Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/tOZ835tqqFp_v-wD-A1CHjpKKRc.roa
File: tOZ835tqqFp_v-wD-A1CHjpKKRc.roa (raw, json)
Hash identifier: yZwjmTq6DL7YNZbgxd9L3b+0jl0NT9o1jzNaSJHCTx4=
Subject key identifier: B4:E6:7C:DF:9B:6A:A8:5A:7F:BF:EC:03:F8:0D:42:1E:3A:4A:29:17
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4774
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/tOZ835tqqFp_v-wD-A1CHjpKKRc.roa
Signing time: Wed 04 May 2022 00:30:13 +0000
ROA not before: Wed 04 May 2022 00:30:13 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18292 (0x4774)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 4 00:30:13 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=B4E67CDF9B6AA85A7FBFEC03F80D421E3A4A2917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7e:8c:05:66:04:fe:ce:96:b1:57:b9:b4:1f:
db:db:48:75:81:6b:1f:f1:ec:90:bd:f3:95:8d:2d:
46:2a:17:2b:72:e3:30:5c:ea:35:49:65:01:af:1a:
a7:c9:4a:e7:9e:2a:51:be:fe:49:b3:d7:07:4d:73:
b2:4d:ca:2f:06:c6:fe:1e:64:d9:86:f9:35:41:72:
7b:dc:60:28:81:9d:20:20:4d:5c:ed:b9:4d:b1:f5:
f6:ea:47:88:f1:ee:d1:8d:e7:11:89:49:21:f0:8b:
3e:00:18:a8:ea:56:0f:42:a0:04:d7:55:43:2c:5f:
dd:28:83:15:46:06:ed:57:f1:9c:19:fc:f2:3f:45:
ed:03:0c:33:93:40:26:2e:7e:04:0f:77:e3:2f:6a:
94:f7:16:fd:85:84:24:6d:8a:f5:56:bc:4c:10:7b:
e3:c6:33:a8:35:69:42:0e:ad:ff:a9:e9:98:da:35:
a3:ec:30:0d:12:cf:b8:d1:c1:80:fd:85:02:38:5d:
1f:b7:cd:9a:83:e3:d1:db:cf:0f:b5:d9:15:ca:b9:
9e:fe:98:cf:07:3b:21:5d:ef:26:39:92:d6:ad:df:
c7:84:bf:9a:44:f2:f4:78:0a:e7:c0:ab:35:07:c7:
bd:9c:98:08:3a:ca:85:03:6c:88:84:c4:aa:da:99:
13:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E6:7C:DF:9B:6A:A8:5A:7F:BF:EC:03:F8:0D:42:1E:3A:4A:29:17
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/tOZ835tqqFp_v-wD-A1CHjpKKRc.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
21:50:ac:aa:dc:69:6d:45:36:27:6f:6a:ee:03:19:fd:83:a0:
26:30:17:90:63:6a:3f:ed:f3:07:28:d7:a6:23:85:a5:cc:75:
5f:35:3c:df:cf:43:97:63:3a:40:88:b4:52:ee:41:46:e9:d7:
f4:74:62:09:3e:c7:d1:e2:e3:02:67:c1:fc:17:ef:b6:27:1a:
51:49:21:a1:2b:19:a6:4d:1c:14:ba:ca:6a:66:b8:58:4b:34:
ce:d4:96:00:0d:d8:61:b3:87:72:f1:c9:74:b1:16:4e:8e:bf:
43:e1:b2:3a:5a:f3:0c:b6:02:dd:92:f8:5a:08:c6:2b:9e:3d:
a4:da:fd:6d:7e:76:d8:af:e9:78:cf:af:d4:8a:cf:3a:7d:e5:
d9:c4:f9:d2:fc:a5:4d:b4:99:13:8c:35:28:84:f3:a0:d9:28:
ba:13:53:d7:21:b7:65:44:33:fe:f5:06:ac:cd:f9:14:08:07:
72:dc:46:28:01:dd:99:9c:a4:50:52:f4:e3:7d:a0:ef:7c:2a:
07:d3:35:e9:04:a5:1c:66:c2:ac:60:56:28:c6:9d:0e:2e:fc:
d4:2c:d2:31:41:99:31:bc:20:57:5c:5d:8b:8e:53:db:34:52:
04:db:3b:07:9c:34:dd:01:a1:36:a7:f9:ce:a9:18:99:3e:81:
bd:88:32:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org