Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/cmxP894d90cHNYM6viYix3221ho.roa
File: cmxP894d90cHNYM6viYix3221ho.roa (raw, json)
Hash identifier: rYVBqetbVbss/kSbHP219BxnU3pG7sAnIVm/82qmwAc=
Subject key identifier: 72:6C:4F:F3:DE:1D:F7:47:07:35:83:3A:BE:26:22:C7:7D:B6:D6:1A
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4444
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/cmxP894d90cHNYM6viYix3221ho.roa
Signing time: Mon 07 Mar 2022 00:30:09 +0000
ROA not before: Mon 07 Mar 2022 00:30:09 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17476 (0x4444)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 7 00:30:09 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=726C4FF3DE1DF7470735833ABE2622C77DB6D61A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:59:d7:e8:b4:9b:b5:82:58:7f:ec:dc:36:99:
82:8b:ba:6a:6f:11:97:cc:58:80:15:0f:18:84:4a:
23:01:33:84:8e:3a:01:1a:25:ac:cf:3a:ad:0c:21:
6d:ef:e8:4f:22:aa:5c:63:c1:ce:61:41:bf:91:89:
2f:c4:b1:cf:4b:ae:da:c4:e3:8f:8f:3b:4a:1f:d4:
9e:f4:ae:51:cc:2d:c2:52:25:c3:2b:4a:cd:f2:3c:
07:c1:69:ea:fc:28:6f:b8:19:f8:4a:ec:21:30:f1:
ea:10:13:77:c4:56:70:4f:96:c2:af:63:0f:89:02:
5b:16:a3:75:1f:af:23:b0:ae:20:72:fd:2e:31:9f:
13:08:d9:3d:81:f9:36:61:54:0a:38:6c:0f:2d:81:
68:04:5e:ac:51:80:fd:80:f4:64:d9:c5:a6:24:82:
3d:42:b2:d3:c9:5c:e3:36:b2:3d:e5:37:cc:fb:af:
85:d3:66:fb:fd:33:cb:4d:b7:1d:e6:53:54:99:45:
8a:92:08:07:c7:2e:20:8e:dd:d0:43:4e:16:09:10:
49:de:43:13:6b:00:37:d6:a6:f3:9c:b1:a3:9e:54:
cb:8e:9a:13:6c:0c:85:5b:c0:96:e9:c5:51:87:04:
3e:ab:63:ca:9f:48:4d:19:7c:92:49:f7:60:da:a6:
71:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:6C:4F:F3:DE:1D:F7:47:07:35:83:3A:BE:26:22:C7:7D:B6:D6:1A
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/cmxP894d90cHNYM6viYix3221ho.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
30:70:85:04:9e:48:13:df:da:de:77:25:5f:36:90:9b:2a:3a:
07:ac:67:2e:10:3c:47:b7:7b:e4:19:66:6f:8f:82:f8:12:cb:
5c:dc:0e:9d:ea:0c:f0:77:07:ed:4d:a2:76:29:13:c6:32:13:
53:35:b8:01:58:88:24:2f:9c:d4:40:a3:14:38:78:e6:aa:30:
02:7a:9c:57:8f:2f:69:58:78:ba:16:38:9b:85:75:b7:a4:9d:
c8:b7:2b:f3:d0:51:0b:65:1b:47:f7:82:ce:e7:12:1d:b9:27:
21:6b:74:23:52:c4:66:59:4f:8c:a6:68:be:67:34:ee:8d:5b:
c2:dd:c3:24:b7:b4:a5:a7:66:62:6d:3b:5a:87:52:f6:07:2b:
48:bf:65:27:df:a6:f6:68:06:db:20:fb:3b:a0:4d:cf:d4:14:
ac:ae:50:e9:95:ab:7d:86:db:b8:89:34:4a:e0:67:36:fc:26:
4b:c3:a6:bf:d9:fe:b6:68:38:0a:21:22:f3:22:1c:43:7c:eb:
fc:5e:a2:9c:5b:8c:53:1c:4a:d4:ec:16:ad:42:f2:b7:a4:1e:
50:37:81:e1:6a:6d:91:fb:f2:1a:fb:b3:f4:de:a8:20:fe:9d:
96:3b:58:19:b7:af:bb:69:11:4a:b7:24:8c:78:77:c0:9a:1e:
f8:e6:5a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org