Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/cO8k0DuK-AQwaoW-b_9_64DwL0E.roa
File: cO8k0DuK-AQwaoW-b_9_64DwL0E.roa (raw, json)
Hash identifier: TepuDlJB2LqkD4Zi9b0jzihIDi4Y1j3giUOEJpqePRY=
Subject key identifier: 70:EF:24:D0:3B:8A:F8:04:30:6A:85:BE:6F:FF:7F:EB:80:F0:2F:41
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 480A
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/cO8k0DuK-AQwaoW-b_9_64DwL0E.roa
Signing time: Sun 15 May 2022 00:30:06 +0000
ROA not before: Sun 15 May 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18442 (0x480a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 15 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=70EF24D03B8AF804306A85BE6FFF7FEB80F02F41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8b:f5:78:f4:62:8c:ca:0c:9c:0f:a7:ca:d4:
31:d9:81:eb:dd:43:63:4b:1b:53:5b:12:db:06:87:
19:3f:3b:ac:97:ef:a1:de:38:4a:cc:2f:bb:20:ca:
4f:eb:07:dd:3e:ee:3b:05:b0:4a:5e:d0:72:f4:59:
71:91:a5:8b:77:48:90:74:39:d5:58:36:a8:a4:b9:
d7:62:14:93:c8:3b:41:fb:22:8e:9a:f2:1e:fc:9e:
34:67:d3:76:f3:c7:a7:07:bb:31:c1:d3:0b:d2:a2:
ef:69:82:df:ee:27:df:d4:9e:c6:a2:a6:75:87:50:
a3:01:3e:db:ad:85:b1:da:0f:84:d3:02:bb:0a:46:
3e:7c:84:1f:96:c2:de:0e:41:cb:f9:32:ef:8c:2e:
a9:8b:60:e2:6a:77:e3:65:b8:57:4e:b9:20:c5:84:
90:16:c6:23:a2:74:2d:76:90:e8:51:ec:83:79:9e:
c6:e5:53:f5:ad:3d:01:77:54:3d:e4:50:1e:6e:27:
76:bf:56:e1:80:3e:e1:5f:03:ed:9b:67:d8:be:db:
e5:57:9c:2e:99:65:b6:72:08:1b:9b:26:9e:7f:24:
24:f5:6e:18:9b:56:67:23:75:1b:4b:93:1f:da:4e:
22:44:ff:bd:00:0d:dc:a0:d9:3b:51:69:c4:57:bd:
6c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:EF:24:D0:3B:8A:F8:04:30:6A:85:BE:6F:FF:7F:EB:80:F0:2F:41
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/cO8k0DuK-AQwaoW-b_9_64DwL0E.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
83:65:5a:30:5b:6e:e6:b4:13:51:85:22:59:fe:f9:b5:c1:be:
bb:8a:49:f2:cb:a6:f6:3c:35:83:4e:dd:dd:ad:c2:ed:52:1d:
15:4f:f7:10:80:44:b9:d7:1d:70:8f:69:f9:af:f4:07:de:d9:
19:af:86:87:c8:2f:6b:38:a5:45:92:4d:c1:6d:63:4d:c5:15:
87:ea:6a:82:91:a1:a0:d4:d8:c3:59:df:95:8c:fa:6e:07:f1:
5b:be:0f:17:e3:9c:de:c4:ce:bd:67:53:6a:ec:b5:91:b7:e8:
f0:d2:b4:22:17:2e:0c:04:a7:1b:00:cb:7b:d9:01:da:00:c1:
ac:c7:23:9e:bb:84:54:88:1e:2c:73:2d:fe:b3:50:27:e8:09:
9f:1f:b4:45:68:e7:82:b0:43:eb:0d:8b:e7:f8:5a:42:89:f8:
3f:48:5b:73:a8:16:ed:ae:87:2d:75:5f:e7:fa:24:19:e7:29:
4d:76:58:af:1b:2c:f1:90:4c:24:27:d1:f4:56:78:7b:c7:73:
50:c6:3a:cd:f3:3b:9f:d7:cd:d7:c4:be:a4:11:16:f0:d1:62:
ad:af:d1:f6:70:5a:b8:56:0f:67:76:52:c4:95:ad:a4:9a:87:
b5:0c:73:86:94:b0:b5:a5:75:c3:66:bb:40:d3:f2:87:9f:a9:
45:8d:f6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org