Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/Ez8mD6Ag5dTdJwUOUk5FlI9wScw.roa
File: Ez8mD6Ag5dTdJwUOUk5FlI9wScw.roa (raw, json)
Hash identifier: UpvVtsambur3hNyEuecSkZpXbBuEOKYS5QROxba1UJ8=
Subject key identifier: 13:3F:26:0F:A0:20:E5:D4:DD:27:05:0E:52:4E:45:94:8F:70:49:CC
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 46F2
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Ez8mD6Ag5dTdJwUOUk5FlI9wScw.roa
Signing time: Mon 25 Apr 2022 00:30:07 +0000
ROA not before: Mon 25 Apr 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18162 (0x46f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 25 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=133F260FA020E5D4DD27050E524E45948F7049CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bb:70:38:37:b7:5a:88:3a:36:82:1d:9d:1a:
83:55:3c:db:c0:c7:fa:a1:97:fa:9f:5f:02:8c:6b:
f9:ed:54:eb:d4:e1:7b:6e:82:74:5c:e9:f5:ef:5b:
3b:9e:2c:5c:06:7f:e8:d5:59:4f:bc:c5:03:9b:c2:
24:7b:7e:fb:e0:54:c2:6b:1e:63:f4:55:35:82:42:
d2:5a:03:98:ae:6b:f6:8d:14:5b:8f:f3:f1:3d:0e:
c5:28:e5:12:eb:bd:11:03:66:e4:45:c6:a1:c8:fc:
82:cb:77:ab:46:cf:06:86:ef:1d:49:98:e4:ca:52:
ec:94:da:a2:9d:42:a6:37:aa:e3:70:f0:73:4b:5d:
ff:9e:04:16:87:38:11:36:8d:03:4d:bd:8e:07:ca:
9d:04:47:d4:f5:e7:f8:7e:7e:d1:64:7a:c9:4c:49:
84:81:ab:47:73:01:02:a6:5a:fa:bf:a8:97:a0:7f:
25:67:cd:d4:f7:52:84:ab:d0:b8:f2:54:a1:47:fd:
37:82:18:2a:16:28:c7:68:89:20:a0:4a:97:61:e9:
ad:75:72:8e:61:b3:a2:99:5f:8c:ad:43:3d:00:74:
7d:c4:20:89:42:e6:79:3f:3a:3b:fb:d7:a9:53:28:
e1:ad:f1:57:b3:67:b4:2f:39:49:a7:df:89:a4:f7:
b3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3F:26:0F:A0:20:E5:D4:DD:27:05:0E:52:4E:45:94:8F:70:49:CC
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Ez8mD6Ag5dTdJwUOUk5FlI9wScw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
24:80:fe:f1:1c:0b:2c:bf:29:71:84:e3:b6:0c:15:1a:e1:f5:
27:67:67:1d:d7:df:58:55:ea:6c:a4:99:c7:01:56:ff:a8:53:
7e:62:cf:cf:01:fb:7d:0c:a6:8d:da:a5:60:65:19:d0:75:76:
98:eb:1b:27:56:f6:80:12:b5:f2:8f:a2:46:6a:a8:78:f8:c5:
09:4f:98:d7:0f:e6:60:78:80:4a:a0:d9:f5:a2:30:1c:0b:f4:
ca:6b:f5:63:73:50:af:5c:7d:40:a2:3f:ad:8c:d3:e5:5a:5f:
84:eb:55:27:45:d4:55:9f:66:53:3b:02:b2:d9:33:35:c7:38:
89:61:e6:ba:aa:53:ef:a7:a4:46:67:fe:03:2c:77:ff:68:59:
a3:38:85:2b:a4:c4:2b:4c:c2:0c:f0:ba:b5:ec:17:62:b8:cc:
d9:da:71:8d:d5:b8:ca:f5:ff:97:b7:9c:d9:1a:6b:f9:f4:7f:
0c:20:34:c4:74:dd:33:55:0d:b0:5f:41:d9:4a:eb:e1:d4:bd:
50:50:d5:b3:3f:c7:cd:50:f3:24:57:43:6d:a7:0a:d1:bd:86:
f6:f0:16:ff:6c:59:63:7f:1c:1b:61:3b:89:1c:bd:78:76:a0:
f1:3a:80:c0:c0:15:61:e8:98:fe:26:67:98:4d:6c:9f:a6:b8:
60:65:0c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org