Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/xepLQVswaiDkyeLJD1PGX55HDT0.roa
File: xepLQVswaiDkyeLJD1PGX55HDT0.roa (raw, json)
Hash identifier: PokkgIJIGhOF6H0WU1sp6wtMO84/BIsxoUb4fivbEH8=
Subject key identifier: C5:EA:4B:41:5B:30:6A:20:E4:C9:E2:C9:0F:53:C6:5F:9E:47:0D:3D
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4400
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/xepLQVswaiDkyeLJD1PGX55HDT0.roa
Signing time: Wed 02 Mar 2022 00:30:14 +0000
ROA not before: Wed 02 Mar 2022 00:30:14 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17408 (0x4400)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 2 00:30:14 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=C5EA4B415B306A20E4C9E2C90F53C65F9E470D3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1a:85:6d:61:1a:1d:0b:6d:28:32:4c:5d:b6:
13:04:24:fe:07:0c:14:85:ef:ee:92:19:86:68:62:
e5:5a:7d:36:50:c5:ca:7b:37:34:7d:ff:5c:a8:5d:
c5:e4:94:8a:f4:12:c4:66:c0:43:ce:f8:aa:94:90:
63:e3:fa:47:c2:80:88:c5:0e:49:8a:5b:f4:ca:ca:
31:88:ca:14:9c:cc:80:c0:84:30:f2:4d:b9:45:ae:
19:49:59:c9:b8:01:68:63:52:f8:4b:9a:73:91:a4:
08:d2:5a:c9:83:40:21:b6:b4:30:77:10:a4:ba:f6:
c4:f0:99:eb:98:52:13:5b:c0:2b:00:2b:8b:aa:7a:
93:69:88:61:b3:b3:46:11:2e:ec:ce:c2:1a:fe:d6:
89:2b:ea:be:b2:d5:ab:9d:de:e7:88:f2:a1:81:11:
ea:75:5e:9f:81:b2:79:d4:11:d6:38:b3:a6:ac:96:
2f:78:01:5b:7a:1d:f9:62:ff:44:12:41:d7:46:da:
68:a8:0c:d4:ba:be:77:66:f7:7e:e3:f3:56:c0:6e:
ac:ca:3b:f8:e1:1f:6c:ef:4d:32:f7:a7:32:cb:b7:
a5:cb:64:ff:3d:6c:a8:f3:9a:bd:ad:be:41:4a:d8:
2c:5b:47:a3:b1:0e:b8:2f:4b:52:38:4c:f4:6c:9d:
92:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EA:4B:41:5B:30:6A:20:E4:C9:E2:C9:0F:53:C6:5F:9E:47:0D:3D
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/xepLQVswaiDkyeLJD1PGX55HDT0.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:e6:d5:95:bf:94:1c:aa:05:bb:9c:dc:31:08:db:7f:5f:10:
07:d2:45:69:ac:0f:21:ff:61:af:68:8c:10:a0:41:67:d2:31:
1a:db:f7:52:2b:75:23:09:ec:f8:0c:96:cf:7a:58:4b:11:59:
4a:3c:e5:8e:a5:0a:00:d3:84:3b:e4:da:50:35:17:3f:8b:93:
00:98:1b:da:ee:4e:2f:70:91:f7:f1:c4:11:58:ca:77:54:97:
f3:de:52:5d:4f:ee:ca:50:6c:9d:15:0e:fe:e4:d1:5a:e5:03:
70:ed:be:9c:a1:80:54:5e:e9:c3:30:2b:f6:44:69:30:2a:58:
da:71:7a:1e:e4:6e:81:11:52:a0:9f:61:91:24:03:f2:5d:b8:
2c:b1:64:e4:83:ad:85:14:69:e1:5c:b0:2a:7d:3f:c9:1f:2f:
ee:f6:c1:23:d7:1f:20:5f:4b:c5:9c:5a:af:ff:e5:86:15:7e:
5c:e1:79:88:13:e7:8a:d9:4b:dc:e3:ac:01:1e:00:85:d7:78:
3e:fe:4b:ff:b2:3b:d6:49:37:01:1e:0a:75:ad:49:f2:6c:f8:
10:8c:81:32:7c:e8:6b:fc:13:b3:a2:3c:3d:f5:3e:ba:7e:f0:
77:e7:29:42:9b:c4:3c:b5:f6:a1:64:cc:f8:7e:04:1c:54:31:
00:b6:26:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org