Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/j6-x9AeisXlh2BKXurYTp90xJJA.roa
File: j6-x9AeisXlh2BKXurYTp90xJJA.roa (raw, json)
Hash identifier: yZsF4gAdz4RCK/P3P0JxChRkhPSKt2ER7VuhLwPgryQ=
Subject key identifier: 8F:AF:B1:F4:07:A2:B1:79:61:D8:12:97:BA:B6:13:A7:DD:31:24:90
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 43BF
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/j6-x9AeisXlh2BKXurYTp90xJJA.roa
Signing time: Fri 25 Feb 2022 00:30:10 +0000
ROA not before: Fri 25 Feb 2022 00:30:10 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17343 (0x43bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 25 00:30:10 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=8FAFB1F407A2B17961D81297BAB613A7DD312490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:48:d4:0f:67:b3:3f:13:56:65:e6:0e:62:4a:
4b:d0:b7:b8:87:da:93:f9:60:8a:f1:35:b9:45:c1:
d2:f8:a5:e5:76:bc:1a:b2:83:df:ab:40:ad:45:42:
1c:3d:da:29:e9:08:97:16:c7:4a:54:ad:1c:46:4e:
1f:fb:67:85:8a:de:77:ef:94:ca:bd:6d:69:13:47:
62:ec:ee:28:5d:d9:75:bb:a3:d2:72:07:65:db:2d:
43:76:7c:3b:b7:75:c7:16:9e:04:ed:f3:3d:59:11:
4b:28:0d:ec:d1:98:03:49:54:5c:e0:41:45:4d:04:
92:b5:1c:28:e9:44:17:a7:3a:17:94:3a:fe:0b:de:
03:d8:81:6c:bc:87:aa:c3:2b:49:fe:78:9f:d3:5f:
56:d2:54:5e:b2:c7:1b:d7:6e:af:d1:f8:79:38:ec:
12:21:a2:01:a3:42:c1:7c:0e:0b:c8:0f:c0:80:ce:
45:4d:b0:82:e2:ae:04:8f:e8:7d:31:61:b2:53:40:
87:27:ec:1c:16:3c:b8:cb:02:4e:f0:50:ad:5f:1e:
39:d9:07:71:fb:e1:49:d9:87:ce:9a:ac:f6:89:01:
9b:18:61:34:e7:71:5a:6f:ac:e3:e2:58:eb:34:13:
c1:80:76:d3:72:25:db:c3:d6:63:93:71:47:10:4a:
f2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AF:B1:F4:07:A2:B1:79:61:D8:12:97:BA:B6:13:A7:DD:31:24:90
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/j6-x9AeisXlh2BKXurYTp90xJJA.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
19:34:a3:5f:e0:f6:0d:63:5d:ff:c3:bb:d0:23:81:5a:c7:94:
fa:b1:93:eb:09:5c:15:4a:60:4b:f3:4f:2a:e5:6f:a9:59:a3:
89:4c:44:88:e0:ca:b5:cc:b8:3a:b7:91:66:4f:d2:1c:6c:7a:
27:92:50:04:57:29:2b:bd:c0:e5:25:1f:21:e9:83:ed:d7:44:
cb:54:34:9c:86:9a:af:a1:c3:71:96:a8:75:1e:6a:55:86:56:
18:6b:db:f6:31:12:68:02:8e:de:27:cc:32:0f:72:c8:3e:d3:
15:81:6b:02:f4:92:6a:47:bc:57:cc:ac:86:15:60:4f:c2:6c:
ee:d6:52:20:75:3f:ce:22:5e:a0:c6:b6:af:d7:b6:c7:dc:e2:
df:52:1d:5f:73:32:e0:77:f3:8e:1d:78:6f:3d:24:6a:76:4f:
21:84:07:10:32:9d:1e:a4:70:64:7b:7a:31:84:d5:6c:74:43:
7f:21:5d:1c:47:0a:fe:93:a9:04:77:b9:0a:dc:00:95:3a:25:
0e:dc:9d:96:4e:db:a9:79:50:39:96:ad:38:8b:f6:f4:97:1a:
ca:46:9b:25:4f:a7:c6:42:74:0e:40:05:f3:84:0c:0b:54:dc:
2b:52:f4:29:db:35:f1:43:38:e0:82:5e:af:17:34:44:0d:04:
b2:a4:fc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org