Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/1-fm-j0qvgoM7GS9tZYDwhwgJRU.roa
File: 1-fm-j0qvgoM7GS9tZYDwhwgJRU.roa (raw, json)
Hash identifier: IzX9Nv0Fxp5VDu7jMbDEj3GUcQh9nPjqHVIBqkjLQjk=
Subject key identifier: D7:E7:E6:FA:3D:2A:BE:0A:0C:EC:64:BD:B5:96:03:C2:1C:20:25:15
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 429C
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/1-fm-j0qvgoM7GS9tZYDwhwgJRU.roa
Signing time: Fri 04 Feb 2022 00:30:08 +0000
ROA not before: Fri 04 Feb 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17052 (0x429c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 4 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=D7E7E6FA3D2ABE0A0CEC64BDB59603C21C202515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:76:93:15:be:f8:48:e5:09:90:bf:61:ee:76:
d2:5a:28:97:d6:27:cd:2a:ae:2a:c7:53:8a:3e:07:
33:5e:29:8c:9b:34:fd:7a:74:73:6c:9b:54:16:4d:
af:73:50:ab:01:c5:4c:b2:56:2b:34:fa:c7:00:3c:
55:a4:c7:90:d3:8d:0c:b3:39:89:15:2b:5e:fa:a8:
d1:de:94:5d:21:df:3b:ec:38:76:39:bb:f8:db:fc:
9a:ec:60:46:27:33:e9:4a:bc:70:37:94:46:74:75:
43:94:37:8f:df:14:26:21:d9:2d:58:7b:cc:5f:e6:
44:48:96:18:af:0a:be:fa:85:67:0e:70:03:bd:6c:
ed:d8:41:d2:41:f8:5c:cc:6d:be:88:9e:47:ae:f9:
c2:48:22:50:8a:90:c9:a1:1a:49:c6:3e:8c:dd:8e:
38:14:31:8e:23:9d:eb:ff:d3:60:8f:c1:ed:48:d2:
95:17:a9:7c:5d:87:79:09:8f:b1:b7:4f:2e:f9:a6:
98:42:9d:06:bc:d1:db:82:89:6d:97:0a:06:01:d2:
f6:4d:ea:4c:c4:d1:8a:ea:d3:c8:04:05:6b:ed:09:
b7:92:ca:9d:74:44:2f:ff:10:e3:67:3d:9e:1a:4c:
91:85:d9:a6:e3:2e:6c:81:da:83:0a:f5:85:a5:a3:
98:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E7:E6:FA:3D:2A:BE:0A:0C:EC:64:BD:B5:96:03:C2:1C:20:25:15
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/1-fm-j0qvgoM7GS9tZYDwhwgJRU.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
42:6f:a2:2e:26:70:87:b7:97:0f:78:86:de:4a:da:f7:eb:d3:
af:ef:76:89:0f:b3:05:45:f3:a0:4c:8e:d4:70:f8:67:a6:79:
44:28:f0:61:7c:dc:c4:32:85:d2:a3:c4:72:19:ad:1e:9e:1d:
8d:79:71:b1:1d:73:26:63:a0:6f:4a:bf:3f:ae:5c:d4:b0:c4:
19:42:a4:ea:97:ae:5c:03:38:4b:df:6d:26:02:d8:97:cb:70:
29:08:52:8d:9e:0d:e3:eb:5a:50:13:ec:08:c9:15:00:3d:c8:
5a:c5:5d:57:ef:5d:e2:95:81:21:54:4e:cf:a6:47:6b:87:00:
64:4f:a3:e6:1b:40:21:f1:23:61:09:5a:64:39:f3:a8:45:db:
d7:c3:f5:a7:3f:a7:63:bd:83:cc:1b:eb:2d:da:11:54:bb:b3:
8d:f9:69:54:fe:34:1e:7d:91:b5:6d:e8:4e:0a:d5:bd:36:56:
bd:01:f3:f9:a4:42:51:f3:72:91:80:18:7a:9a:ee:95:8f:f3:
b2:7f:06:5c:d5:7e:ca:0b:ac:6f:b2:64:f1:af:87:04:e3:59:
19:ee:55:02:37:3a:e8:59:53:d7:e9:aa:9b:4f:d5:73:35:54:
2d:58:d1:cf:8b:16:50:1a:32:be:0e:cf:40:19:a6:8d:a1:6c:
f1:99:c8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org