Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/o_LwDFUfj1IggfrC32CQJPAwDAc.roa
File: o_LwDFUfj1IggfrC32CQJPAwDAc.roa (raw, json)
Hash identifier: w7Qt2rs2OBs/NGRb24BBwR9ULpDPe2LujUFeoG4PQSk=
Subject key identifier: A3:F2:F0:0C:55:1F:8F:52:20:81:FA:C2:DF:60:90:24:F0:30:0C:07
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4961
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/o_LwDFUfj1IggfrC32CQJPAwDAc.roa
Signing time: Sun 05 Jun 2022 00:30:08 +0000
ROA not before: Sun 05 Jun 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18785 (0x4961)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 5 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=A3F2F00C551F8F522081FAC2DF609024F0300C07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f0:02:fb:71:63:c8:40:47:5f:a4:c6:0d:ac:
c2:63:1b:f5:4e:f2:b1:3b:e3:68:78:b8:12:f0:bd:
b0:57:54:3c:03:6c:1d:58:b4:8d:11:d7:c1:55:22:
40:00:20:b1:56:bd:1d:2e:cc:81:8b:db:1d:4c:18:
89:05:13:bb:4b:68:86:ab:41:1a:45:9c:2e:9b:05:
c7:ae:cb:42:17:25:da:e5:1a:37:02:b0:fb:98:77:
a5:c1:c0:75:74:9d:66:35:36:33:e8:7e:12:0c:36:
75:15:23:b5:40:60:98:4c:d1:b7:9c:16:c0:7f:a6:
7a:1b:27:e2:95:10:54:91:d6:55:45:68:e5:79:c0:
7d:88:ae:0a:c4:d8:df:c1:f4:ec:32:64:3e:ee:3b:
ae:cb:11:d0:3d:da:0e:c3:c9:96:59:63:23:25:c2:
df:5c:7c:86:f6:d1:16:de:20:73:76:e8:a8:93:39:
8a:ce:88:19:0e:1e:0d:92:99:6d:09:c8:67:b1:a7:
91:85:dd:9e:e4:34:28:25:f1:41:91:08:4f:f4:c5:
21:dd:0d:ad:44:67:7a:90:9c:97:48:88:62:0a:ca:
9d:a1:fe:02:13:f8:fb:12:ac:e6:44:29:47:c8:05:
a1:cc:08:9e:b0:0b:31:9f:7f:09:4e:e9:6a:ac:9f:
48:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F2:F0:0C:55:1F:8F:52:20:81:FA:C2:DF:60:90:24:F0:30:0C:07
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/o_LwDFUfj1IggfrC32CQJPAwDAc.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:2c:75:ed:f8:bf:b5:7a:42:a3:e8:8c:00:19:f8:2f:c1:32:
7e:e2:40:5c:b1:81:c8:8f:39:4f:ad:b1:2d:05:49:ee:f6:67:
1b:ef:87:f4:57:ee:c5:2e:90:f5:28:08:58:82:24:2f:b3:3a:
08:ea:64:82:01:90:57:89:5f:77:ed:74:54:21:02:5e:96:dc:
c4:5c:e1:cd:8b:37:13:17:91:f0:33:5e:7b:53:a7:f4:ef:2e:
a9:6c:19:f0:72:99:a4:79:8d:97:dc:78:07:2e:cd:8f:32:b2:
be:55:99:d5:ba:7e:de:38:60:31:12:9a:03:bf:5c:89:99:ca:
3d:bb:b3:d4:ce:bb:91:a7:ab:87:0b:2e:ee:05:cc:5e:a2:18:
ce:ea:79:8f:d3:33:4e:ae:38:e1:ef:dc:66:ca:cf:c7:30:22:
ca:07:91:93:11:7a:0b:1e:f9:fe:5a:be:10:b8:56:fa:af:fd:
4a:1e:82:39:cd:8a:82:64:a8:83:00:df:01:3f:ae:a4:7a:1b:
49:fb:59:29:dd:5a:59:ff:95:b6:d9:45:88:71:11:0e:68:a3:
ba:8b:bc:a9:f1:59:0f:db:65:01:cf:82:37:a4:a5:08:75:fc:
38:96:d7:f0:a2:a1:4c:f5:5e:3b:c0:c7:c8:c8:8b:22:1f:eb:
61:0e:56:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org