Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/RTEOP_AY_VF4PVSi81Y8aeoI0Bk.roa
File: RTEOP_AY_VF4PVSi81Y8aeoI0Bk.roa (raw, json)
Hash identifier: gG+latCdOeeTSdBvv+bshMw95EqHavJ0TTxwNmraRQY=
Subject key identifier: 45:31:0E:3F:F0:18:FD:51:78:3D:54:A2:F3:56:3C:69:EA:08:D0:19
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 47AC
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/RTEOP_AY_VF4PVSi81Y8aeoI0Bk.roa
Signing time: Sun 08 May 2022 00:30:09 +0000
ROA not before: Sun 08 May 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18348 (0x47ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 8 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=45310E3FF018FD51783D54A2F3563C69EA08D019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:50:c8:d5:d9:10:5c:74:24:4e:fc:33:51:d7:
d3:de:8c:a8:fd:8c:db:5c:29:7e:0a:e0:90:72:c9:
38:2e:e1:03:a1:f9:a6:19:46:ca:bf:98:a8:ac:91:
9b:7b:42:25:94:e1:ae:8f:77:ca:54:38:9b:73:c0:
3b:33:47:1b:fa:27:81:2d:37:00:0b:fb:fb:fd:f0:
93:50:58:98:56:76:76:4e:8c:64:e8:6d:c3:6e:87:
d1:43:aa:86:aa:56:d4:1c:e5:1a:3b:b3:97:f0:4c:
ee:e5:0b:2a:58:17:5b:0c:68:4e:de:eb:92:a9:fd:
d5:5e:1c:6b:82:e7:4f:f4:55:db:e0:f9:8c:b7:3a:
8e:89:c2:dd:fd:13:bb:ec:a4:df:07:b5:93:31:0b:
54:56:b0:fd:86:8a:20:98:b6:99:f6:16:f5:88:d7:
1f:90:1f:22:62:51:58:4d:e1:45:b4:4a:e8:4c:f4:
d2:74:ef:11:d2:47:8c:a7:9d:d0:a2:07:d1:67:a2:
13:a2:04:24:0d:0d:80:eb:71:38:11:e5:0c:a7:73:
c8:36:b5:2a:d1:fd:3d:9a:af:67:ff:88:39:35:35:
43:d8:41:65:07:21:29:a2:fb:e2:61:a0:35:b7:16:
ca:c8:b5:ee:bc:5a:d5:79:e8:d7:9f:ed:f2:a7:78:
30:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:31:0E:3F:F0:18:FD:51:78:3D:54:A2:F3:56:3C:69:EA:08:D0:19
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/RTEOP_AY_VF4PVSi81Y8aeoI0Bk.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
90:93:dc:46:83:33:51:fe:a7:74:6b:43:16:5f:06:70:33:fe:
39:3a:48:75:72:a3:5c:c0:9a:eb:20:2e:37:b0:c3:65:f6:ca:
21:ea:18:dd:de:67:f5:a4:eb:dc:77:93:1a:8a:ca:b1:8e:aa:
99:93:36:e1:38:e4:8c:6b:22:ef:6a:be:81:0d:e4:f7:d5:81:
05:4a:d4:42:41:f9:a1:8c:26:e4:0c:95:da:4b:48:1e:e6:f1:
fc:cf:c2:7f:eb:0f:be:a8:77:b5:d9:2e:1b:63:bd:4f:a7:d9:
d5:f2:65:41:11:6e:f1:41:04:b7:75:9f:43:06:4b:c6:de:ad:
14:b7:c4:66:d6:51:3d:3b:8e:6e:aa:4c:41:85:74:54:db:d2:
5f:5b:43:72:e0:e2:62:14:c7:d4:4e:c1:cf:bb:5a:33:c7:fc:
a7:84:49:70:60:ec:a3:bf:47:f1:19:cb:b8:1e:48:c3:49:96:
53:ed:d3:48:06:24:69:7e:21:10:6f:73:b6:cc:bb:94:12:73:
7e:b6:92:14:f4:e3:54:80:01:bb:14:82:02:f9:61:29:5a:a8:
8d:a0:ad:9c:b2:33:70:3d:51:f7:05:f8:e0:6e:bf:ed:6a:3b:
b1:be:e4:2a:35:87:a1:d1:18:c7:74:13:ff:80:70:29:a0:c5:
cb:38:63:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org