Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/p9R2j9cp1IViGokX-1BqMwGzYYk.roa
File: p9R2j9cp1IViGokX-1BqMwGzYYk.roa (raw, json)
Hash identifier: 6OuKmYC/nIJiC+8+U4E2bJmzlEGgtwu6PaKfKtxiQxo=
Subject key identifier: A7:D4:76:8F:D7:29:D4:85:62:1A:89:17:FB:50:6A:33:01:B3:61:89
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 43DA
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/p9R2j9cp1IViGokX-1BqMwGzYYk.roa
Signing time: Sun 27 Feb 2022 00:30:14 +0000
ROA not before: Sun 27 Feb 2022 00:30:14 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17370 (0x43da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 27 00:30:14 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=A7D4768FD729D485621A8917FB506A3301B36189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bc:54:e8:3d:4e:33:99:04:d0:9a:f2:1d:89:
bd:b9:6c:9c:1b:84:f8:52:b0:1b:87:d4:fe:2e:e7:
88:48:2a:54:bb:df:47:ed:63:d7:a8:41:0d:bc:76:
43:41:c9:77:24:73:82:61:4f:ea:48:0d:37:39:8b:
77:8e:19:f8:9b:c4:52:99:c5:a0:a5:c3:c1:cd:4f:
92:64:0a:24:b0:53:f2:29:b2:e0:9e:df:cd:40:fd:
55:07:e0:00:d8:0a:95:15:22:73:44:7e:16:f0:2e:
8e:df:63:0a:61:11:10:94:5f:d0:15:ef:a5:81:c5:
9f:82:6f:ef:2c:9a:c2:65:85:dd:23:82:b6:a1:d2:
c4:85:35:8d:78:73:9e:f2:8b:29:10:3b:a8:c1:48:
ee:69:2c:c5:5d:21:e5:6f:a9:f8:bf:e3:0e:58:ec:
df:31:66:1c:db:3f:e1:9f:5a:7b:eb:7a:29:d2:2b:
0f:4b:7b:cf:73:a3:2c:07:27:b6:f1:65:25:e8:e4:
0b:8d:de:09:28:24:7a:21:2e:89:08:4f:d9:44:b1:
f0:25:cd:1c:bf:25:77:eb:0a:f0:c7:b4:99:71:95:
9c:62:54:10:2f:d8:4e:8a:c1:59:eb:6b:7e:6e:67:
4b:0c:75:b9:dd:3c:1a:cf:83:58:8e:d3:bb:97:b6:
5e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D4:76:8F:D7:29:D4:85:62:1A:89:17:FB:50:6A:33:01:B3:61:89
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/p9R2j9cp1IViGokX-1BqMwGzYYk.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
97:6b:5d:f0:49:7d:58:c9:13:ff:65:e3:a0:c7:f4:1b:68:d1:
a9:f7:84:a8:78:05:a6:d8:4f:2a:0d:ca:04:81:2c:46:5b:75:
03:2e:a9:0f:ab:ae:c7:26:7e:3f:a1:55:8a:57:08:95:61:5c:
e7:7a:51:3e:82:35:f2:ce:4a:29:fc:5a:5f:13:19:7f:59:88:
08:ce:6e:5b:8b:d7:a5:13:8a:f9:db:fc:a2:09:7a:71:53:ba:
cb:06:87:4b:5c:27:0d:7f:27:34:41:51:ed:ee:83:9d:3b:f8:
bc:69:ba:9b:ec:ca:47:ad:2d:ff:92:3c:2f:45:03:fa:e2:97:
6d:37:5c:2c:aa:64:75:7c:1d:a2:00:a8:ac:31:3b:eb:44:7b:
89:6f:19:e3:f5:de:cf:fc:6f:eb:05:9d:46:02:ba:7c:34:ee:
96:35:d8:72:e1:fb:21:08:42:e4:b6:68:b8:0b:6f:ee:f5:83:
55:c4:a2:7c:ed:34:bc:eb:da:0d:56:66:fc:17:81:1a:77:55:
48:9a:5d:0b:0e:63:f0:5f:ab:7e:84:ea:8e:06:bf:73:3c:74:
15:92:7e:f3:84:cb:28:14:61:83:e4:a2:97:8d:34:7b:16:77:
87:34:9c:83:d2:61:08:33:f8:88:a0:ec:23:0f:5f:e5:f2:c7:
57:c4:bd:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org