Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/jPBxTudzc4gSj9zpkOe3Du1ipNw.roa
File: jPBxTudzc4gSj9zpkOe3Du1ipNw.roa (raw, json)
Hash identifier: VlXUFIEey6X55XzFjDMBPMHShI9Vn63oCyae0pSCgw4=
Subject key identifier: 8C:F0:71:4E:E7:73:73:88:12:8F:DC:E9:90:E7:B7:0E:ED:62:A4:DC
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 48EC
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/jPBxTudzc4gSj9zpkOe3Du1ipNw.roa
Signing time: Tue 31 May 2022 00:30:08 +0000
ROA not before: Tue 31 May 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18668 (0x48ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 31 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=8CF0714EE7737388128FDCE990E7B70EED62A4DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6c:b6:9d:7a:d4:0c:8e:04:90:b5:f5:f7:df:
6f:0b:b4:37:0c:ad:01:c5:32:fe:26:f2:76:7e:6d:
45:02:da:8d:61:eb:3a:26:e2:e0:ca:77:3f:57:cf:
2b:78:60:d7:48:2b:e9:28:33:71:52:25:37:f2:c4:
0c:e3:f8:7c:be:a1:00:3a:81:48:f2:67:4f:b8:76:
1a:6e:ac:36:88:a4:c7:71:5c:72:c9:68:44:ee:c4:
bd:52:10:aa:2a:46:24:02:47:a9:1a:02:16:ab:34:
42:94:2a:a1:03:a1:66:68:58:40:a8:fa:c9:f6:21:
75:64:91:af:9b:c5:44:40:ee:83:01:03:93:a2:44:
33:c3:6a:14:a9:49:ad:c3:ab:0e:e1:16:db:25:20:
19:d5:63:b0:7d:36:3f:30:dc:b5:5c:2a:30:19:c4:
00:ec:f9:4f:2e:0c:f3:18:a5:4e:3a:34:2a:9b:60:
ba:e0:e4:85:3a:05:cc:42:b7:21:83:a7:6c:94:75:
f7:75:75:c5:f1:20:11:5a:78:4c:6c:7c:ea:2c:0d:
6c:91:d4:8a:d2:0d:e6:05:a9:08:f8:88:36:87:ff:
e0:10:4e:58:a1:2c:f2:eb:2b:aa:78:38:14:07:44:
41:ac:77:b2:e2:d8:1c:a5:d6:01:38:0d:1a:2d:47:
eb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F0:71:4E:E7:73:73:88:12:8F:DC:E9:90:E7:B7:0E:ED:62:A4:DC
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/jPBxTudzc4gSj9zpkOe3Du1ipNw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:60:84:77:4a:67:be:ae:42:e0:57:c2:5e:fd:08:31:79:bb:
e2:3a:5e:62:f1:3c:13:a0:b7:7b:05:34:e3:0c:8c:1a:96:23:
0b:0b:08:ad:11:9d:c1:c6:97:9b:59:f3:30:5b:e4:29:e2:f9:
7d:3a:98:8a:7d:a8:89:4b:e5:02:e9:7f:f4:36:0e:6e:80:d6:
7c:c9:24:28:bb:84:cc:ff:7f:8f:d9:07:33:6f:56:ec:98:ac:
e6:26:0a:a7:d8:01:45:a0:77:58:62:10:80:f6:92:51:3a:c4:
61:2a:08:8f:62:8b:e5:d6:6f:59:ff:9b:cf:2e:a3:9b:ee:4b:
2e:6c:b7:2e:4f:b5:03:62:db:4b:a4:ff:4d:8b:5d:c9:3d:95:
9e:c3:50:f1:4b:5a:1c:4c:68:ce:e1:00:3d:a7:77:a7:f6:c9:
e6:10:02:5f:e0:09:39:0d:7c:98:94:94:0e:e3:1e:1a:5c:4b:
6c:ca:af:8b:ec:d6:53:88:02:2a:e7:a1:52:92:a8:80:fc:06:
5d:a9:e5:ac:03:8a:8a:e1:5f:2b:af:48:86:da:14:78:93:0a:
b3:34:cb:5e:65:61:09:6f:59:30:73:7d:24:a7:00:fe:4a:65:
99:e5:77:bc:2f:51:7b:e6:19:ec:66:cc:05:f9:06:49:54:fc:
d1:fa:a0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org