Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/l1xN1pcI8fzb8I_SnuxA6VUIOQ0.roa
File: l1xN1pcI8fzb8I_SnuxA6VUIOQ0.roa (raw, json)
Hash identifier: TdK7sVKISZ9e/JymD6E+4Q9O2hoL+9S24PYDDdOBV3o=
Subject key identifier: 97:5C:4D:D6:97:08:F1:FC:DB:F0:8F:D2:9E:EC:40:E9:55:08:39:0D
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 469E
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/l1xN1pcI8fzb8I_SnuxA6VUIOQ0.roa
Signing time: Tue 19 Apr 2022 00:30:06 +0000
ROA not before: Tue 19 Apr 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18078 (0x469e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 19 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=975C4DD69708F1FCDBF08FD29EEC40E95508390D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e9:03:59:38:21:ac:14:50:64:22:f5:ae:e3:
d4:72:6a:9c:1b:b3:91:c7:34:18:31:82:e7:bd:ac:
8a:c1:6d:56:bc:f8:43:da:85:97:ad:dd:ac:97:83:
06:59:83:5b:eb:a2:65:e5:a3:47:5c:b6:19:ea:15:
b7:35:54:a6:dd:09:01:e3:8e:ec:b0:58:52:79:08:
6f:4f:0b:f3:c6:9d:9f:33:9d:e5:ed:a8:78:b4:a9:
65:7e:b2:bd:05:1c:e9:cc:36:4a:22:c6:c2:0c:62:
02:be:8c:8c:e4:6b:ed:7c:4d:90:c1:10:dd:4d:c5:
6b:12:50:a2:07:02:06:52:00:b5:0a:f2:ff:df:61:
6c:84:0b:a9:28:fe:d0:fe:e8:06:47:65:05:9d:0d:
00:7e:2e:c0:ba:4a:8a:47:d9:b3:d7:24:4a:78:5c:
89:8c:85:6c:43:ef:3b:fb:7d:4a:09:b5:ad:44:a8:
de:48:e4:0c:db:93:f7:bf:b6:46:3b:78:d7:16:85:
50:9b:9e:10:a0:31:3f:7b:d5:b5:66:c1:11:c8:c9:
e2:d4:7e:f7:0d:6e:1b:63:e0:84:08:6d:b5:09:b7:
b9:e2:01:7a:6d:9e:6d:17:d1:cd:83:d1:15:c0:f7:
03:27:84:4f:c6:9f:45:a5:8f:a5:f5:f8:1b:cc:27:
ee:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:5C:4D:D6:97:08:F1:FC:DB:F0:8F:D2:9E:EC:40:E9:55:08:39:0D
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/l1xN1pcI8fzb8I_SnuxA6VUIOQ0.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:35:13:11:73:ff:61:57:9f:f9:70:17:68:fd:17:8e:3a:fb:
5b:57:3b:e2:ef:07:cd:e3:65:90:f1:f3:3f:9a:b2:a1:e5:8b:
db:17:85:9c:11:7a:4e:e2:bd:8e:e8:0a:d9:41:69:89:44:d8:
61:d1:7d:42:9d:77:6d:7e:96:d8:b6:ea:d3:71:ca:bf:99:ae:
bd:d0:2a:50:3b:cc:b5:b8:44:06:4c:f2:ea:3e:ea:ca:0c:27:
14:40:30:aa:27:d4:3c:39:d0:50:2e:45:b7:63:09:48:fa:a9:
22:05:d3:48:73:60:78:a6:81:c6:da:32:dd:46:92:83:ab:66:
cc:c5:7c:9c:8a:90:c6:9a:36:cf:db:4d:24:3c:fb:fb:18:be:
f4:55:49:7d:f6:54:38:7e:9f:9e:28:eb:bb:ec:b4:04:d4:78:
cd:39:64:e9:91:5a:ce:20:64:56:14:f7:0e:b3:a6:26:e3:36:
d8:95:71:73:3a:cb:2f:be:0b:66:33:f5:69:f7:cd:4a:86:06:
2c:98:0c:e5:cd:49:8c:55:48:6b:7d:90:94:0e:e4:19:73:eb:
c6:57:93:9c:ef:fd:4c:dc:46:1f:cb:2f:f1:6b:df:f3:79:61:
de:d4:cb:bf:54:f8:34:3b:b5:53:43:75:42:fc:49:01:f0:01:
a9:2e:7f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org