Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/kAX9-leNTZIrU5SQ_SJynHJG1Aw.roa
File: kAX9-leNTZIrU5SQ_SJynHJG1Aw.roa (raw, json)
Hash identifier: irlRzxxo7V1SiJs3moIiuo5lGJ72iS/5iM3rDnTgllo=
Subject key identifier: 90:05:FD:FA:57:8D:4D:92:2B:53:94:90:FD:22:72:9C:72:46:D4:0C
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 441B
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/kAX9-leNTZIrU5SQ_SJynHJG1Aw.roa
Signing time: Fri 04 Mar 2022 00:30:07 +0000
ROA not before: Fri 04 Mar 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17435 (0x441b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 4 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=9005FDFA578D4D922B539490FD22729C7246D40C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a2:bf:6c:70:ad:6e:e0:6a:75:e7:e4:e0:1f:
9c:c0:cf:53:2a:32:62:62:ac:eb:1e:3b:df:41:3d:
08:a1:14:aa:86:fd:58:53:df:8f:3c:e8:9d:34:b9:
16:47:17:89:77:a1:3f:8a:55:6c:9f:0d:05:04:2d:
86:41:d0:d0:b5:9c:dc:25:4e:4b:89:43:b4:bc:78:
0b:c0:da:f8:c2:b8:9d:1f:b4:75:f9:a6:12:c2:43:
90:b6:92:96:6c:89:15:55:d8:37:47:57:56:a9:ed:
9e:a3:cd:b1:cf:bb:f2:7d:db:17:3f:8d:13:5e:6d:
29:1f:0b:ac:d7:d9:e9:b0:98:85:e1:82:72:1f:7d:
cd:66:c2:2b:43:cf:e9:f4:64:c2:9e:8b:e5:ce:24:
7a:9d:81:99:ba:f0:00:29:37:1e:f5:ac:a8:5b:71:
95:12:be:3b:81:c0:99:5f:f1:71:bd:86:99:b7:1f:
eb:82:8e:9c:1c:35:c8:15:67:b1:2f:93:19:35:c4:
e4:fd:69:0e:e5:35:ac:24:f2:48:85:04:6c:fc:cc:
bc:4e:64:55:50:e2:73:b3:d9:37:0c:2d:0a:15:49:
89:29:eb:31:f3:ca:29:31:5b:bd:3d:b4:48:5f:d3:
11:68:f8:aa:7c:56:61:69:8d:d7:52:22:c0:61:d7:
00:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:05:FD:FA:57:8D:4D:92:2B:53:94:90:FD:22:72:9C:72:46:D4:0C
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/kAX9-leNTZIrU5SQ_SJynHJG1Aw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:3e:8b:01:45:8f:23:9c:78:c2:76:f6:f3:af:0a:1c:1b:e2:
29:43:af:e8:4e:43:be:96:65:69:73:3f:60:cf:ce:3a:2f:d9:
61:b0:1c:b4:6f:3e:b5:ff:bc:59:f0:85:71:d7:a3:53:1b:48:
36:0a:dd:47:3e:e1:e6:32:80:cf:6e:a9:0f:9b:8f:38:e0:50:
88:5f:a5:c2:02:37:d2:e8:ab:7e:65:4c:d2:c3:a7:09:17:93:
0c:06:43:1b:f7:d2:d0:98:f1:87:46:cc:57:84:3e:92:2e:91:
7b:a6:c0:e1:9a:73:7b:3b:9e:09:e4:73:c4:3d:69:9a:a6:9f:
42:0e:51:75:b9:c9:7f:00:64:75:b6:95:50:8f:57:2b:1c:09:
8d:fd:b8:df:7b:3d:e0:ce:01:87:19:dd:67:35:5c:60:d6:d9:
5b:d0:e0:1b:19:54:0d:0c:ad:51:f9:5d:a3:51:30:ff:92:d3:
f5:7c:f3:38:34:e9:3c:ea:fc:c9:a8:d6:f7:04:d8:98:df:75:
37:62:5e:f9:96:e7:a5:4f:47:33:b4:10:dd:32:4e:29:72:f2:
e5:fe:77:60:7d:df:03:bf:30:ec:8f:73:e2:d1:5c:b9:e1:d7:
94:14:b5:a7:69:28:37:41:11:17:60:d5:d7:21:b9:bd:d8:20:
23:76:b6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org