Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/5zA9rOqilManDOxuO_soDKAtHtI.roa
File: 5zA9rOqilManDOxuO_soDKAtHtI.roa (raw, json)
Hash identifier: HKNb99Mx7ROyiPhz2BoKNIFg5u4AhPFvGr+l2cnMmgE=
Subject key identifier: E7:30:3D:AC:EA:A2:94:C6:A7:0C:EC:6E:3B:FB:28:0C:A0:2D:1E:D2
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 44A8
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/5zA9rOqilManDOxuO_soDKAtHtI.roa
Signing time: Mon 14 Mar 2022 00:30:10 +0000
ROA not before: Mon 14 Mar 2022 00:30:10 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17576 (0x44a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 14 00:30:10 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=E7303DACEAA294C6A70CEC6E3BFB280CA02D1ED2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:db:d3:61:ae:c5:e2:82:58:8d:dd:bc:59:a6:
bd:29:8e:fa:d9:ad:b8:95:09:be:ad:f5:2b:e6:84:
ef:d7:6a:dd:fd:7c:3b:c0:6c:87:a1:7e:42:2f:59:
6f:4d:fe:24:87:29:76:b1:b9:db:9d:40:36:53:c5:
80:d3:9f:f4:7e:6e:e1:b4:dd:94:c0:e1:2a:31:31:
b7:0d:07:97:24:e3:14:1a:5c:76:23:82:4c:46:bb:
1e:c0:0e:40:be:6b:53:9f:df:2d:04:38:f7:37:d6:
20:99:7c:5e:e6:84:61:58:83:66:df:a5:a5:b1:59:
c8:4c:bf:82:5f:67:1f:e8:68:d1:b4:3c:cc:0b:b5:
99:18:07:a8:b2:c0:48:1a:b8:43:a0:71:e9:f1:3e:
d8:36:75:e7:31:4b:7a:5d:84:73:80:b1:3a:22:03:
71:c3:e3:72:ea:f8:a6:c2:45:76:34:c3:dd:60:37:
33:ad:3f:e9:ff:14:8e:7b:ea:4f:d1:2d:88:c6:1a:
a5:4c:6c:13:91:72:0e:04:ac:af:c0:45:61:94:9c:
a3:67:0d:80:3b:7d:a7:2b:6a:fe:28:bf:62:e1:ef:
6d:87:14:a4:24:d1:47:54:b9:f3:b9:1e:03:e8:9c:
09:4d:85:7a:7d:a2:ca:ce:68:da:7e:45:e9:30:30:
40:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:30:3D:AC:EA:A2:94:C6:A7:0C:EC:6E:3B:FB:28:0C:A0:2D:1E:D2
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/5zA9rOqilManDOxuO_soDKAtHtI.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
68:0f:52:9a:8d:f8:cf:3a:ec:94:8a:d8:be:55:c1:5e:7f:e9:
10:ac:88:ef:57:a1:e6:b4:21:25:f2:14:1f:d5:48:b6:06:47:
60:81:57:b4:8d:49:b4:1f:af:7b:ca:29:81:10:15:a1:a8:5c:
25:ca:c0:45:35:66:f7:7f:1a:e5:86:e3:aa:51:4d:74:f3:eb:
ed:f4:bb:5f:52:fd:cc:0e:7d:4b:22:67:85:5a:66:97:ca:97:
fd:57:4c:5e:6f:2b:dc:4d:d6:e1:ce:67:04:59:d0:a9:6e:b3:
d3:19:24:2d:9d:cd:bf:bb:b7:28:b8:1b:62:a1:dd:e0:76:f3:
08:b6:9f:93:03:04:7c:ff:5a:f7:f7:1d:0b:b3:47:1c:43:6b:
ad:76:46:27:b9:67:b7:ba:7a:53:04:ae:26:17:68:56:99:83:
ab:1b:06:11:93:ec:f5:72:00:9f:b2:31:a2:06:ed:d4:a9:07:
b0:d1:25:b1:e5:38:f9:3c:8c:35:34:1c:1f:85:00:0e:7d:71:
05:87:34:1b:72:5a:bb:4c:aa:e9:4a:8b:63:92:2e:7e:92:bc:
8d:ae:6b:fe:ce:d4:c6:aa:96:e4:c7:ed:68:29:54:35:c5:28:
82:4f:20:da:b8:f8:24:e6:3d:89:eb:ed:2f:98:44:c0:7c:77:
1e:d6:8c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org