Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/wQTv4_-wg53VzxUFlFQtcuDidE4.roa
File: wQTv4_-wg53VzxUFlFQtcuDidE4.roa (raw, json)
Hash identifier: OBjy28mDcMamy3gYXV4Kc/u3fbUVzczrPxFZzTa9Eaw=
Subject key identifier: C1:04:EF:E3:FF:B0:83:9D:D5:CF:15:05:94:54:2D:72:E0:E2:74:4E
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4377
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/wQTv4_-wg53VzxUFlFQtcuDidE4.roa
Signing time: Sun 20 Feb 2022 00:30:06 +0000
ROA not before: Sun 20 Feb 2022 00:30:06 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17271 (0x4377)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 20 00:30:06 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=C104EFE3FFB0839DD5CF150594542D72E0E2744E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2f:f3:f4:fc:3c:25:cd:03:f0:56:31:b0:13:
e8:78:d8:7d:f3:90:f1:c4:c7:b2:7a:91:7d:83:a6:
ac:40:ca:c0:f5:19:84:18:c5:af:40:63:a9:e7:88:
4e:b4:25:b0:7e:ef:67:0b:77:c7:db:40:27:ab:27:
df:2c:8e:17:e9:22:d6:a9:36:d0:5c:04:e5:43:65:
ef:f7:1a:c6:bb:f9:3c:98:9b:48:a1:9b:80:b1:e2:
fd:f5:04:8e:f2:98:36:1b:c4:80:05:1c:1f:68:07:
29:78:6c:ac:2d:50:53:cd:7f:90:0f:91:8f:e9:3f:
38:85:b5:4e:c1:f4:e5:27:8d:c0:05:7b:8e:a6:47:
17:91:d2:9d:df:e0:60:cb:f4:77:14:ad:d1:61:68:
48:f2:e2:d8:d3:a4:63:6a:0c:71:35:92:0f:c8:d0:
96:1a:93:48:2f:d5:d9:eb:d4:f5:48:e3:d1:1d:49:
a8:94:35:65:bd:36:6b:93:ef:d1:32:d1:48:fb:49:
15:94:ce:45:f2:7f:64:8f:90:88:f0:b5:76:8d:47:
01:7b:98:03:54:0e:f9:4b:bb:58:40:c6:4c:40:ad:
fa:81:e3:54:dd:a4:bb:9b:9e:b4:48:fe:4b:f9:a4:
af:c1:11:a8:b9:69:cf:42:2f:3b:8f:5f:51:77:41:
b0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:04:EF:E3:FF:B0:83:9D:D5:CF:15:05:94:54:2D:72:E0:E2:74:4E
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/wQTv4_-wg53VzxUFlFQtcuDidE4.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:b0:dd:df:0f:96:3e:e5:a1:20:bf:a4:e9:dc:37:5c:a5:0d:
34:01:5b:37:28:4a:ce:bd:64:9a:aa:aa:d6:5c:9e:ac:72:68:
95:29:f5:eb:be:2d:f6:5d:f6:d9:a7:f0:e5:e8:ac:21:23:47:
42:a9:32:5d:24:a9:71:10:73:03:16:76:7e:29:c9:cd:23:d6:
00:9b:8b:ab:dd:40:77:cb:ed:75:3a:ca:a7:18:4d:98:bd:23:
4a:a1:5a:aa:e1:eb:32:b1:35:47:1c:49:69:b6:88:80:b8:bb:
51:27:34:f7:f8:c3:94:e4:53:c5:15:31:3f:47:47:71:c0:8c:
87:5b:2e:b2:7d:00:0a:6b:aa:b0:65:22:07:d7:53:a6:a0:f5:
a4:cf:67:ae:b5:83:15:68:6c:de:26:9a:c1:10:3c:81:53:81:
10:08:51:1e:4f:7e:3e:8b:a8:2e:28:fa:f3:6b:52:2b:81:99:
c5:67:e6:22:24:4e:c8:d1:93:5d:26:c3:d5:6a:bb:62:06:9f:
35:80:60:55:03:18:20:b6:56:33:df:8c:fe:01:b6:de:8d:3d:
d6:e9:c1:83:17:b5:20:60:41:5c:aa:29:cc:95:25:09:eb:b4:
ba:e2:c5:b8:6d:0d:d1:4a:f1:f7:c6:fd:6d:62:84:85:98:93:
5e:ed:95:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org