Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/2DsAzCIfyyCMAMBpoQto2gr-VkU.roa
File: 2DsAzCIfyyCMAMBpoQto2gr-VkU.roa (raw, json)
Hash identifier: +VklLfIT1TJG+qZBFMypY9Z9jgPNQE4AJLwgzP6hi+Q=
Subject key identifier: D8:3B:00:CC:22:1F:CB:20:8C:00:C0:69:A1:0B:68:DA:0A:FE:56:45
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 442D
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/2DsAzCIfyyCMAMBpoQto2gr-VkU.roa
Signing time: Sat 05 Mar 2022 00:30:09 +0000
ROA not before: Sat 05 Mar 2022 00:30:09 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17453 (0x442d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 5 00:30:09 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=D83B00CC221FCB208C00C069A10B68DA0AFE5645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:43:61:2e:2f:c6:e6:f4:2e:e9:9e:bb:73:96:
cd:a3:48:5d:54:4a:48:4e:63:f6:69:6e:89:73:44:
57:ba:d9:2b:a1:cb:3e:3e:72:21:fb:1e:45:94:e8:
3b:21:f8:5b:6f:f0:23:91:7e:19:b5:ea:a9:ca:a9:
4f:37:2a:e8:4e:4b:17:89:07:a4:71:c6:c1:ad:87:
6a:92:3e:6a:01:ec:13:4c:8e:b8:5b:06:78:fc:c7:
b5:a4:45:0f:72:de:70:38:02:56:03:8d:e7:9e:53:
40:05:4c:86:10:3d:21:36:f1:60:39:44:dc:1a:34:
9e:ff:c4:e3:3d:23:7b:49:d6:fc:b0:80:dd:a1:fb:
be:1c:d3:69:72:07:98:01:46:19:6a:41:d2:45:f1:
99:76:b4:05:b0:a7:5a:4f:9b:74:d5:6c:6f:e5:ed:
18:a2:39:ca:58:2a:ed:e4:06:30:c2:e9:b0:e8:30:
85:f6:77:09:32:88:25:32:52:f8:bd:01:05:29:c5:
42:6c:1d:fb:a4:47:1d:b4:7e:5d:05:7a:ad:95:0c:
f7:5f:30:3f:2b:32:55:19:16:1b:f1:ea:47:42:54:
a0:31:f0:d6:14:42:9d:70:e9:52:76:e5:d8:b0:0f:
9a:8b:d5:81:a9:1b:22:c9:d5:7d:5b:83:23:bc:d2:
70:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3B:00:CC:22:1F:CB:20:8C:00:C0:69:A1:0B:68:DA:0A:FE:56:45
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/2DsAzCIfyyCMAMBpoQto2gr-VkU.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
92:74:39:4b:c2:02:b2:44:99:18:34:66:e6:2c:f1:e8:02:28:
02:d0:eb:f3:b2:0c:19:df:3a:cb:b1:81:71:2d:78:36:c7:68:
8e:a3:85:fa:5c:a0:e7:9a:2c:e1:da:14:1c:fc:ab:f3:90:95:
12:fa:39:d4:43:cf:bc:cd:31:1f:55:1a:15:62:04:f9:b3:5d:
3b:31:57:f1:e6:4f:e0:a6:c8:86:96:3b:11:7a:15:78:75:23:
84:68:e3:45:7f:d5:d2:4d:56:45:ba:76:10:76:54:0c:67:6f:
e6:05:3a:84:ec:31:71:e2:cb:92:a4:cc:a3:5f:da:9a:21:44:
08:6c:68:65:08:33:7c:b1:7a:cc:f2:db:6c:e5:ce:9c:61:dc:
8e:4f:f1:56:c2:f4:6a:a7:7e:b6:b6:24:27:48:03:27:5e:a6:
4f:2c:67:a8:19:fe:69:65:15:0f:58:36:b1:da:e1:30:c2:c6:
0a:d5:aa:7c:78:9f:3e:a9:12:14:2e:bc:0d:60:27:41:49:3f:
7b:84:c4:28:19:b7:61:51:bb:ce:15:ac:2b:a1:35:09:11:fb:
ea:2f:db:50:2f:95:95:d1:74:94:37:17:07:30:5e:73:8f:34:
cb:b5:ef:3d:c9:7f:7e:67:d9:ab:97:59:73:9f:11:b3:2a:04:
cf:06:e5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org