Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/iDLcOqYKM2V4AE7X5geBxbnMXlY.roa
File: iDLcOqYKM2V4AE7X5geBxbnMXlY.roa (raw, json)
Hash identifier: 8KsWNLcAJCggcbUfYgvi81CGtnCj0ODcaJN7+jGasw4=
Subject key identifier: 88:32:DC:3A:A6:0A:33:65:78:00:4E:D7:E6:07:81:C5:B9:CC:5E:56
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 46F6
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/iDLcOqYKM2V4AE7X5geBxbnMXlY.roa
Signing time: Mon 25 Apr 2022 00:30:08 +0000
ROA not before: Mon 25 Apr 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18166 (0x46f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 25 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=8832DC3AA60A336578004ED7E60781C5B9CC5E56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1c:9b:c1:b8:28:7f:7c:f0:7c:99:bc:64:7f:
2a:3a:52:63:7c:71:8f:27:31:0f:c9:2c:da:b1:9e:
fb:25:f9:e0:74:9f:6e:97:80:7f:e9:4b:f8:60:78:
dd:96:50:a1:46:f2:0f:fc:65:19:bd:a4:72:ac:2c:
f9:29:82:07:ad:ce:0f:b6:16:68:94:db:e4:c2:ce:
94:30:11:32:f8:94:07:b3:9e:11:8b:52:a4:be:f3:
ba:06:e6:e1:b4:4a:10:3d:94:3e:33:83:dd:b8:d7:
ed:ed:4d:19:5f:2f:2c:da:b2:f6:4b:94:e6:5c:04:
08:14:91:6a:61:a1:8b:f4:ec:82:88:0f:08:f9:26:
23:b0:88:45:d7:51:3e:08:11:c9:ba:4d:b1:6c:90:
3c:e0:9e:f6:6f:a6:52:00:13:fc:3f:33:f8:22:e1:
57:2f:aa:90:7d:05:0b:f4:27:bf:f6:e5:b9:df:5a:
65:51:34:ad:27:18:6e:72:67:13:ca:08:23:6b:82:
31:47:96:89:e6:0f:89:72:62:bc:7c:7b:c7:32:61:
dd:aa:7e:83:80:0b:a6:d4:3d:1b:92:9a:46:7a:97:
c0:c7:59:11:ad:5d:b5:8c:34:9a:0b:33:24:35:0d:
0d:6e:36:4b:9f:a2:18:5b:d7:0d:03:96:26:9c:91:
bc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:32:DC:3A:A6:0A:33:65:78:00:4E:D7:E6:07:81:C5:B9:CC:5E:56
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/iDLcOqYKM2V4AE7X5geBxbnMXlY.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
53:e8:ab:0e:66:6c:46:2e:33:9b:10:c1:61:99:a6:b2:b7:33:
52:7f:f3:e6:df:9c:06:3e:05:da:35:b3:de:4a:77:0a:35:90:
ee:94:f9:93:17:ed:2e:63:18:13:42:49:19:5e:07:22:40:ec:
e3:64:10:3f:c5:7e:5a:e8:63:b2:0d:ee:17:a6:d5:ff:af:88:
ef:da:24:81:60:f0:81:55:02:90:32:4f:4e:8d:d9:77:78:a2:
95:66:bc:01:f3:65:46:86:08:1b:7e:23:08:db:e4:60:12:3b:
08:e0:df:92:b0:7a:b2:08:ac:9c:e6:54:5f:3c:c0:95:bf:fd:
2e:4b:01:23:ef:be:8b:8e:6e:7f:96:c7:9e:b3:35:4f:98:2b:
3c:40:89:0f:98:cc:0b:f7:f6:df:59:4b:d4:02:ca:4c:89:73:
d9:50:eb:01:cc:7a:77:d7:42:92:51:72:50:fb:10:87:5e:8b:
57:14:68:0d:83:84:fa:30:e8:04:57:fe:93:6b:fc:ed:b1:49:
17:4f:f6:3b:3d:b8:0d:a4:01:f9:30:32:8d:7c:14:4d:d5:1e:
bb:f5:fc:ba:d1:7c:14:7b:d0:c6:5f:47:2f:ea:28:c7:47:5b:
30:c0:3c:e1:10:b1:f0:b5:9f:04:ce:8d:8e:82:8a:33:e3:98:
fc:57:72:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org