Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/lY6YGB3AHl-13SCaFq1IS8TeVjI.roa
File: lY6YGB3AHl-13SCaFq1IS8TeVjI.roa (raw, json)
Hash identifier: TrlIhROc+Ca8kMA04MkbZThC+lTWzdP+fMkkBOCirEc=
Subject key identifier: 95:8E:98:18:1D:C0:1E:5F:B5:DD:20:9A:16:AD:48:4B:C4:DE:56:32
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4332
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/lY6YGB3AHl-13SCaFq1IS8TeVjI.roa
Signing time: Tue 15 Feb 2022 00:30:07 +0000
ROA not before: Tue 15 Feb 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17202 (0x4332)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 15 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=958E98181DC01E5FB5DD209A16AD484BC4DE5632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:34:7a:96:10:3e:f6:25:dd:1f:9a:f6:75:b6:
ed:6f:13:94:8c:6d:34:5e:5b:2b:64:66:b3:ad:91:
73:cf:81:42:a8:c1:ee:d3:b7:b5:44:7b:44:5a:86:
e9:0d:8e:9b:4e:07:d9:6e:51:92:a0:50:ac:3c:97:
a1:06:8e:83:ff:d6:27:76:08:7b:49:7d:ce:81:df:
70:aa:7b:0a:30:63:65:84:85:81:bb:9d:6b:1e:a1:
9b:7e:d5:f1:78:4c:61:47:35:6b:6a:94:ab:f8:e1:
e9:7f:f8:97:92:c1:97:1e:bc:d8:54:4c:ce:c9:b5:
52:c4:4e:63:bc:09:76:cb:c0:51:00:58:6e:ac:a2:
d9:cf:eb:a2:c5:13:79:58:aa:6d:09:1f:4f:1e:cd:
f1:f5:47:c7:8a:40:77:30:ee:e5:fa:4b:11:79:fd:
a6:ee:41:95:06:f1:66:8d:a2:a5:93:d5:0e:a0:32:
66:9d:3b:42:0f:6a:8e:ff:56:33:46:e4:1f:e8:cb:
87:a3:d9:8e:96:4a:32:8e:39:61:f5:36:89:a6:86:
0a:54:20:63:0d:47:de:c8:84:00:7e:ae:81:65:1a:
ca:17:4e:80:02:52:75:13:31:f2:1b:9b:a4:fe:5a:
46:37:1a:b1:ff:30:bf:91:a9:71:e8:f5:8f:48:0d:
09:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8E:98:18:1D:C0:1E:5F:B5:DD:20:9A:16:AD:48:4B:C4:DE:56:32
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/lY6YGB3AHl-13SCaFq1IS8TeVjI.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
70:f1:f5:3f:ff:7a:63:75:7f:8d:03:91:04:bc:5b:7b:70:54:
cc:26:63:02:67:4d:f6:fe:ab:bc:95:ab:91:2d:c7:ff:63:4b:
a4:a1:30:51:34:05:3d:01:02:f8:36:af:b0:57:9b:75:dd:43:
51:3d:9a:78:42:f5:ae:3c:eb:12:03:f3:1f:e3:8e:ba:14:8b:
ce:91:2a:a6:99:68:b1:03:9d:bc:5a:4b:4f:cc:d0:35:a7:26:
6c:3c:da:24:25:6f:1b:68:6a:3a:7a:7d:ed:a0:23:3e:46:ca:
95:3a:51:7c:ff:da:48:bf:4b:76:f0:7b:81:b5:b2:e5:d7:52:
a8:e3:14:6b:4a:3f:c9:c6:39:ad:8d:2e:cc:97:da:57:81:a5:
d7:ab:0b:f9:f2:89:26:76:a7:ac:32:f9:83:5d:11:6e:9d:92:
db:3c:ee:0b:11:ea:16:a3:cf:09:bf:d6:bb:4e:47:52:c6:02:
54:fd:1c:44:68:01:3d:d0:4b:25:d4:a6:36:1e:fe:be:f1:3e:
cd:7a:5b:e2:95:a7:bf:70:7b:7c:e7:de:75:2e:99:46:8a:7b:
c5:2e:28:ac:10:47:10:44:63:20:84:5c:98:49:eb:cb:b0:7a:
ec:13:45:4e:05:1e:70:ab:79:90:12:79:0b:0e:f0:28:43:b0:
f7:e9:14:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org