Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/GNopBHBu3qw36_VbRsgruRofLrQ.roa
File: GNopBHBu3qw36_VbRsgruRofLrQ.roa (raw, json)
Hash identifier: dH201O55niukofxzMDPh2TZuSzh9G/i9rh1cBHGQADg=
Subject key identifier: 18:DA:29:04:70:6E:DE:AC:37:EB:F5:5B:46:C8:2B:B9:1A:1F:2E:B4
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 457B
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/GNopBHBu3qw36_VbRsgruRofLrQ.roa
Signing time: Tue 29 Mar 2022 00:30:09 +0000
ROA not before: Tue 29 Mar 2022 00:30:09 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17787 (0x457b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 29 00:30:09 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=18DA2904706EDEAC37EBF55B46C82BB91A1F2EB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:55:ad:1c:ae:06:a0:de:52:12:07:84:ee:82:
17:2a:58:f8:b4:21:ed:1e:e5:42:cf:4a:52:03:bd:
12:c6:67:86:51:29:cc:62:72:dc:80:90:4e:de:09:
b3:f6:c1:46:64:54:00:fd:4f:74:37:5e:3f:0f:d9:
7b:1b:e8:f8:b2:67:9c:3f:2c:59:e9:a7:04:80:b5:
f9:45:38:99:4b:c5:c6:a8:51:e2:c9:5b:5e:4f:a0:
84:f8:38:78:65:d1:66:1b:0c:5f:46:cc:22:de:57:
4e:97:56:07:af:7b:03:57:81:6a:e9:8a:06:fc:8e:
25:9f:59:97:b4:db:97:c0:92:e5:4b:ec:64:67:2e:
4b:77:c7:87:d7:9b:44:cf:05:8b:ff:a2:4f:6d:3b:
a1:04:76:f8:de:2c:aa:fe:3a:b0:d4:a5:20:ee:b4:
91:82:d8:88:19:25:2d:6f:ee:d2:7e:cc:d2:a6:73:
39:a2:d2:ea:98:a9:8e:7c:2b:51:90:6a:e6:23:e9:
22:c2:8b:21:c4:0b:ea:08:cd:01:84:98:61:4d:44:
5e:17:9d:ae:88:24:06:48:9f:f8:6e:a8:68:af:c1:
84:03:d6:e7:b5:16:3c:df:ac:85:73:c5:fc:d2:7b:
ca:44:27:14:09:7c:11:e0:99:ca:c0:21:c7:49:21:
9f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:DA:29:04:70:6E:DE:AC:37:EB:F5:5B:46:C8:2B:B9:1A:1F:2E:B4
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/GNopBHBu3qw36_VbRsgruRofLrQ.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
97:95:ff:5e:be:08:43:73:44:99:55:37:8d:bd:44:74:6b:4a:
90:7e:97:a5:38:b1:74:97:2c:52:09:be:1b:44:f8:78:ae:1b:
fe:61:58:8c:a9:c1:e9:f2:db:a6:fc:d9:f1:9f:5b:9c:86:df:
82:c2:e5:a6:93:f4:81:cf:4d:51:a4:58:5d:7b:2e:da:10:7f:
ff:30:91:bc:70:d5:09:ca:ff:da:c3:e0:50:67:78:91:e5:52:
13:cc:f2:f7:1b:e3:2e:e6:08:ff:77:d0:41:c0:40:9d:ce:60:
3b:1e:52:f1:06:e0:2d:4c:9c:24:e2:8f:2f:fc:73:29:be:31:
c5:2a:e0:15:cb:c9:13:e2:88:3c:1a:bd:14:5c:7d:e1:da:4f:
c1:7e:35:00:dc:65:c3:23:58:c7:84:d8:58:11:f1:49:f1:5c:
20:b5:1d:4a:4b:86:94:80:e8:86:0b:e3:f5:a0:ff:84:6e:34:
11:84:df:ed:af:01:5f:42:95:b1:d3:b5:d2:af:ad:7e:39:52:
40:5a:35:ee:d5:66:59:a1:f1:55:85:4c:ba:ec:a2:2e:62:2a:
b5:f7:d3:dc:61:dd:24:69:82:93:9d:41:b6:99:06:bd:f8:be:
98:5f:da:d0:63:55:82:02:f1:c4:7b:a4:99:ed:36:34:32:d1:
1d:12:61:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org