Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/JidAuWYt5O4B-B5xUfOYIhWGMGE.roa
File: JidAuWYt5O4B-B5xUfOYIhWGMGE.roa (raw, json)
Hash identifier: cF8uH0Q70OngsTt3lofFaCpZKfbYSHQNbdSrnVvREnQ=
Subject key identifier: 26:27:40:B9:66:2D:E4:EE:01:F8:1E:71:51:F3:98:22:15:86:30:61
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 472A
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/JidAuWYt5O4B-B5xUfOYIhWGMGE.roa
Signing time: Fri 29 Apr 2022 00:30:08 +0000
ROA not before: Fri 29 Apr 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18218 (0x472a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 29 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=262740B9662DE4EE01F81E7151F3982215863061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3a:23:6e:17:8f:ee:37:ed:e4:04:b4:50:78:
9c:e0:78:fc:49:75:6f:db:61:73:69:8b:fd:b4:1c:
39:17:2c:71:8b:c9:7d:d0:3e:a3:ce:b1:ab:12:76:
e5:b6:84:ba:f9:e7:83:7e:3d:eb:ea:bc:eb:b6:99:
3e:d8:cb:09:e1:53:21:b5:e1:68:5f:b3:34:0e:54:
95:80:3b:a9:5a:77:ae:44:ac:0d:3f:8d:f6:34:9c:
54:34:dd:8b:21:b0:77:70:d6:0f:61:4a:07:85:98:
1b:e4:99:fd:80:20:8f:08:2f:c2:c2:81:dd:80:f5:
ee:22:81:ee:90:64:72:b9:63:b5:d6:48:be:19:02:
3e:f4:70:21:15:0d:ad:bc:75:ac:23:70:13:96:3f:
b9:35:a7:85:87:e9:3b:3a:a8:31:e4:6b:ed:a8:0a:
39:4d:b2:15:b4:a7:7c:2b:da:39:a6:59:ae:b6:50:
8d:4f:dd:db:1d:4d:ce:1b:4e:90:56:68:9f:85:10:
6d:f7:6c:f9:23:9b:07:b4:c0:1c:2c:b5:74:6b:48:
37:c4:4a:de:ba:38:96:b8:e6:0d:ab:88:34:f5:4e:
de:d1:16:c2:36:2f:34:54:7c:ff:9b:33:43:e3:7d:
35:07:71:1e:ba:0f:bd:f3:e9:bf:77:b0:9a:de:d8:
fd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:27:40:B9:66:2D:E4:EE:01:F8:1E:71:51:F3:98:22:15:86:30:61
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/JidAuWYt5O4B-B5xUfOYIhWGMGE.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
34:b1:94:93:7b:21:86:fa:28:85:f5:30:93:df:b9:3c:13:f9:
07:7e:01:ce:3c:9d:17:33:d0:f9:39:8a:52:b4:a8:56:a6:9e:
11:0e:9d:94:28:4e:9b:cf:65:83:14:6a:81:76:6d:b5:47:9b:
f1:a3:d7:ea:e2:e7:62:6f:b5:3e:74:97:9d:6b:8c:f9:43:d0:
0b:54:1f:05:45:d0:28:26:08:85:20:c1:90:9d:67:b2:eb:ee:
76:27:f8:87:bb:b2:9c:0a:12:56:e5:79:6f:e2:4b:a0:74:e5:
96:79:a5:2d:24:81:c2:db:31:96:a8:5e:4a:bc:97:f5:fa:95:
98:8a:07:ad:13:da:ec:bb:7b:22:39:e9:4d:af:4f:9c:f3:bd:
f6:b7:b9:d8:93:8d:9f:65:3a:7f:60:9b:33:4b:9b:24:7b:14:
a4:06:7f:f3:18:67:61:fa:7e:aa:e6:de:00:36:ae:a4:cf:28:
87:2c:17:92:02:5b:20:5c:b2:ac:7a:a4:93:25:4f:bd:ad:ab:
87:75:14:f0:43:84:da:e3:fa:40:e2:a4:6f:7c:8f:08:af:57:
b4:64:55:23:6b:6f:15:64:b1:30:96:91:f5:da:ef:fd:37:40:
99:33:c3:91:4b:97:ff:e3:26:90:e1:7b:dc:ab:21:87:34:d3:
80:d9:96:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org