Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/TuphVqwjJ1TMatthgCZ6gms2Alw.roa
File: TuphVqwjJ1TMatthgCZ6gms2Alw.roa (raw, json)
Hash identifier: nKX/t8UoKjjGWyLzV1hUXQc8azOKPVIe4+gO0Hz4fjk=
Subject key identifier: 4E:EA:61:56:AC:23:27:54:CC:6A:DB:61:80:26:7A:82:6B:36:02:5C
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 45FA
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/TuphVqwjJ1TMatthgCZ6gms2Alw.roa
Signing time: Thu 07 Apr 2022 00:30:09 +0000
ROA not before: Thu 07 Apr 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17914 (0x45fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 7 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=4EEA6156AC232754CC6ADB6180267A826B36025C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:37:40:e3:bf:99:90:0b:03:cb:eb:eb:24:5d:
33:bc:7a:f1:6b:bd:96:91:1b:d7:43:17:75:1c:fb:
73:1a:6c:74:02:70:db:b3:db:98:af:5a:7c:aa:58:
53:56:e2:99:24:ab:d7:83:12:50:9b:3a:47:aa:5d:
f1:44:d7:6c:a0:df:9c:ad:d2:5c:34:e6:13:75:f5:
18:15:4e:33:c0:11:bc:65:6d:28:eb:8b:3b:35:cc:
fa:cd:3b:50:27:fe:cc:f5:db:01:14:67:d8:e3:2f:
98:ab:d4:2d:d0:b8:91:64:2d:2a:66:56:c4:5b:2f:
61:a8:c5:a4:d2:71:34:14:37:eb:bb:3d:ec:d9:a7:
9a:1b:1a:70:3e:41:2e:f9:d6:ea:55:00:38:04:65:
af:db:7d:27:0f:33:6e:64:c1:8a:88:d0:8d:cc:7f:
03:8d:9d:50:1e:8c:b3:9b:0d:7c:95:60:08:96:bf:
e3:a3:28:0e:8d:af:49:f3:99:a0:02:70:95:cb:0d:
1d:85:2c:e0:45:ad:eb:b9:99:a9:01:54:40:0c:a5:
94:11:6a:c1:14:34:24:32:05:75:6d:db:59:d2:ba:
3a:11:36:64:9d:91:67:fd:58:fe:3c:c8:4a:fd:c9:
b3:55:c3:33:7c:13:a0:44:3d:54:09:d2:69:4a:74:
93:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:EA:61:56:AC:23:27:54:CC:6A:DB:61:80:26:7A:82:6B:36:02:5C
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/TuphVqwjJ1TMatthgCZ6gms2Alw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
16:71:68:e7:04:33:f3:e8:cb:3f:3f:2b:1f:53:8b:aa:e7:e7:
eb:68:8c:cd:a8:31:f6:7f:ab:8b:9c:82:4e:2e:c5:23:e8:89:
a4:d2:63:03:34:1e:7d:68:d6:7b:99:21:6b:fc:cf:e0:80:78:
48:91:1d:5f:6a:a4:ee:9d:00:9d:98:b3:b7:a6:81:e7:8c:ce:
02:15:4c:10:94:61:57:84:80:4f:e6:95:05:0c:67:09:e8:2c:
f7:3e:79:9c:11:50:23:a2:41:7a:e0:37:a6:66:64:e1:31:f1:
e4:ba:53:58:c6:73:1d:fe:a8:11:73:e1:dd:ba:4c:1d:2f:4b:
64:42:27:70:1a:4b:92:b2:28:bf:5c:75:0a:6b:e6:6f:e3:a2:
a7:3c:10:5a:d9:c3:a2:69:74:5a:1d:ea:4e:98:71:78:a7:ca:
b5:e3:c8:45:6d:2e:a9:62:dc:ff:87:2e:8b:9e:4a:77:bc:a4:
4f:23:9b:a3:2d:3c:01:a3:63:d2:c8:f9:1e:09:96:79:9a:b8:
63:19:87:6e:8d:60:38:46:8a:a3:e7:5c:0f:07:84:57:82:aa:
7e:d7:d0:fb:c9:a1:a6:1d:0e:86:ce:25:61:52:3b:9a:29:97:
d4:88:aa:1e:0c:0d:2f:6a:20:83:24:c1:6c:c7:29:49:75:a3:
b8:6e:fe:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org