Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/AUWTE5G5dDsFPqftw9AJmjWwmXU.roa
File: AUWTE5G5dDsFPqftw9AJmjWwmXU.roa (raw, json)
Hash identifier: Z5v0rd/RvzQNASFtW0bsjxU91EqEo3X4TUxqKQxK9+E=
Subject key identifier: 01:45:93:13:91:B9:74:3B:05:3E:A7:ED:C3:D0:09:9A:35:B0:99:75
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 43A5
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/AUWTE5G5dDsFPqftw9AJmjWwmXU.roa
Signing time: Wed 23 Feb 2022 00:30:10 +0000
ROA not before: Wed 23 Feb 2022 00:30:10 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17317 (0x43a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 23 00:30:10 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=0145931391B9743B053EA7EDC3D0099A35B09975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:34:50:15:cb:fe:bf:b1:0b:c0:d4:7e:7d:96:
68:a3:4f:36:17:65:58:d8:9f:02:dc:6f:a9:ba:f1:
f6:4c:28:96:57:56:21:05:32:a1:61:82:1b:23:2d:
f5:47:bd:10:22:06:fd:e5:5a:f6:39:0c:12:12:c4:
02:d1:23:d4:fc:8f:30:dc:6a:6d:c1:44:d6:f8:12:
a9:cb:86:98:2b:6f:92:d7:f5:d3:d7:a7:fc:85:64:
17:f5:03:bb:a7:a6:34:78:1f:ec:fa:cd:58:0e:a1:
4a:99:9e:91:5f:2f:71:bd:61:ec:a2:61:79:59:6a:
95:e7:b5:a3:81:25:8d:04:ae:8f:7f:7a:c4:3d:b7:
ce:82:c3:25:b6:b1:2e:05:7f:5f:12:46:c9:52:8a:
c3:d5:55:47:81:4c:56:8a:d0:51:26:19:60:82:94:
17:a5:bf:b4:79:f9:72:b8:78:34:38:87:b4:00:e4:
45:5c:38:48:72:c5:f9:54:3e:28:40:12:ba:17:d7:
41:d3:b7:60:1d:bd:fa:38:fb:16:f7:9f:67:3b:95:
07:81:05:44:5a:91:63:1a:f4:03:d4:be:0b:c9:6a:
a9:04:1d:61:14:22:e9:40:69:95:99:0e:6a:0b:3c:
0a:bd:a5:28:0c:86:40:fc:36:6c:fe:88:69:51:ba:
61:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:45:93:13:91:B9:74:3B:05:3E:A7:ED:C3:D0:09:9A:35:B0:99:75
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/AUWTE5G5dDsFPqftw9AJmjWwmXU.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:fe:e2:15:9a:f7:1e:31:6a:0b:de:ff:a3:fb:c9:c5:f2:72:
46:62:e4:50:e1:fa:f8:6f:e2:8e:79:53:9d:ce:11:25:cf:2a:
13:a6:a6:8b:e9:aa:b9:48:d6:ef:f3:e2:d6:5d:a1:2d:a0:e8:
e7:d7:b1:ea:ea:a3:6d:f4:da:26:bb:f6:1c:4b:4e:9d:3a:07:
a5:a7:1b:0f:96:aa:86:30:d7:b8:42:a0:37:d8:85:ec:8a:13:
e9:8c:af:82:1a:17:22:39:e1:71:65:28:d9:32:eb:5b:bc:1d:
ec:44:47:36:4e:b6:21:22:60:06:cd:bd:14:b0:59:92:c5:6a:
7f:6a:6f:51:e1:a9:5d:5c:bc:ef:0f:77:03:b8:b5:33:41:0d:
45:28:9a:45:78:de:67:63:17:15:40:aa:fe:a6:94:59:19:47:
ff:73:15:aa:45:c3:c4:62:36:ee:c2:47:77:66:06:81:60:64:
ba:95:8a:2a:2b:d8:81:a9:f2:5e:06:fa:10:78:7a:38:b0:7a:
ad:58:e9:74:c5:b0:a7:db:fb:8f:5e:a6:b2:64:c4:db:43:c4:
75:cd:58:ba:b5:2b:f7:08:7b:db:6c:a8:e7:51:96:c6:27:7d:
a1:f5:34:82:a6:63:39:ad:17:d9:a6:9f:23:0e:cf:17:34:c5:
bf:ad:04:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org