Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/0fDRvZpL4USqZy4LQOedymihGt4.roa
File: 0fDRvZpL4USqZy4LQOedymihGt4.roa (raw, json)
Hash identifier: g7ArZ7Hxt5bVCja6Rj7uSQK3+NvtRPFj6MR96YThJYI=
Subject key identifier: D1:F0:D1:BD:9A:4B:E1:44:AA:67:2E:0B:40:E7:9D:CA:68:A1:1A:DE
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 3B01
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/0fDRvZpL4USqZy4LQOedymihGt4.roa
Signing time: Fri 17 Sep 2021 01:24:45 +0000
ROA not before: Fri 17 Sep 2021 01:24:45 +0000
ROA not after: Fri 01 Jul 2022 01:01:02 +0000
asID: 47065
IP address blocks: 45.132.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15105 (0x3b01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Sep 17 01:24:45 2021 GMT
Not After : Jul 1 01:01:02 2022 GMT
Subject: CN=D1F0D1BD9A4BE144AA672E0B40E79DCA68A11ADE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:07:4a:ed:9c:08:2a:8d:c8:ee:94:cf:ff:97:
ec:00:3e:3f:b2:0e:03:6e:de:17:fd:03:76:12:6f:
9c:88:78:d4:1b:33:a8:0c:c8:4a:28:d8:33:ba:17:
40:b7:43:2e:ba:61:c6:60:58:e9:f9:bb:ea:6b:f6:
85:12:5f:0f:c2:9b:0d:f0:15:22:49:7d:ec:40:a6:
3d:dc:4b:be:24:00:a1:7a:67:c5:88:a0:7a:8c:ad:
bc:23:85:ff:b8:f2:59:ef:f7:89:4f:96:7c:d4:6f:
d0:59:9c:78:9e:e6:06:ae:db:03:b2:3a:35:db:bb:
c0:a0:0d:d0:f1:db:41:ee:f8:15:b9:8f:8c:2e:5b:
66:b3:2e:9b:4f:fe:da:fd:03:0f:6e:02:3c:7d:07:
8d:82:4a:bd:34:16:ec:ef:2e:8f:47:15:a2:0d:57:
18:8e:17:67:b1:24:00:3a:58:44:ff:d8:c7:8f:ba:
21:79:38:13:c4:d9:e8:23:70:0b:5f:43:34:67:29:
a5:bb:47:db:b7:55:84:23:42:9e:9c:e6:bb:cc:be:
b3:1a:f4:cf:78:93:23:aa:c8:dc:b5:56:88:45:c8:
dd:33:0a:bf:33:49:dc:fb:67:8b:89:9a:af:96:ba:
6f:60:d1:c9:38:53:84:52:7f:f6:af:0a:a8:ae:db:
68:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F0:D1:BD:9A:4B:E1:44:AA:67:2E:0B:40:E7:9D:CA:68:A1:1A:DE
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/0fDRvZpL4USqZy4LQOedymihGt4.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.188.0/24
Signature Algorithm: sha256WithRSAEncryption
61:c3:36:4c:9f:cb:98:80:ed:e8:2d:e0:f5:7a:5b:ac:5f:66:
d5:2c:55:31:ba:cb:90:1c:c6:48:1e:d5:f2:6c:4c:ac:94:9c:
bd:1a:3f:65:fd:8b:b5:87:35:d8:76:23:e2:4a:9e:87:fc:06:
76:25:23:c4:f1:db:fb:8a:44:6d:9a:58:fc:c7:5c:9f:33:22:
f8:33:45:b9:06:f4:e7:46:2b:9c:8d:01:df:85:d5:7e:a1:9a:
59:61:0a:4b:91:e7:77:da:7e:3d:bf:2e:40:86:96:c7:25:93:
81:e2:fa:f4:66:59:41:a7:7a:7b:4c:53:32:02:47:48:d4:e4:
da:c2:6f:35:37:d7:6e:dc:60:77:12:5a:1d:58:b7:4d:81:ba:
04:02:bb:52:f9:34:68:2a:a9:d0:c7:e0:40:0e:d5:a2:7c:44:
1d:ab:2d:86:a5:04:23:63:7f:da:25:79:b5:07:d1:c7:9c:f0:
5d:89:b3:b3:78:30:f1:67:62:fc:c0:7b:aa:e3:52:67:8d:1e:
da:5b:d8:b9:0a:67:56:dd:fd:7b:dc:39:b6:45:70:29:5b:4d:
9d:56:4b:4d:4c:55:9c:06:35:58:ad:53:3d:50:56:4a:29:ac:
b2:22:ff:c6:a1:03:e3:63:ab:fa:5b:01:28:20:12:18:5a:29:
f2:dc:ef:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org