Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/tI6puD8vhMjJvZVbxw8MWYz6nVI.roa
File: tI6puD8vhMjJvZVbxw8MWYz6nVI.roa (raw, json)
Hash identifier: kEBUpvcK9CJcBUn2H30zj9UJ5x8uLAm2b4yYKZUenRg=
Subject key identifier: B4:8E:A9:B8:3F:2F:84:C8:C9:BD:95:5B:C7:0F:0C:59:8C:FA:9D:52
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 46E4
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/tI6puD8vhMjJvZVbxw8MWYz6nVI.roa
Signing time: Sun 24 Apr 2022 00:30:08 +0000
ROA not before: Sun 24 Apr 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18148 (0x46e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 24 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=B48EA9B83F2F84C8C9BD955BC70F0C598CFA9D52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:43:83:21:5f:97:f1:be:ff:65:3e:ad:a8:e0:
e6:17:89:5c:df:2d:37:94:fc:42:29:f3:ca:07:1e:
8d:5d:3d:2c:79:31:fa:bf:b6:67:1d:34:dc:ae:30:
ea:cb:d7:47:18:28:2f:7e:80:6b:55:8d:78:6d:ee:
8f:c0:db:89:d6:2e:3c:05:7e:58:60:7a:e2:1d:eb:
2a:dc:99:43:d8:72:0f:02:79:18:db:f7:d0:53:32:
20:2b:e4:5a:d0:fa:ea:41:7b:4a:c0:17:de:22:c1:
be:81:5d:33:50:f7:1b:86:6f:3c:37:ed:74:a2:ff:
7a:37:94:13:bd:66:28:7d:91:d3:f3:7b:72:15:e5:
17:f5:3d:5c:7a:79:2d:77:00:41:66:3f:74:ae:2b:
b8:3d:7e:d8:0e:48:50:a6:4e:15:b5:7f:98:c0:30:
4c:57:9d:b5:e8:dd:46:12:28:ae:80:72:a2:7f:8b:
b4:36:54:5f:45:b1:ec:1e:de:e6:45:5b:cb:41:3a:
0c:b6:8f:75:ab:66:62:2f:18:91:a1:ab:66:69:67:
4f:e9:32:05:d4:e3:40:7a:89:c1:4a:c7:e9:56:15:
05:54:9d:cd:e9:02:51:c1:d0:c2:d2:4d:83:03:26:
d2:fe:14:bc:3a:62:b5:b1:bf:81:43:2b:c9:4e:67:
64:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:8E:A9:B8:3F:2F:84:C8:C9:BD:95:5B:C7:0F:0C:59:8C:FA:9D:52
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/tI6puD8vhMjJvZVbxw8MWYz6nVI.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
67:fc:10:84:b4:f2:e2:3d:3c:3c:af:c1:16:61:1e:35:f1:42:
5e:f5:8e:3e:10:dd:ac:62:80:ff:30:7c:aa:27:57:5f:4c:b4:
f6:f9:dd:fc:71:97:dc:0e:0e:b7:e7:97:5f:c4:03:7e:65:30:
12:94:6b:6c:99:01:00:39:99:b9:d7:b3:dc:24:5d:f8:03:24:
2b:b2:cb:4b:db:ed:b4:d0:5d:c2:fa:02:db:0f:b0:10:fc:91:
2d:e9:7d:7f:e3:11:46:3d:85:af:2d:a3:c9:da:47:3b:e0:d1:
f5:1f:8a:f8:f9:76:80:ef:a8:a8:27:62:88:28:98:6e:d4:29:
c3:29:48:77:3c:9c:5b:c7:f3:d3:a5:fc:53:31:51:2e:38:04:
39:4c:63:e3:3c:ed:f5:4f:fb:b4:d5:8a:d2:a5:27:55:a8:3c:
3d:67:17:c9:5e:fa:ba:7e:f8:3e:3e:6a:10:29:fb:0c:67:8f:
60:47:fa:56:0a:5a:81:d8:32:05:ec:dd:24:f9:f5:a5:09:4f:
18:eb:9e:69:26:38:7e:df:36:4a:93:86:12:0f:b9:90:3a:5f:
55:47:0c:b2:94:b9:5d:44:cf:6b:56:8f:56:a5:4b:af:30:aa:
a4:af:89:b4:45:46:e5:28:50:8f:26:70:f0:6b:eb:1f:03:c0:
41:61:b8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org