Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/qLJGX6ophSjkTpPr6JkQhL9ZikM.roa
File: qLJGX6ophSjkTpPr6JkQhL9ZikM.roa (raw, json)
Hash identifier: oZtJ/QmTfb/OQ981x+Scs85V/7QIcUfNmGaowc5yQA8=
Subject key identifier: A8:B2:46:5F:AA:29:85:28:E4:4E:93:EB:E8:99:10:84:BF:59:8A:43
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4826
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/qLJGX6ophSjkTpPr6JkQhL9ZikM.roa
Signing time: Tue 17 May 2022 00:30:06 +0000
ROA not before: Tue 17 May 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18470 (0x4826)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 17 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=A8B2465FAA298528E44E93EBE8991084BF598A43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:74:6d:15:cd:9d:9a:f5:e3:9e:91:60:2e:8e:
4a:56:a8:07:85:35:03:32:35:08:9c:25:1d:b0:31:
55:d8:b7:ff:2c:34:0d:b2:ae:ae:59:d6:d3:57:74:
34:98:70:0d:04:fc:2f:67:6f:fd:46:62:c9:63:b8:
f2:31:48:e5:3b:8b:d4:0f:d6:9e:ae:2f:fa:41:5b:
95:74:af:78:0c:b4:01:5a:87:d8:29:e1:48:02:ac:
a5:79:ab:24:5f:eb:b7:14:c3:e7:5f:83:ac:58:f2:
4c:59:96:6a:55:0d:48:b8:85:bc:bf:50:87:92:57:
47:e5:21:20:38:14:e9:ca:58:46:21:fd:f1:6f:e3:
5b:d4:15:3b:ba:69:1b:28:47:6f:54:4d:d2:53:30:
75:7d:d2:8f:36:2d:3b:9e:99:cd:0f:4b:90:4e:23:
0e:31:14:fa:b7:fb:71:49:5a:08:81:93:b4:0a:d2:
76:6f:0d:f0:fe:55:5d:8b:9d:6f:f0:08:73:ec:a2:
6a:99:9d:02:61:81:35:dc:02:cd:67:32:ab:ef:ee:
51:32:84:01:46:70:9a:52:db:ef:f4:e7:f1:8e:b0:
46:2c:70:b6:08:79:f0:9a:f7:ce:94:49:f3:00:4f:
a4:ec:6e:c0:45:55:09:e6:e0:3b:75:e1:a3:4e:63:
03:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B2:46:5F:AA:29:85:28:E4:4E:93:EB:E8:99:10:84:BF:59:8A:43
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/qLJGX6ophSjkTpPr6JkQhL9ZikM.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:10:68:a6:89:d0:c1:d2:8e:6a:0d:ee:ce:dc:14:ec:58:31:
f8:78:72:e4:d3:a8:ec:a4:6d:72:e0:ce:e2:65:88:aa:07:98:
18:c8:04:0d:36:f4:88:b3:d6:47:a2:02:2e:90:65:11:eb:9f:
e5:a8:27:df:01:7e:6f:19:e0:89:cb:3d:2a:5a:fb:96:26:b4:
83:f9:f3:15:fa:f1:e6:10:21:d1:44:d0:6c:c0:b8:61:1a:82:
1f:bc:71:b6:10:51:fd:6c:9d:94:34:6a:fa:b1:54:05:a8:45:
00:71:f5:c5:60:39:05:0f:b3:0a:37:e0:38:ea:4f:81:92:52:
a5:fe:08:54:a5:a3:3d:38:93:5e:ed:9f:b9:b1:90:a8:51:cb:
85:96:6c:a3:e3:4c:b0:c0:4a:e0:d7:af:bb:53:d9:c1:73:79:
02:e4:83:1c:ea:6f:25:ad:28:6d:01:6a:85:3f:aa:3c:d7:1e:
2b:dc:37:92:f6:95:fd:39:77:2c:ab:15:96:f2:b9:ac:b2:9d:
7f:ab:54:85:6a:02:13:c5:9d:4b:a8:99:80:e5:97:5d:b2:e2:
47:f2:e1:46:71:5c:6c:e9:89:f9:42:af:e2:dc:d4:53:af:78:
41:ec:f8:a4:88:2c:71:11:ac:2b:03:a4:de:5c:c4:9a:90:9c:
d6:c3:41:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org