Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/uP2hBV6z0x-N0rEYc08VrXQqQQ4.roa
File: uP2hBV6z0x-N0rEYc08VrXQqQQ4.roa (raw, json)
Hash identifier: RSdqX/JzglR+huX2UyZamZdLitIBSYqaNdyiLWvbMRA=
Subject key identifier: B8:FD:A1:05:5E:B3:D3:1F:8D:D2:B1:18:73:4F:15:AD:74:2A:41:0E
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 47A8
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/uP2hBV6z0x-N0rEYc08VrXQqQQ4.roa
Signing time: Sun 08 May 2022 00:30:07 +0000
ROA not before: Sun 08 May 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18344 (0x47a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 8 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=B8FDA1055EB3D31F8DD2B118734F15AD742A410E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fc:58:59:0d:24:bc:4d:9b:34:6c:34:0f:0d:
4f:a2:4d:e0:2f:db:b5:8c:80:9e:33:3c:3f:d1:fb:
7d:51:21:85:b0:9e:31:ab:08:e9:cc:61:c1:a0:6e:
3b:23:e0:16:9d:5d:f9:2e:f8:90:ea:0d:46:8c:f7:
f7:0e:c6:2c:55:06:46:65:2e:ae:59:51:db:65:90:
8a:77:89:ea:15:71:47:25:81:f9:0b:9a:79:81:60:
b3:1b:87:96:4a:eb:25:b1:94:f9:e4:f6:ac:dc:0e:
32:36:9a:86:c8:f6:fe:d1:0e:e5:89:68:ac:47:49:
a3:ba:b1:84:54:3c:52:c1:bd:bb:8d:71:48:f9:d0:
26:7f:c0:6f:4b:e0:33:d3:c3:ef:7c:5d:15:7d:b4:
bb:59:8a:b7:65:66:db:80:2d:4c:80:ea:62:e7:0c:
cb:e6:e1:75:3f:cc:46:12:f8:8c:2e:8c:7d:ab:7b:
aa:34:15:b3:36:d1:d1:2b:ed:37:14:07:a8:f5:36:
77:80:77:58:f3:ae:99:37:bf:28:75:4c:49:f8:44:
1e:89:22:55:19:a3:24:aa:78:d8:1e:76:20:9f:7c:
64:4a:da:a2:0b:8d:15:f5:2f:98:e9:e2:a0:e2:80:
a0:ae:e4:2c:04:ab:50:0e:3c:1f:2e:be:5c:d6:07:
31:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FD:A1:05:5E:B3:D3:1F:8D:D2:B1:18:73:4F:15:AD:74:2A:41:0E
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/uP2hBV6z0x-N0rEYc08VrXQqQQ4.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
58:52:9f:d4:19:77:79:92:95:1d:ec:18:33:7a:7d:66:1c:a7:
5a:f5:1a:59:a0:35:d6:51:b2:e0:e1:74:e6:55:a7:d6:e7:21:
95:23:f8:ca:be:b4:63:91:f8:39:83:9e:cc:bd:78:43:4c:96:
c5:cf:76:b2:5e:7f:d4:5a:3d:e4:43:61:87:5e:7e:7e:48:ab:
31:be:0f:6c:d1:ce:7d:9c:95:5a:9a:0e:00:11:36:8e:2d:22:
e0:e6:fa:36:50:87:6d:f1:2c:f3:68:3e:5b:37:08:39:4c:8a:
8d:0a:00:c1:6d:ba:e3:f5:5b:fb:64:35:d4:37:9d:19:d7:a0:
27:75:07:65:48:0c:88:e1:4c:19:35:3c:90:6c:e3:81:00:82:
7b:e2:6c:c7:58:f2:e2:a3:27:ff:d2:70:0e:6a:f3:08:30:fa:
bc:d0:1b:2d:67:44:3e:17:f7:c7:af:70:2f:2c:6c:49:3c:51:
27:78:32:23:e9:f5:6f:73:fc:1d:68:7a:45:27:a3:12:d7:7c:
7f:30:b5:8e:6d:20:18:79:ba:0f:39:00:56:8b:ae:e9:1b:98:
fd:5a:66:de:81:01:e4:fb:52:c3:96:a1:d0:b1:fd:b9:05:03:
84:5a:e0:dd:e8:11:0b:9d:58:69:1a:5f:b3:ad:a8:d8:49:f6:
75:11:b1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org