Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/mKQToDQVDMyw_7GmS1jcIyn76LY.roa
File: mKQToDQVDMyw_7GmS1jcIyn76LY.roa (raw, json)
Hash identifier: HlOHOI/LD6GLkbn2ELZZNN5eFhSJxeUCAlATnvJyi1A=
Subject key identifier: 98:A4:13:A0:34:15:0C:CC:B0:FF:B1:A6:4B:58:DC:23:29:FB:E8:B6
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4987
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/mKQToDQVDMyw_7GmS1jcIyn76LY.roa
Signing time: Wed 08 Jun 2022 00:30:06 +0000
ROA not before: Wed 08 Jun 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18823 (0x4987)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 8 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=98A413A034150CCCB0FFB1A64B58DC2329FBE8B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:48:37:81:0a:c8:c2:39:2f:97:a5:5c:99:d3:
cd:6e:cf:e8:ee:01:b6:14:3a:4e:a1:fd:00:4e:32:
19:47:6f:2b:8d:00:e9:01:56:5c:ad:e7:c2:3c:7a:
4a:36:98:1e:a7:76:05:c7:4e:06:b5:02:8e:99:bf:
4b:17:7b:2c:17:de:3c:7b:e6:0e:e2:de:b4:cd:b6:
6d:a3:fe:07:91:89:90:53:5e:4f:04:6f:99:79:93:
02:ce:56:7c:34:0b:a1:22:10:e8:f1:c1:41:81:07:
ba:89:81:75:7f:05:1b:13:61:01:6d:54:b0:05:8b:
f6:35:48:3e:03:a0:3a:df:4a:2d:8a:ee:9e:b1:0c:
67:9d:a6:28:93:0b:d3:f7:47:a0:0e:dc:d9:0f:2d:
df:be:f5:27:9d:73:5a:bb:71:13:ee:78:a1:7a:df:
56:3f:ff:80:ea:17:24:d6:45:98:d9:d4:6e:07:9f:
11:da:f0:2c:0e:1d:bb:df:a6:81:97:10:82:3c:12:
59:a6:31:eb:84:2a:0c:0c:2d:e1:71:cf:59:71:a5:
65:1e:66:58:a5:0a:e1:6b:eb:a3:3d:6d:01:88:1d:
90:db:f7:85:b1:73:96:58:24:31:f1:98:61:33:d3:
ac:a0:dc:9d:05:b6:eb:0e:86:3a:09:66:b4:a0:73:
21:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A4:13:A0:34:15:0C:CC:B0:FF:B1:A6:4B:58:DC:23:29:FB:E8:B6
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/mKQToDQVDMyw_7GmS1jcIyn76LY.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
48:46:65:0c:20:2d:99:ff:87:8e:d1:2e:bb:52:0e:78:e5:20:
91:9d:6e:0d:22:44:35:da:52:07:d7:94:ee:21:8b:75:95:7a:
16:85:91:61:17:2b:ef:e6:e2:31:e5:d7:4f:8d:51:1c:a1:48:
e9:d2:0e:77:ca:9c:a3:8d:04:2e:51:7c:6c:29:0d:23:15:28:
77:ba:16:e0:9e:43:ad:55:e5:47:3e:81:61:09:51:93:ac:08:
7d:21:70:55:d0:f8:5a:96:67:70:49:8f:a6:31:14:2a:49:98:
ab:42:5d:cd:cf:5b:50:ee:07:f8:1e:d0:cd:6e:6c:54:ed:70:
ed:e5:1a:97:1a:a6:92:f8:18:d4:b3:28:07:b3:f5:53:b1:e0:
a1:28:09:51:9a:ff:66:60:12:fe:b6:6b:ba:95:5b:ab:e8:6e:
a2:b1:29:0a:a5:0c:d1:f2:ba:b4:c2:bd:be:78:e5:1c:5b:5b:
b0:cc:ee:4e:47:b7:73:96:e9:1f:9c:b2:e1:e8:fa:39:a7:5c:
6e:f3:6b:a1:0e:a6:c5:6e:68:1d:aa:33:b4:ca:de:48:63:f7:
0c:72:22:5c:46:2e:2b:bb:24:0e:8d:38:f8:3c:f3:3b:fb:e9:
99:f4:10:52:4e:3e:e1:7e:0c:4b:69:0e:69:68:b4:6e:2b:c3:
74:6f:ae:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org