Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/opQPuUSJ-f09xX7xFYG58sYkCog.roa
File: opQPuUSJ-f09xX7xFYG58sYkCog.roa (raw, json)
Hash identifier: pOLPDVoy4EnGAQTgMcxwoos/PWXVmfl1p8Nz1YP/FB8=
Subject key identifier: A2:94:0F:B9:44:89:F9:FD:3D:C5:7E:F1:15:81:B9:F2:C6:24:0A:88
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4937
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/opQPuUSJ-f09xX7xFYG58sYkCog.roa
Signing time: Fri 03 Jun 2022 00:30:12 +0000
ROA not before: Fri 03 Jun 2022 00:30:12 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18743 (0x4937)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 3 00:30:12 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=A2940FB94489F9FD3DC57EF11581B9F2C6240A88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b8:73:88:9e:ba:9f:77:ff:b1:4b:92:d6:c9:
8f:0e:e8:0b:6c:29:74:83:4b:fa:e1:c6:34:0a:47:
ee:d5:f5:20:d7:a6:0e:ef:94:74:68:ef:a0:fe:d4:
d3:05:55:3a:8b:47:92:91:18:5e:57:cc:0e:06:40:
19:29:4d:07:37:8e:6b:84:4d:c9:a2:c4:9e:bb:c3:
1f:81:a7:fb:1d:0f:05:06:c0:27:62:53:c8:60:ae:
3e:de:aa:d6:43:78:30:2d:b4:26:05:09:68:10:c1:
f0:1f:68:6b:0a:fc:6c:db:99:f6:72:eb:e0:e1:86:
22:36:3c:74:5c:a5:53:7a:e7:c2:af:da:91:a4:98:
e0:71:f6:87:9c:dc:97:55:e5:87:6a:66:0d:85:50:
f5:8c:65:ec:6d:39:6c:c3:0b:00:44:4b:fe:b1:dd:
3b:02:f0:22:bf:78:bc:f9:eb:4c:67:7d:8d:6d:09:
4a:b4:65:5a:f5:61:63:b9:8e:e2:e0:af:61:99:d9:
07:f2:be:86:6a:cf:2d:4e:70:b9:3e:db:b5:69:67:
69:e6:b0:04:6e:83:18:99:5f:e2:31:58:ee:08:4d:
ec:89:eb:88:3c:f7:03:be:4e:00:f4:13:66:45:d4:
41:ed:76:e4:dc:a1:bb:77:da:f0:1c:ec:b0:08:8b:
8f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:94:0F:B9:44:89:F9:FD:3D:C5:7E:F1:15:81:B9:F2:C6:24:0A:88
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/opQPuUSJ-f09xX7xFYG58sYkCog.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:e4:6e:55:11:6f:bf:3d:a0:9d:63:a8:32:25:27:43:c4:01:
14:e5:ac:d5:0c:db:9d:28:29:b1:6b:b1:53:65:76:0e:53:60:
a8:d8:81:bd:21:98:a0:a8:43:2c:00:4c:a1:30:3a:ed:1a:e5:
cd:49:41:bf:e2:e2:af:46:52:c4:22:d7:7b:40:e3:41:ca:1f:
10:25:eb:e4:32:9d:c5:1c:0f:30:9e:b4:94:6a:8a:54:41:f9:
10:72:39:62:80:d4:5b:c9:8f:c7:eb:93:f2:f0:3e:a2:c6:d5:
a7:99:bd:a7:0f:a1:3e:dd:b4:3d:e7:f0:6f:7b:ff:31:25:e9:
87:1c:44:5c:0e:06:41:45:1b:2b:ae:7b:00:ac:6f:64:b5:25:
64:3b:52:05:98:58:7f:3b:d2:a1:08:43:91:e9:5a:86:97:a0:
3c:9a:6d:ad:98:d3:94:e1:8c:9f:7e:35:6c:5a:04:1e:6f:e1:
29:d2:72:27:b1:00:d1:62:0b:a6:49:a1:a7:b2:19:8e:01:a0:
98:e3:89:04:3a:7d:09:f8:c7:62:fc:0e:1d:ce:79:a2:02:1d:
29:7f:7f:a8:61:4e:c9:c5:4c:9b:ed:6c:4c:aa:6f:70:68:ae:
a5:73:ff:dc:62:9d:1c:51:79:c3:cd:74:f5:aa:d9:3d:d3:dc:
83:4b:0f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org