Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/utxiTK-9TWOYYS3wNAme5Um8Duw.roa
File: utxiTK-9TWOYYS3wNAme5Um8Duw.roa (raw, json)
Hash identifier: uxNzOAcsIvCDKEbpwpogY/hjXZ74TLrdoa9kXthH/o8=
Subject key identifier: BA:DC:62:4C:AF:BD:4D:63:98:61:2D:F0:34:09:9E:E5:49:BC:0E:EC
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 42FA
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/utxiTK-9TWOYYS3wNAme5Um8Duw.roa
Signing time: Fri 11 Feb 2022 00:30:06 +0000
ROA not before: Fri 11 Feb 2022 00:30:06 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17146 (0x42fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 11 00:30:06 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=BADC624CAFBD4D6398612DF034099EE549BC0EEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:db:09:4f:d7:98:e3:73:5c:9d:fb:d9:01:9a:
23:54:1b:83:b8:75:2b:5e:19:fc:25:70:cc:88:e1:
63:f4:e1:f5:94:64:a2:05:e7:af:14:db:92:34:07:
2c:9c:38:24:a2:72:31:06:eb:4b:0a:14:9b:d7:4e:
27:b1:15:6c:37:ea:71:3b:73:55:50:5c:7b:55:43:
a9:8b:84:7b:6d:3d:35:9a:a1:2d:be:bd:c9:5d:3e:
82:ec:e7:a1:5c:4d:aa:b6:8c:5c:81:32:55:5e:7b:
44:e6:ac:26:b4:0b:d2:76:d1:d2:80:7e:40:e3:bd:
ad:6b:0c:f4:b6:5f:27:61:da:4c:f8:26:07:4e:cc:
38:40:99:19:ac:0d:df:4c:76:1b:e3:a1:4b:91:20:
51:41:63:38:3d:d2:e7:d6:6c:f4:ee:50:61:c9:e7:
d1:a8:36:36:40:5b:18:3c:c1:d6:d4:6e:08:b9:4e:
09:3d:25:ce:1c:c9:16:8f:f5:76:ac:83:43:fb:77:
aa:91:79:4d:58:c8:75:f6:f6:51:61:5e:c4:d6:27:
8a:07:24:d0:75:49:96:0a:95:6f:78:71:7a:82:bd:
81:d4:62:f8:c7:59:0b:02:6e:81:f7:ce:8e:45:47:
33:ea:97:e4:19:19:39:66:43:25:85:89:40:c2:9a:
da:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:DC:62:4C:AF:BD:4D:63:98:61:2D:F0:34:09:9E:E5:49:BC:0E:EC
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/utxiTK-9TWOYYS3wNAme5Um8Duw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
08:25:48:38:17:77:05:da:22:9e:bf:4f:02:c5:52:0a:25:4c:
f3:8c:17:01:09:85:1d:43:65:41:c4:16:ac:80:09:c8:59:da:
68:e0:84:92:45:44:df:3c:48:b7:98:69:b5:fa:a0:6c:57:01:
11:d1:aa:5f:6e:a9:78:d1:09:8f:ad:19:99:5e:54:84:a2:a6:
c6:54:3b:8e:d6:7e:b9:e7:b1:3c:0b:03:d5:63:27:7b:6d:4d:
d5:f5:6b:ad:71:0b:0d:65:1b:ff:93:89:cf:56:9b:51:a4:0f:
1f:66:60:73:82:28:b1:b1:8c:1c:1a:ba:ec:1a:6e:74:9c:56:
99:70:5a:10:e0:57:f9:6b:4b:ce:e1:04:67:67:84:37:8d:e8:
09:67:c4:b2:f7:72:ed:cb:ab:54:ed:67:e2:87:16:89:7b:21:
f9:7c:4c:f3:a8:ce:0d:7e:35:96:d1:da:7a:e5:43:8a:c1:db:
9f:1d:4e:65:f9:f1:48:8c:15:e9:8a:ff:af:3f:a2:5f:85:13:
74:bb:a4:79:fd:0f:24:6b:fa:1e:27:b8:db:31:5b:f3:fa:23:
c0:55:f6:4b:93:05:b4:ff:31:4b:f6:7c:3a:33:9a:8b:f7:f9:
31:45:f8:06:bc:a9:ea:37:de:0b:f4:20:27:b9:a7:5b:59:cc:
eb:a7:99:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org