Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/wf6cEtbJyfyTifKqcQjTE-T-2Tw.roa
File: wf6cEtbJyfyTifKqcQjTE-T-2Tw.roa (raw, json)
Hash identifier: x9yh2eSlnMmfA4UbM43gXhVUJydxnL6ki6oOUGPTh8s=
Subject key identifier: C1:FE:9C:12:D6:C9:C9:FC:93:89:F2:AA:71:08:D3:13:E4:FE:D9:3C
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 44B6
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/wf6cEtbJyfyTifKqcQjTE-T-2Tw.roa
Signing time: Tue 15 Mar 2022 00:30:12 +0000
ROA not before: Tue 15 Mar 2022 00:30:12 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17590 (0x44b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 15 00:30:12 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=C1FE9C12D6C9C9FC9389F2AA7108D313E4FED93C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d6:c9:e4:0b:35:12:71:49:aa:4e:6b:f3:65:
2e:4f:d4:60:75:bd:75:17:d9:39:ff:84:d9:6c:db:
39:1c:9c:53:c2:8f:97:00:0d:1e:84:e6:9f:36:60:
e0:37:2d:a0:36:d3:28:b1:41:01:a8:54:0d:ee:83:
54:33:76:a5:72:11:7c:4c:c1:5a:af:aa:be:f8:80:
30:04:42:a2:3b:7e:ed:9a:7b:a0:1c:29:fd:b8:02:
8d:99:69:a6:aa:87:c1:31:3b:0a:c9:24:23:15:11:
ea:4d:9d:89:cd:bd:0a:4b:ee:eb:8a:bb:68:45:f7:
23:bb:6c:fd:fb:17:d1:57:6e:95:62:38:06:de:87:
4a:36:90:43:86:d6:5c:fa:63:43:29:d9:36:af:fa:
cb:49:a5:8d:8e:cd:32:fb:8b:c1:3b:50:2b:eb:3f:
73:31:cc:03:93:fe:f9:cd:48:0e:06:7f:74:bc:71:
3a:c5:54:51:eb:c7:8c:c3:6d:5d:6d:77:5d:56:de:
a4:4f:be:3b:22:c5:b1:97:c6:08:d4:bd:98:04:ee:
64:89:5a:fa:2c:ed:b4:ec:89:b9:8e:3e:78:27:e1:
c3:cd:fd:5b:ce:84:43:2e:96:96:17:6f:e7:bc:07:
64:e2:40:d0:33:e2:00:fa:f4:3a:b1:34:c1:d4:49:
d1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FE:9C:12:D6:C9:C9:FC:93:89:F2:AA:71:08:D3:13:E4:FE:D9:3C
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/wf6cEtbJyfyTifKqcQjTE-T-2Tw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:83:2a:dc:42:14:0e:1c:25:5a:98:05:68:96:54:40:32:1c:
2b:dd:a6:32:53:08:28:59:9d:67:6a:24:59:fc:64:83:8d:a6:
36:1a:1e:ca:e0:80:0c:d7:fa:b0:f7:d8:b8:37:da:b6:db:da:
c3:6f:7a:6c:5e:ad:f5:2c:0f:d5:94:eb:31:be:42:db:b5:f1:
2a:d7:6c:b9:c0:3a:8e:f7:ef:86:34:60:11:de:6b:db:37:2c:
43:04:9f:b0:1c:4d:cb:71:e8:e2:6d:8b:d5:ea:86:9b:c9:bf:
00:87:b1:fd:1c:22:d4:84:9f:09:27:cb:07:8a:0b:26:ee:8d:
12:b8:ea:71:83:3c:5f:77:b5:c4:99:c7:19:c2:fc:98:fa:50:
84:08:7a:87:e0:73:86:69:0f:16:9f:cc:6c:cb:48:30:d5:35:
d9:6e:3d:36:de:f5:d2:d3:70:a1:c4:f5:42:c2:f3:51:2c:c0:
97:17:07:bc:b1:22:7e:a8:f3:b3:9c:a5:1c:f9:55:86:93:29:
2a:2d:93:8e:56:82:78:0c:21:6a:3e:de:d7:bb:ed:5e:28:66:
95:b1:c6:ce:cd:ce:ef:f9:e1:cf:25:f5:40:c3:04:62:79:31:
fe:f1:79:42:2c:d7:25:33:a8:6e:e8:29:e6:46:67:9d:de:c6:
d6:e5:89:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org