Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/iQUdvjnTJCYnjbbiVJh6pkfZFls.roa
File: iQUdvjnTJCYnjbbiVJh6pkfZFls.roa (raw, json)
Hash identifier: 5eX8UqZGNHOQhsHrib+tMjZi+vncPiCYndBTq2v/mcY=
Subject key identifier: 89:05:1D:BE:39:D3:24:26:27:8D:B6:E2:54:98:7A:A6:47:D9:16:5B
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 43B2
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/iQUdvjnTJCYnjbbiVJh6pkfZFls.roa
Signing time: Thu 24 Feb 2022 00:30:09 +0000
ROA not before: Thu 24 Feb 2022 00:30:09 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17330 (0x43b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 24 00:30:09 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=89051DBE39D32426278DB6E254987AA647D9165B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:91:2e:13:ae:c7:2d:12:29:ca:36:dd:5c:2b:
fc:d1:be:a3:76:7a:cc:bd:de:f1:0f:ed:ae:4a:26:
79:64:7f:92:9f:82:d8:17:22:60:f0:a3:3a:ad:4b:
54:8e:fe:26:9b:05:47:8b:c0:e8:49:e2:5e:f0:34:
a9:c6:64:32:ef:4f:28:30:e1:51:02:b4:45:67:53:
bc:6b:19:66:6e:ea:88:a0:be:de:59:48:67:f4:d9:
d2:9f:f5:0d:b7:2b:08:b7:9e:cb:69:df:68:a2:3e:
7f:86:bf:56:e2:b9:ba:9d:2f:2d:b5:f6:84:b1:15:
97:94:0a:c8:8c:1b:fe:ff:9b:1d:76:cf:32:12:06:
05:b4:70:c1:d8:30:ac:e7:f3:db:ee:b3:f7:35:8d:
69:26:68:b2:09:2a:1b:86:26:a3:98:3c:7d:5f:5e:
95:63:e4:3c:4f:88:f8:51:2c:98:b1:34:6e:54:50:
34:df:6a:54:7b:55:b0:9b:55:39:62:2b:9f:8a:e4:
11:bf:19:57:d2:e7:7c:ef:86:bb:55:b9:d7:1f:3f:
72:2d:1b:49:9b:80:be:ed:b2:37:0f:eb:44:ef:7a:
c6:96:3c:7e:64:f7:4e:b2:bc:5e:a5:e2:aa:9f:fd:
7c:ca:33:bd:1d:be:86:e1:e7:c0:9e:e4:d6:1c:21:
1d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:05:1D:BE:39:D3:24:26:27:8D:B6:E2:54:98:7A:A6:47:D9:16:5B
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/iQUdvjnTJCYnjbbiVJh6pkfZFls.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:e0:96:f6:6d:26:dc:50:79:cb:0c:62:d9:d1:6f:b1:fc:cf:
7c:b5:26:b0:dd:e3:95:f1:16:60:05:13:ac:a9:44:72:b9:72:
89:f5:a1:18:66:60:fc:d8:f3:b6:86:5f:15:21:5c:be:a1:f1:
b4:0a:16:4f:73:d3:f4:f8:11:05:9d:f4:e6:da:ff:ce:8f:a1:
70:55:f0:e6:d1:49:ee:32:4a:d2:b5:52:e2:27:3a:36:78:71:
40:67:37:51:d2:ab:0d:87:d7:6a:ef:36:0c:eb:b3:9d:46:ef:
f9:af:3f:81:09:91:49:e5:56:b2:c8:bf:62:41:d6:d8:30:51:
c0:2a:3a:a8:6f:86:77:d0:58:cb:38:39:be:8e:0d:04:18:9d:
92:c9:c1:c3:e6:11:26:89:c7:8d:55:b6:ab:5a:ab:e2:bd:59:
d4:5d:2d:b1:94:9a:9b:71:8d:ca:f2:ae:91:5e:95:fc:70:45:
51:db:8d:5e:ff:2e:bc:6c:e8:ea:ed:2c:ee:0b:19:bd:98:90:
01:34:6f:c6:d5:2a:62:27:89:0b:8f:87:e1:41:25:d9:2b:06:
15:1b:87:d4:6a:f5:df:b7:25:80:2a:bd:f0:27:5d:de:7a:e7:
7e:02:a6:ec:68:c1:fd:e8:db:ef:db:ad:ef:a6:7c:16:c0:90:
47:6c:f2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org