Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/uTbYS7SvPcXgcJ7DnHjG8IH2F00.roa
File: uTbYS7SvPcXgcJ7DnHjG8IH2F00.roa (raw, json)
Hash identifier: bt2B77yszlyfUEpZsquokhcq8MB6jP39gjHx4qPZtF8=
Subject key identifier: B9:36:D8:4B:B4:AF:3D:C5:E0:70:9E:C3:9C:78:C6:F0:81:F6:17:4D
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 46CC
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/uTbYS7SvPcXgcJ7DnHjG8IH2F00.roa
Signing time: Fri 22 Apr 2022 00:30:07 +0000
ROA not before: Fri 22 Apr 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18124 (0x46cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 22 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=B936D84BB4AF3DC5E0709EC39C78C6F081F6174D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:69:1a:8a:de:ce:52:36:34:d0:92:c7:1d:4d:
63:2b:9b:67:c9:d7:38:4a:d7:ad:f2:8a:2f:36:bf:
8e:b3:46:b4:69:86:80:3a:f5:8a:e2:12:f0:59:ef:
38:2e:d5:88:91:42:a9:a1:59:b9:c2:fe:8e:4b:6b:
6f:90:96:39:76:0b:88:b0:3f:3b:23:2c:3b:60:50:
4d:69:bc:4c:74:09:f5:f0:bb:3e:3f:5c:2a:6c:68:
19:66:ce:c6:7e:a3:30:b9:4f:a4:ef:59:f8:39:30:
ca:00:db:1a:a5:8a:95:2d:e4:69:4b:e8:6b:f2:16:
7b:7a:eb:9e:73:a9:e8:7b:a5:a5:f4:f1:27:49:8a:
68:df:b7:9a:8a:2a:6c:13:63:a3:12:2c:e5:75:09:
2a:7f:bf:8c:4e:66:b2:ac:5d:7f:e7:b8:99:7b:0f:
87:8d:20:57:ac:25:26:88:a3:04:21:a2:55:e6:17:
c1:0d:ab:db:0b:91:a1:00:fb:23:09:d5:ee:e6:82:
dc:52:4e:1d:c0:64:48:5b:c4:2f:f0:7e:be:e2:b4:
5b:7d:35:3c:78:b5:3f:c3:38:dd:10:a6:f5:49:7b:
5e:50:c3:93:e0:d8:e9:12:89:ed:93:6a:35:07:cc:
f9:18:a6:17:8d:f4:eb:ce:38:6f:ed:51:e8:54:95:
84:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:36:D8:4B:B4:AF:3D:C5:E0:70:9E:C3:9C:78:C6:F0:81:F6:17:4D
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/uTbYS7SvPcXgcJ7DnHjG8IH2F00.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:34:f4:6c:5c:61:b5:bb:cb:84:3c:ae:62:e7:7e:6b:2a:16:
fd:d0:9f:16:30:b9:e7:bb:89:7e:5d:3a:e4:98:14:8e:14:c4:
d1:ce:d1:09:d5:21:3e:13:b6:bf:a6:6d:f3:dd:59:f2:cc:3c:
31:2d:c7:b1:b8:a7:ac:41:6e:2e:ed:92:4c:02:c0:6c:f7:71:
f9:b6:41:12:71:52:b2:ae:f6:da:e5:d6:21:c2:2a:08:3f:25:
c6:db:e8:95:ac:1c:9d:da:56:11:f1:e0:a3:a6:d6:d7:3d:b3:
0d:75:73:89:b9:f4:4c:be:53:1e:71:ce:4c:21:d0:85:3b:ed:
16:b4:02:d9:ed:f0:3e:f9:4c:a0:21:fa:e4:55:bf:60:63:64:
69:8d:00:46:a3:39:0f:11:78:ea:7a:58:6e:52:4d:6a:33:74:
19:65:b8:7a:df:e8:e7:de:0f:3a:3c:48:ef:83:f2:68:5a:bf:
ef:ba:98:73:8f:35:64:8a:06:73:0c:1f:a4:33:63:7b:b9:7d:
f4:b2:41:b0:b3:3e:1f:5a:73:3b:5c:34:0e:7b:ab:e0:2b:95:
b4:64:24:12:3a:a0:4a:19:d5:ee:b2:b7:49:76:9c:4e:d7:9f:
60:e1:b0:e4:66:51:42:0b:52:75:f4:20:c6:10:1f:6b:b4:79:
a6:f7:bf:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org