Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/cOboNDA-5xO1621ltqnLPXrG-UE.roa
File: cOboNDA-5xO1621ltqnLPXrG-UE.roa (raw, json)
Hash identifier: 2bA/Sd6EA8bB2eWYuxHk4XsoBmz8acWjX7F6/E4uc/c=
Subject key identifier: 70:E6:E8:34:30:3E:E7:13:B5:EB:6D:65:B6:A9:CB:3D:7A:C6:F9:41
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4948
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/cOboNDA-5xO1621ltqnLPXrG-UE.roa
Signing time: Sat 04 Jun 2022 00:30:07 +0000
ROA not before: Sat 04 Jun 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18760 (0x4948)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 4 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=70E6E834303EE713B5EB6D65B6A9CB3D7AC6F941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:33:9e:4e:ed:c4:c6:20:3e:31:09:82:df:3a:
c5:ab:bd:ed:02:e5:42:ff:5b:86:57:ff:1d:29:47:
ad:59:2d:04:99:d0:07:19:28:49:cc:2f:ad:8d:6b:
ce:cc:aa:74:a8:1e:3c:9a:0b:3d:be:48:ea:80:72:
61:ec:47:71:ce:1c:0f:3e:65:36:07:84:fb:cf:8a:
09:43:dd:46:fc:fa:4d:69:7e:5a:09:c0:60:62:03:
ba:00:86:60:df:e9:52:86:9b:7c:80:fb:1f:53:4b:
b3:e5:75:8f:db:aa:50:90:be:68:91:34:86:0a:e6:
e1:3c:20:e8:9d:64:69:6a:57:2f:37:41:ab:9a:35:
bc:00:d7:a7:8d:48:e5:08:34:8d:ed:bc:51:12:b1:
29:be:c6:2a:36:c4:44:d0:23:17:21:54:2c:4c:be:
88:a2:3f:64:65:1a:29:33:49:af:fc:ad:ca:ba:a4:
ae:63:9b:c5:a9:b7:fe:80:9f:04:d6:fb:7f:9e:90:
79:3d:32:b3:2b:24:2c:d4:31:29:f5:07:cf:f0:84:
d0:d0:4b:b9:04:6a:7e:fb:1f:6d:3d:8b:41:d1:a1:
75:4b:f5:8c:f1:81:36:ea:63:e4:f8:5f:eb:0f:4d:
cb:60:c4:24:3d:99:a5:01:61:08:13:e0:f7:a4:0c:
05:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E6:E8:34:30:3E:E7:13:B5:EB:6D:65:B6:A9:CB:3D:7A:C6:F9:41
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/cOboNDA-5xO1621ltqnLPXrG-UE.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
55:e6:e1:12:22:a5:18:3d:8f:a6:bf:b8:50:c1:30:66:b5:b9:
72:4d:23:4e:fa:fe:36:82:5e:1a:c1:92:19:b8:10:dd:4d:e2:
aa:8f:38:c8:60:41:3c:37:7c:73:dd:2d:39:66:8b:90:68:cf:
cc:64:77:e5:8a:05:30:9a:e7:3a:59:e1:6a:9d:8a:75:9f:d7:
3f:e7:b0:33:36:aa:fb:47:b6:eb:40:fb:2d:45:5c:5e:11:14:
40:53:05:19:a0:20:06:26:b4:34:9f:0c:c2:f0:80:ed:36:7a:
e8:5a:b0:6c:95:f5:d4:22:0a:90:96:93:de:6f:b9:d2:9c:ba:
0c:50:6b:80:31:83:cc:19:4f:e2:ab:22:8a:a4:b0:b1:a3:f7:
72:62:30:d2:fb:d6:0a:57:26:b8:b0:9b:0f:e8:62:c2:95:63:
c0:ed:01:f2:0c:e7:df:c3:47:57:4a:bc:fa:04:33:e5:1d:42:
c7:99:b3:55:f4:db:f1:59:b5:06:9d:af:b4:0b:12:d9:29:ac:
91:f4:95:f2:0c:98:8b:30:cd:e2:34:0c:d2:a1:56:ad:3e:48:
24:f3:6a:d4:7d:c8:64:b3:6c:b7:95:cc:a5:ad:52:c9:3c:51:
c2:a2:9c:25:46:cb:87:35:88:32:fe:0b:4b:fd:61:69:0f:62:
d9:5c:ed:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org