Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/eULM5pHPbenkNbbDqx8iHYC-kKk.roa
File: eULM5pHPbenkNbbDqx8iHYC-kKk.roa (raw, json)
Hash identifier: K9rztfeKfQlw8fGC1mUO0sKlQgqhcUrLLs8hpg55LZM=
Subject key identifier: 79:42:CC:E6:91:CF:6D:E9:E4:35:B6:C3:AB:1F:22:1D:80:BE:90:A9
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 45A5
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/eULM5pHPbenkNbbDqx8iHYC-kKk.roa
Signing time: Fri 01 Apr 2022 00:30:07 +0000
ROA not before: Fri 01 Apr 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17829 (0x45a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 1 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=7942CCE691CF6DE9E435B6C3AB1F221D80BE90A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d0:21:a8:1d:b4:c0:0d:7b:8d:1f:cc:61:6b:
b2:7e:9d:2c:66:cf:d2:4d:60:22:4b:7d:fe:99:ab:
61:85:8a:75:a6:ee:92:5b:0c:da:43:c4:d7:a7:e7:
ea:6f:96:d6:a6:f9:92:bf:bd:d0:68:17:89:9e:eb:
c1:ad:b1:90:92:f8:bd:6a:e9:b9:72:53:17:8d:5c:
21:b7:fc:fb:d7:64:55:d2:d9:ba:45:fd:42:00:93:
a4:7b:19:5b:6a:9b:eb:6f:63:97:5f:7d:b5:9a:bc:
2e:97:eb:a3:28:05:20:79:61:02:cd:4f:10:44:eb:
55:85:1f:db:f8:64:9f:54:41:69:97:66:9a:bc:71:
bb:f3:b8:ba:f4:d3:1a:12:1a:e7:38:8c:47:5f:cf:
d6:bb:05:3f:ad:e5:22:d0:b6:db:1a:1c:5c:a4:8b:
b0:94:3e:ae:93:37:75:d9:ec:7a:6b:5e:4b:0a:83:
f4:4c:ed:cd:19:44:50:96:0a:39:4b:ca:4c:c2:fc:
ca:68:8b:00:97:de:e5:36:eb:cc:fa:9c:7c:28:07:
c1:17:34:bd:b7:69:a6:59:aa:8d:a1:58:da:c0:be:
f3:62:41:6d:d5:e7:10:24:29:6f:0e:b9:b9:e2:04:
39:af:5f:9b:ca:5a:71:bd:54:b7:65:a1:32:56:2f:
34:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:42:CC:E6:91:CF:6D:E9:E4:35:B6:C3:AB:1F:22:1D:80:BE:90:A9
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/eULM5pHPbenkNbbDqx8iHYC-kKk.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
42:c6:a9:e6:03:04:2d:61:0a:e9:9b:f5:7c:bb:ba:8d:cf:9c:
f3:d4:59:1a:ea:aa:3b:6b:39:67:14:eb:5c:2a:04:7a:5d:64:
da:86:13:49:c5:cc:39:f0:13:65:83:55:d0:e2:6a:f9:9b:da:
4b:ee:69:4a:15:d3:1a:83:92:c1:4b:32:9d:0d:3c:44:ba:6c:
27:99:46:e9:fb:6e:e3:82:dd:ad:02:d5:3d:24:55:f3:a0:5a:
07:27:fa:ed:f8:12:9f:64:9b:71:70:db:eb:78:cd:84:9f:46:
30:f7:67:e7:16:84:2b:70:42:ca:da:69:17:95:9e:cd:a8:6b:
14:d2:3c:41:8e:41:98:a0:85:6d:9a:2c:54:82:9f:8e:4c:ae:
44:42:05:6d:86:f2:91:3f:71:96:4a:2e:e4:1f:e2:41:87:76:
97:cd:27:64:25:72:ad:46:07:82:a2:93:5d:6d:b9:02:1f:43:
1e:40:7e:3f:dc:ba:43:bd:a9:c6:57:72:98:a3:10:bb:6e:18:
bd:b7:27:38:b3:b2:42:f5:e5:1c:9d:bf:1a:a2:52:97:4f:e1:
cc:3e:04:74:c4:87:65:96:bc:db:27:4a:2d:8c:ae:25:fa:0e:
06:00:9c:4d:fc:ed:17:e0:79:e7:19:85:a0:e8:e5:75:9e:f8:
d6:48:4d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org