Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/-CSYgO_c6m50O4NurmQtHKGEdh4.roa
File: -CSYgO_c6m50O4NurmQtHKGEdh4.roa (raw, json)
Hash identifier: ThlDywqw/aPBraFRsYp3myyKXztNfCJUb5aIj+jXr2k=
Subject key identifier: F8:24:98:80:EF:DC:EA:6E:74:3B:83:6E:AE:64:2D:1C:A1:84:76:1E
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 453F
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/-CSYgO_c6m50O4NurmQtHKGEdh4.roa
Signing time: Fri 25 Mar 2022 00:30:07 +0000
ROA not before: Fri 25 Mar 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17727 (0x453f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 25 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=F8249880EFDCEA6E743B836EAE642D1CA184761E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:65:fc:b9:8d:9f:3b:f0:ad:44:26:18:0b:5c:
83:b7:30:49:57:78:1e:b8:3a:b2:c9:23:d8:13:79:
5b:4c:0e:77:c6:e5:64:39:46:c0:98:c6:f7:af:1f:
f4:a9:dc:f2:f6:e5:6b:59:b0:a2:40:b9:27:3e:d5:
38:97:a1:11:7f:b9:0b:4e:bf:dc:1d:e2:56:ae:8d:
2a:af:77:14:08:d7:17:a1:7a:f3:e4:55:f5:a9:32:
fa:52:0f:1e:9f:7b:d1:d3:db:fc:4f:b1:16:ce:a8:
a6:86:a7:e7:6f:61:a6:72:75:6a:4b:5a:c1:be:2e:
bf:14:2e:08:a1:51:fe:65:e8:29:54:b1:78:bd:09:
6e:2e:a0:72:55:d6:c1:19:a2:2b:a9:d4:8a:60:0b:
41:e3:04:a3:17:8c:88:17:3c:49:a0:b0:b3:8d:f0:
b2:49:1a:98:fb:37:58:6b:f3:d0:dd:33:5d:c5:74:
ea:fd:01:ca:3b:dc:46:6f:7b:b1:21:14:9c:5e:b7:
67:ed:3c:3b:7e:01:d0:5a:cf:85:8b:c3:86:c3:85:
7c:a2:cf:75:97:c8:88:10:97:4d:51:d9:42:1d:a4:
7f:cf:f2:42:84:7d:14:8e:46:d4:34:81:7e:df:23:
a4:a5:ee:4f:81:de:2b:ca:1c:45:94:ac:7c:34:e7:
16:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:24:98:80:EF:DC:EA:6E:74:3B:83:6E:AE:64:2D:1C:A1:84:76:1E
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/-CSYgO_c6m50O4NurmQtHKGEdh4.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:e6:17:f5:01:d4:26:38:9b:49:3a:99:fb:7d:48:40:1d:a2:
d7:77:e7:79:cf:bb:f8:bd:00:63:2f:27:69:d6:cd:c3:c9:8d:
fc:2c:fb:80:6d:c6:a7:1c:b6:2f:0c:c3:64:f3:92:db:7b:66:
98:32:8a:7b:23:5d:d9:cf:ee:3e:33:a9:cb:b1:03:31:ef:c7:
af:bf:6f:01:53:a9:97:3a:65:d8:dd:5a:bd:92:fe:ea:8e:96:
29:5b:1f:23:91:7d:54:3d:ee:71:80:a8:fb:21:70:9b:dc:be:
6c:ed:f8:0e:ad:28:0d:ef:cd:91:71:3e:47:f8:99:fe:17:26:
98:21:f0:d6:5d:cf:13:bd:e2:ce:c1:4c:35:5d:e1:53:ed:c7:
b6:d3:7f:a3:20:bf:21:94:48:99:fc:48:c1:d6:ef:54:a7:1b:
37:25:e3:ee:e1:0c:9e:58:fd:16:b2:e7:12:ef:aa:9a:54:c6:
31:b8:9b:9d:9a:98:bd:cc:b7:82:05:b3:f5:41:39:91:d9:f0:
11:a5:a9:fb:db:fa:ed:59:73:1c:0f:85:e7:ce:95:81:92:59:
3a:4a:e4:4a:cf:61:e2:34:13:8f:56:3e:87:bf:31:8e:b5:49:
cf:12:64:df:c1:a1:aa:e4:f5:87:24:03:e3:57:18:c1:e4:78:
57:6e:ee:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org