Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/IdjXT7BC2frnLwkKNBVTcfzFmHw.roa
File: IdjXT7BC2frnLwkKNBVTcfzFmHw.roa (raw, json)
Hash identifier: PJJF3sULJ3nJmoL86UrHka8Qx/Vm/PensvaRtNzrbQA=
Subject key identifier: 21:D8:D7:4F:B0:42:D9:FA:E7:2F:09:0A:34:15:53:71:FC:C5:98:7C
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 45DA
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/IdjXT7BC2frnLwkKNBVTcfzFmHw.roa
Signing time: Tue 05 Apr 2022 00:30:06 +0000
ROA not before: Tue 05 Apr 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17882 (0x45da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 5 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=21D8D74FB042D9FAE72F090A34155371FCC5987C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8d:3a:51:7e:47:44:13:90:b0:53:a4:05:a7:
d0:ad:c7:06:db:7c:69:d1:62:78:2c:83:31:22:f0:
ab:cc:d1:f2:1e:d1:72:81:99:19:5a:5d:30:6d:92:
8f:60:3c:6f:e1:ec:e7:4e:48:02:1f:ee:7f:87:fd:
6b:fa:07:97:bd:76:16:00:0b:6b:22:f9:de:f3:fc:
43:f9:a7:5f:cc:cd:e9:25:25:65:65:57:22:d4:34:
83:17:3e:64:68:04:5c:74:ef:fd:1d:9c:81:7c:60:
d6:94:24:76:bd:65:8d:d0:1b:39:04:f4:a2:ff:3e:
99:1a:c0:df:5f:0a:33:0d:19:69:3f:3c:9b:f4:15:
f6:10:1c:98:c0:d0:8d:f3:c0:09:64:a3:5e:01:a3:
e7:b8:7f:35:6b:b8:36:d1:97:18:79:2c:8f:05:24:
c7:f6:4b:08:5d:d9:4b:a8:7b:5f:42:3f:15:9e:46:
2f:39:42:a4:69:3d:bd:a1:14:7c:c2:cb:00:99:b5:
38:a5:92:88:d3:06:3b:fd:5b:9c:80:81:ea:f1:dd:
2e:1d:fa:c8:68:2a:9d:52:b4:3b:76:cc:cc:f8:63:
2e:a9:58:0e:13:71:e9:c6:a7:3b:00:1b:15:56:68:
5a:68:3d:b3:78:42:55:c6:12:62:31:6d:6c:f3:97:
fe:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D8:D7:4F:B0:42:D9:FA:E7:2F:09:0A:34:15:53:71:FC:C5:98:7C
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/IdjXT7BC2frnLwkKNBVTcfzFmHw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:cb:d3:35:7d:86:e9:68:14:fb:93:48:c7:79:5a:bf:bf:36:
8d:95:c9:1c:a6:72:fc:e7:77:60:1d:e3:1d:1d:73:88:f6:82:
3c:d4:f5:be:b1:c7:5b:c6:6e:0f:94:e6:0e:ac:4e:0d:ea:00:
18:7b:48:c6:20:1a:1a:17:84:41:dc:68:2a:45:25:56:0a:2a:
91:87:e3:6b:12:83:93:fd:e2:33:e7:c6:ef:14:16:39:f3:0d:
af:32:34:7e:10:9a:f0:f0:8b:3b:4f:98:7c:2c:db:3b:bd:0c:
61:43:82:d7:3b:46:88:55:f3:19:b1:ab:ef:4d:37:0c:d8:67:
e5:62:f7:d9:5d:e2:08:7f:28:d6:e7:b8:2c:99:f6:e6:ec:1d:
b7:a6:7f:a4:1f:61:96:3e:27:ff:fa:d2:08:00:2d:2c:c0:10:
45:c1:29:02:bf:61:c7:24:dd:11:e5:e0:bc:21:30:6c:00:1f:
28:f3:89:da:38:84:cc:e5:f3:7b:7b:6e:7c:5b:9d:7a:b5:5e:
f2:7f:2d:4f:2d:0c:08:f7:0a:1a:4e:05:ab:17:02:89:9d:56:
3d:05:ed:d3:86:23:db:6f:61:b7:7b:41:d3:2a:b4:03:99:3a:
98:01:90:c4:4d:50:ab:22:35:6b:34:85:d0:b5:6a:31:1d:20:
33:fc:9c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org