Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/PhXuikVoSfADnAbQQ61mUpP8mBc.roa
File: PhXuikVoSfADnAbQQ61mUpP8mBc.roa (raw, json)
Hash identifier: 49vQ0pveBsTNj+gO8o7OU4PiEEPYnwi0uomk3A99+Ns=
Subject key identifier: 3E:15:EE:8A:45:68:49:F0:03:9C:06:D0:43:AD:66:52:93:FC:98:17
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 487A
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/PhXuikVoSfADnAbQQ61mUpP8mBc.roa
Signing time: Mon 23 May 2022 00:30:06 +0000
ROA not before: Mon 23 May 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18554 (0x487a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 23 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=3E15EE8A456849F0039C06D043AD665293FC9817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:25:66:1f:fa:38:4f:79:69:9e:3d:4a:17:aa:
5b:42:50:ea:85:cc:9c:f8:9c:d0:f4:b6:f8:c7:93:
56:2b:5d:ea:55:2c:df:ee:03:8d:7d:a0:7e:c9:0c:
e5:94:b6:09:f4:0e:7c:e7:52:b0:4f:f7:05:10:37:
e1:46:5b:6f:7a:06:00:1e:62:ef:2d:c9:3f:7a:07:
2c:64:04:8e:26:01:79:7a:1a:62:95:ca:c4:33:18:
e5:e0:93:52:54:40:58:53:00:8e:f0:3b:48:8a:a9:
ce:56:fc:c2:fc:03:c8:de:e7:7d:11:04:bd:5d:2d:
5a:8e:96:7a:13:64:dc:13:ee:4f:2a:07:99:6b:04:
98:54:dd:77:dc:10:c6:b0:48:d4:96:e2:48:44:43:
e4:18:ac:25:07:78:68:e0:a5:e9:09:e4:22:a4:f4:
cf:4a:16:be:a5:df:dc:90:cb:b7:8f:95:db:dd:59:
b1:f4:d4:14:04:a7:d6:5a:85:f9:41:b1:4d:8a:30:
09:57:94:f9:76:71:82:43:a2:42:8d:7e:92:63:ba:
de:3c:0c:cd:28:08:5e:bf:2f:cd:bc:4b:4e:90:a9:
16:e0:8d:bc:22:d3:c8:ed:97:f3:3d:19:c8:33:11:
6b:fa:8c:59:96:69:b8:f1:17:5e:19:db:74:45:a1:
79:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:15:EE:8A:45:68:49:F0:03:9C:06:D0:43:AD:66:52:93:FC:98:17
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/PhXuikVoSfADnAbQQ61mUpP8mBc.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:14:d6:57:a3:47:27:c2:59:08:f0:c3:c7:72:5e:2e:ca:29:
39:33:0c:a1:40:33:ff:2f:69:99:22:21:29:98:66:6d:53:ba:
3e:f5:ce:f0:28:49:34:36:d4:b6:73:6c:0a:d2:05:28:d6:6d:
7e:15:4c:a4:91:66:cc:7d:d2:08:de:c7:e6:76:22:22:20:27:
11:71:63:cd:6c:f8:54:ec:3d:4b:7e:1f:50:9c:cf:f0:a1:ce:
dd:ed:77:98:43:22:d9:63:ec:4b:06:69:07:03:d1:13:d2:f2:
54:e3:81:cc:2d:aa:f2:63:24:52:72:fd:f7:ff:3d:0d:4f:5f:
5d:41:fc:7e:70:db:17:08:fe:81:8e:06:91:1d:21:3f:d5:a9:
8e:bf:50:12:96:d4:ef:ad:46:d4:0a:30:03:d7:56:92:ea:76:
53:af:3f:af:18:6b:51:fc:08:4c:5e:b9:fe:de:5d:4e:ab:9e:
7d:ce:81:4c:72:84:95:a8:de:63:20:a7:84:b9:a7:60:b8:51:
96:aa:d0:a1:20:04:36:3b:85:ab:a0:a2:45:ca:ba:8f:bd:ff:
f7:4b:c2:89:37:a1:c6:bb:cb:69:8f:9e:bf:4e:d2:c5:01:e5:
7c:2c:5d:ce:08:31:4a:7c:20:f8:ef:62:e7:a4:8c:b0:8e:7f:
8d:7f:d9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org