Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/kNOy-UVU0gEAcx9Lkk7wZsg_ImQ.roa
File: kNOy-UVU0gEAcx9Lkk7wZsg_ImQ.roa (raw, json)
Hash identifier: zuGb46QHqqRXrIodwcU/ddYrVpNEJR9sQ2cQF1RM5xI=
Subject key identifier: 90:D3:B2:F9:45:54:D2:01:00:73:1F:4B:92:4E:F0:66:C8:3F:22:64
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 482A
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/kNOy-UVU0gEAcx9Lkk7wZsg_ImQ.roa
Signing time: Tue 17 May 2022 00:30:08 +0000
ROA not before: Tue 17 May 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18474 (0x482a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 17 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=90D3B2F94554D20100731F4B924EF066C83F2264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:be:b3:1f:4a:46:13:e0:53:87:5c:d3:ab:8f:
05:4d:6c:e2:a0:39:4b:a7:72:97:a5:3b:b4:fe:61:
68:cf:bb:13:61:6f:cc:34:52:52:e4:7a:02:56:bb:
28:0c:7f:c6:87:ff:96:0c:08:d6:49:82:67:4c:f5:
33:fe:b3:52:e2:16:7c:06:f1:c1:c2:c0:c7:ce:69:
2f:7b:e5:52:90:ec:c6:5b:be:28:e4:19:14:04:19:
e2:ab:4e:6a:3e:a9:10:48:1c:6f:3c:0e:0a:6d:d9:
d6:13:ab:0b:39:48:5e:2a:26:f2:b9:b3:92:0b:5e:
b8:e8:a9:bb:c5:b3:21:c1:b2:a0:2c:2c:60:0a:b9:
23:a6:7f:1e:bb:5a:26:03:b6:0e:e7:f1:57:a2:15:
72:f5:29:af:f1:38:b9:61:cb:36:10:c7:9c:05:3b:
64:da:6a:1c:a0:cb:7e:a6:b7:62:8d:01:c7:6c:1a:
32:09:75:ea:67:61:ba:d5:0d:98:67:50:3e:a3:ed:
95:9b:d4:9b:8a:3f:4d:94:0b:ae:65:e2:e8:b1:af:
66:a8:08:6d:7e:19:a3:1a:3f:64:68:c4:b9:2d:ac:
fb:db:8c:ac:97:7f:46:3f:62:86:92:a1:31:a2:0d:
d8:e6:ad:22:f5:36:95:cb:7a:17:d1:d7:1d:0e:07:
67:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D3:B2:F9:45:54:D2:01:00:73:1F:4B:92:4E:F0:66:C8:3F:22:64
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/kNOy-UVU0gEAcx9Lkk7wZsg_ImQ.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
45:d8:84:17:71:04:c7:13:f6:93:f1:1e:78:2b:31:63:c8:c5:
e9:bf:2e:ec:df:9b:cc:65:8f:0c:0a:09:46:bf:e4:34:b5:b0:
18:7c:37:5b:e4:66:09:c4:d9:51:cf:cf:69:52:21:e7:e6:cb:
0a:5e:d5:67:4a:8e:d1:cc:3c:e8:27:5e:3c:2f:44:64:3a:c7:
44:45:68:19:2b:1e:e1:1c:0e:96:ed:a5:5f:49:89:6a:35:94:
4f:0b:cb:2d:4f:a7:c0:ee:96:5b:99:a1:d2:65:26:aa:dc:cd:
38:fa:30:31:5c:8e:6c:2e:b4:af:ec:46:84:27:fe:2b:c7:09:
d3:ca:e1:ea:74:e1:c2:c5:c8:b0:4e:97:05:31:77:ba:c1:c3:
25:48:8b:3e:c0:97:a6:04:39:4d:8a:7c:f3:3a:78:74:02:cd:
05:b3:88:77:bc:c0:7b:99:d4:be:80:2c:1d:f2:6e:a7:20:2f:
51:32:cd:ad:51:5d:f0:bb:d5:50:12:2a:44:43:45:f9:ba:2c:
ba:60:86:21:5a:65:fd:23:e6:bf:67:b5:b3:a9:29:9e:39:ce:
7a:c3:33:20:34:0f:46:7b:ee:02:e2:19:1d:3e:f1:83:5d:57:
72:f4:de:37:8f:62:72:c0:c9:dc:d6:1d:05:23:7c:ba:19:30:
1f:a6:d0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org