Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/m7jaSSUjVth1O7tNtjQPvmKQmRg.roa
File: m7jaSSUjVth1O7tNtjQPvmKQmRg.roa (raw, json)
Hash identifier: zR0BXtcOdzOx+qOq09PWAT4rLscGi3anvdfqTRSN8mc=
Subject key identifier: 9B:B8:DA:49:25:23:56:D8:75:3B:BB:4D:B6:34:0F:BE:62:90:99:18
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 471C
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/m7jaSSUjVth1O7tNtjQPvmKQmRg.roa
Signing time: Thu 28 Apr 2022 00:30:08 +0000
ROA not before: Thu 28 Apr 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18204 (0x471c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 28 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=9BB8DA49252356D8753BBB4DB6340FBE62909918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:1e:8d:4d:0c:d7:e1:8c:4c:a7:7b:4d:90:12:
60:e4:fb:9b:95:84:e9:ea:b7:e2:c5:20:37:4a:df:
f0:4c:4c:58:6b:06:02:ff:55:5b:a1:61:6d:71:26:
96:f3:17:c5:9b:3d:4b:5d:b7:99:e5:fd:77:a0:88:
da:d7:48:7c:51:40:f3:e9:0a:0d:bc:86:76:c7:04:
06:5d:63:10:5c:80:2e:19:32:35:c3:59:81:c7:53:
1c:9b:d6:fd:ca:2d:a6:43:bd:61:81:3a:cc:2b:48:
3d:9a:02:f0:3d:4b:3e:67:f9:92:6c:d4:18:ad:c5:
50:bb:27:68:1b:3c:a1:d6:a2:2b:7f:64:b3:df:23:
1b:14:09:28:9b:24:96:a2:f2:f7:d2:fa:dd:82:89:
2d:c9:d0:c5:73:18:69:a5:43:c1:96:28:52:5e:0e:
90:f8:24:74:1f:82:2c:28:c3:29:33:01:8b:6b:6e:
04:fc:2d:53:29:69:c5:d2:ee:aa:dc:2c:ae:78:03:
c2:9a:a3:52:26:10:7b:62:a4:ba:5a:ab:a7:45:7c:
3f:53:08:60:e9:30:cf:16:21:c8:59:46:7e:a2:17:
f8:d8:1b:6b:b3:55:10:db:61:9c:ae:87:52:f5:52:
da:8b:cc:7c:c8:07:89:f6:08:45:b6:dd:fc:e4:e0:
d4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B8:DA:49:25:23:56:D8:75:3B:BB:4D:B6:34:0F:BE:62:90:99:18
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/m7jaSSUjVth1O7tNtjQPvmKQmRg.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
35:a8:f3:38:1c:82:a5:b2:d6:eb:25:71:18:5e:1d:a9:c0:71:
b5:98:78:fe:87:51:e5:3f:fb:f0:3d:07:7b:24:c8:13:d5:76:
6c:cb:c5:76:97:47:07:cb:29:de:31:b3:4f:c2:27:28:f7:99:
41:9f:ba:86:29:50:46:19:1c:8d:9c:4c:38:58:be:7c:54:79:
57:78:57:f7:81:f9:fe:03:7b:fe:fe:a9:6e:11:91:da:e9:09:
2d:af:20:b4:e7:47:f8:ec:67:92:89:bf:6f:8c:d1:d7:3e:0d:
a2:53:a6:d7:c8:66:ea:44:71:8e:f8:a9:32:d4:79:51:73:e3:
c2:4c:d0:e1:02:d1:06:24:4b:8f:2d:ff:4d:e7:bb:59:52:8b:
c4:9b:79:0b:db:0d:2b:30:ff:87:d8:ea:13:e6:59:da:f1:fc:
1e:2d:75:06:3e:0c:1a:3e:1a:37:e1:0b:2e:07:9d:71:ea:b0:
03:20:fe:d9:29:1c:4e:7d:de:32:c9:09:e3:1f:ab:36:c7:9c:
ef:7c:27:fe:a0:6f:ad:c3:42:ea:5a:a9:97:74:8d:7c:b5:10:
8d:e3:9e:ca:6f:87:27:e8:1d:7d:96:9b:e1:a6:08:2e:5b:5a:
43:16:de:fa:f2:9b:75:f1:15:d0:8b:6b:b8:53:26:dd:03:2d:
3a:f3:8a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org