f:a0:
78:b1:8d:e1:51:ed:ae:7b:fb:ee:ba:3d:b7:d2:8a:
cc:48:d2:61:85:ff:80:03:42:b3:e5:96:e6:78:e6:
08:74:09:8a:01:5c:7e:67:5d:d3:98:3a:b0:f9:7b:
65:9f:30:6b:09:e8:ea:c9:2c:06:0f:ae:47:ba:61:
4b:4a:0e:c1:0c:2e:e9:75:2f:a3:71:5e:43:b8:5d:
50:06:69:e6:ea:05:08:93:c6:27:83:a3:03:9a:5a:
95:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:7C:A3:3E:19:9E:D8:E0:4E:90:87:84:7F:5C:2B:38:8B:78:0B:83
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/bXyjPhme2OBOkIeEf1wrOIt4C4M.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
58:95:09:33:2e:4c:05:95:df:a3:75:5e:8a:2b:4c:09:8c:22:
55:02:47:b1:20:57:0f:18:ae:c6:6c:30:23:11:07:ab:15:bf:
ba:37:7d:6a:1f:13:03:8d:c5:0e:4f:34:73:bf:1d:54:8c:b5:
61:b8:93:c2:92:7c:78:42:e5:cd:33:df:93:c7:7d:a1:a8:bf:
25:68:32:99:bf:b4:36:36:63:2b:1e:6a:d1:e8:cf:0c:48:44:
40:38:f2:b2:b6:3c:54:81:fe:90:f4:47:d6:50:1f:3b:f7:5b:
56:09:07:4a:ad:ac:a3:80:71:39:a8:e6:16:57:3c:28:80:fb:
f9:44:49:3d:b6:ea:44:06:f6:85:44:55:09:24:de:12:3e:88:
f3:a2:14:16:31:b3:df:52:42:be:14:74:3d:8a:5e:06:e2:82:
50:db:5d:d3:9c:f3:b3:31:17:1a:96:32:12:0c:10:b0:e2:11:
67:6d:be:90:12:e9:26:8e:d1:58:11:d0:7d:c4:2c:56:39:a4:
71:78:0d:23:79:65:08:f6:88:b8:be:e8:ab:29:2f:33:61:1d:
ad:83:5e:bd:3c:29:60:e2:fb:78:46:fc:63:a2:3a:ad:d9:21:
29:dd:4a:93:3d:57:d9:a4:72:ae:fd:ac:f4:68:93:66:c9:f1:
74:09:cc:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org