Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/J76vR5wVCLTLZjqVrPtoIVuV4VA.roa
File: J76vR5wVCLTLZjqVrPtoIVuV4VA.roa (raw, json)
Hash identifier: 42GSxHgrsqYVMJRWAIjQEz8BT7F7r2fr4j/KxrHYOV8=
Subject key identifier: 27:BE:AF:47:9C:15:08:B4:CB:66:3A:95:AC:FB:68:21:5B:95:E1:50
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 44D2
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/J76vR5wVCLTLZjqVrPtoIVuV4VA.roa
Signing time: Thu 17 Mar 2022 00:30:11 +0000
ROA not before: Thu 17 Mar 2022 00:30:11 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17618 (0x44d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 17 00:30:11 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=27BEAF479C1508B4CB663A95ACFB68215B95E150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:45:f9:1f:75:a6:f7:46:93:79:2c:37:6f:03:
d7:41:55:e4:6c:16:d0:ff:83:f3:57:29:c6:bc:f2:
4e:82:04:fc:73:df:80:0e:16:1d:d4:76:f4:4b:1d:
4d:eb:a6:23:45:cb:2d:b6:dd:13:e6:a5:8e:85:44:
06:38:bf:04:71:ad:47:4d:21:66:4c:51:0f:0f:bd:
37:1f:ef:77:a9:df:1e:7b:ee:8f:47:db:e0:5b:30:
33:de:60:b5:fa:7b:98:4d:b9:f3:3e:92:e5:16:f7:
ee:79:e6:1e:69:c2:78:33:43:5d:44:de:cc:a8:34:
40:bf:52:d7:9c:e4:9c:22:eb:a9:c7:84:49:33:71:
21:ed:a4:49:13:02:2a:3c:58:74:7e:f0:03:66:1a:
e7:04:56:4c:f2:05:18:30:a1:64:c6:78:00:1a:82:
02:3a:25:b4:c2:a7:9d:e3:a8:e2:7f:e7:aa:5b:b8:
85:96:79:b7:2a:77:7e:da:fa:95:13:18:3c:e1:eb:
cb:f0:2f:8f:6f:6a:32:ee:66:3a:63:03:14:6b:e7:
9e:ee:3d:03:a9:e4:71:e8:2c:1d:e1:23:de:06:b5:
17:2e:53:7a:b7:b2:ee:de:9c:bd:4a:f6:84:85:d5:
50:02:8e:95:7c:ba:0d:f2:8d:39:19:17:1b:15:ad:
d0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BE:AF:47:9C:15:08:B4:CB:66:3A:95:AC:FB:68:21:5B:95:E1:50
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/J76vR5wVCLTLZjqVrPtoIVuV4VA.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:1a:fc:6f:f2:68:37:c2:d4:73:c7:ab:4a:3d:91:1a:b7:de:
64:07:d4:5d:3b:4a:07:41:83:67:78:24:c6:ef:bc:62:e8:04:
42:16:94:fc:ed:22:34:7e:e8:2f:24:c2:0b:15:5e:eb:ba:2f:
50:b8:9d:df:b5:f1:3c:a4:c0:e5:0b:5a:c2:98:7c:bc:4f:93:
04:a9:06:b5:27:ef:ef:c8:80:7a:61:6e:01:f1:d2:e4:47:a3:
a8:0b:52:59:1d:2e:4c:38:30:8c:ea:86:e3:e9:46:61:6c:8a:
0d:c1:ec:e9:20:4d:5b:32:b3:e9:d6:c5:ec:0a:d9:a4:a6:ff:
4d:dc:f1:9a:48:d8:ce:08:a3:61:82:cd:0a:4b:88:d4:17:37:
ff:b3:c7:ac:b2:7a:a8:39:36:d1:33:56:07:d1:5e:e8:30:34:
b1:49:13:f3:a8:b0:07:99:51:04:91:48:26:37:f0:41:ea:11:
42:d4:95:e5:70:e1:67:1b:1c:b1:a8:b6:17:11:bc:87:08:ec:
c2:21:97:b5:8e:65:6b:7e:13:30:5e:84:ab:b1:31:99:56:f2:
2f:1d:18:0f:e0:0b:30:7a:f9:96:36:88:19:dd:1c:d8:48:8b:
3f:d9:7b:ea:09:79:c3:2f:ce:b6:de:ce:d3:04:4a:0e:7e:fe:
8d:f5:a6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org