Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/-qUAqQ7FthO8vYAOFe-vR4HzBYI.roa
File: -qUAqQ7FthO8vYAOFe-vR4HzBYI.roa (raw, json)
Hash identifier: NCcdK5nxMWz1CF/8xpA1eAPII2FPB3j91cXO7PXI72k=
Subject key identifier: FA:A5:00:A9:0E:C5:B6:13:BC:BD:80:0E:15:EF:AF:47:81:F3:05:82
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4758
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/-qUAqQ7FthO8vYAOFe-vR4HzBYI.roa
Signing time: Mon 02 May 2022 00:30:10 +0000
ROA not before: Mon 02 May 2022 00:30:10 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18264 (0x4758)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 2 00:30:10 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=FAA500A90EC5B613BCBD800E15EFAF4781F30582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ad:03:55:ff:71:73:26:fd:16:d7:7f:f2:8a:
2e:28:ec:5b:61:b8:76:8d:6b:6d:39:6e:36:87:e8:
ab:96:46:c5:16:c5:0e:25:d8:89:96:58:04:3e:9b:
43:74:3a:cf:24:a4:c1:16:5d:2e:b8:6f:b3:3f:51:
25:45:3a:7c:78:bc:cc:38:98:21:1f:63:e0:9d:9b:
da:ce:ea:fe:39:1d:ec:42:c6:41:02:41:53:7a:95:
8d:97:34:21:43:07:76:d5:02:8d:b2:81:5a:e5:5c:
73:c9:1d:3c:c2:87:b2:40:3e:94:a0:cb:d3:1e:2a:
9e:63:36:e7:fe:45:32:da:87:42:e3:66:38:52:ac:
fd:28:02:92:df:a5:88:d6:f9:b3:65:01:0b:2e:4e:
76:0c:97:32:f0:46:74:66:ce:76:dd:63:49:70:1f:
c6:33:c6:4c:b4:ab:77:54:39:35:a9:6b:5c:94:0b:
f1:3e:49:76:62:f4:85:d9:f7:3b:f3:0d:fa:ba:16:
e1:7e:88:3a:96:51:4e:d9:11:e9:ee:10:e3:92:ed:
fc:67:74:2c:da:a1:4e:92:16:64:b2:2d:d2:2c:6e:
ac:56:fe:25:b6:c1:0f:19:bf:c3:cb:67:bb:15:a9:
f4:37:e0:39:1a:c6:97:13:7b:23:52:2e:23:88:5f:
eb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A5:00:A9:0E:C5:B6:13:BC:BD:80:0E:15:EF:AF:47:81:F3:05:82
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/-qUAqQ7FthO8vYAOFe-vR4HzBYI.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
29:f4:ba:dd:bc:bb:0e:d9:59:b3:ac:0e:1e:7c:55:2e:05:bc:
17:2a:63:59:79:fa:65:03:9b:da:ce:a5:25:1e:41:bb:b8:15:
60:3e:67:85:a2:77:d1:1b:b4:ac:d4:8b:74:93:ea:78:cb:85:
5b:e9:c5:5f:7c:1c:c5:1d:dd:02:ae:3d:1b:5d:5f:00:d0:8f:
34:af:b2:f8:aa:f1:20:6c:fd:d1:8f:40:b9:ba:70:27:d1:4c:
fb:89:2b:85:07:b7:d7:61:f5:1f:9d:82:40:13:c1:39:62:d1:
b4:37:98:24:f4:7f:6f:38:02:95:e7:36:de:dc:2d:8b:a2:57:
a7:f8:cd:f6:df:ec:26:8d:ad:bf:a3:ad:17:c5:79:48:ef:49:
52:59:f3:be:85:19:45:18:04:10:9f:40:d4:19:53:0a:6a:37:
fd:46:3f:a0:3e:b4:7e:51:0a:c8:33:49:0e:dd:49:6b:38:3a:
92:67:04:ed:09:1d:bb:e6:e8:a3:44:a5:33:4c:dd:b6:38:da:
00:0a:6d:8b:25:73:ce:f0:c8:fe:61:1a:0d:70:7e:28:57:c2:
16:18:c3:5b:7e:4c:db:1c:56:c7:d6:c8:a4:60:42:54:1b:7e:
e4:7d:01:9b:fe:1f:99:60:cd:ba:ee:7e:68:a4:95:f2:c5:73:
0b:08:97:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org