Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/wzlnc_gNpEsM6XqV6RYf89OO2Wo.roa
File: wzlnc_gNpEsM6XqV6RYf89OO2Wo.roa (raw, json)
Hash identifier: LBC1+PqVmonihM1AdhPcKdlomHtVCcdfhfFf2j+f0e8=
Subject key identifier: C3:39:67:73:F8:0D:A4:4B:0C:E9:7A:95:E9:16:1F:F3:D3:8E:D9:6A
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 45F6
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/wzlnc_gNpEsM6XqV6RYf89OO2Wo.roa
Signing time: Thu 07 Apr 2022 00:30:08 +0000
ROA not before: Thu 07 Apr 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17910 (0x45f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 7 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=C3396773F80DA44B0CE97A95E9161FF3D38ED96A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:55:d3:36:3b:9d:98:55:04:6a:d0:3e:30:80:
a9:24:66:89:1c:03:09:2f:28:6f:ff:cc:73:78:e3:
a5:bc:12:31:07:de:a7:a2:ac:3f:87:3e:e3:cd:17:
a0:d8:8f:26:be:12:03:ff:97:6e:2f:e8:62:29:cd:
54:86:f5:40:17:b5:31:35:ea:b0:41:04:bb:0e:da:
bc:5e:26:73:e7:79:ab:0c:ce:97:0c:95:c6:be:d6:
1e:7e:d1:90:a8:49:16:c4:f4:ec:3d:cb:95:2b:a3:
b3:d8:46:bf:e8:4c:9a:c8:69:0d:df:21:a2:0d:78:
9b:c0:bf:4a:e5:63:d7:33:18:6a:e5:a7:df:a7:0f:
41:79:0a:38:a4:cf:a7:6c:5f:ba:17:5d:69:99:22:
04:71:5e:7e:19:c3:ff:f1:3e:d1:47:95:1e:27:62:
dc:04:13:e1:57:c3:17:86:2f:be:a7:fc:e5:c3:6c:
59:d0:c1:0a:e4:f7:98:e7:07:94:97:ec:aa:29:8d:
2e:e5:58:77:6e:48:61:cf:b2:76:ac:30:b4:94:ae:
08:90:2d:e8:e1:26:5e:fd:7e:16:9d:90:a5:ad:a5:
6c:ae:96:04:d9:cf:cb:9b:89:23:e1:ce:15:5c:da:
1b:96:91:85:0f:15:8b:f6:54:3c:29:3d:e2:09:bd:
5b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:39:67:73:F8:0D:A4:4B:0C:E9:7A:95:E9:16:1F:F3:D3:8E:D9:6A
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/wzlnc_gNpEsM6XqV6RYf89OO2Wo.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
90:c2:39:ee:71:bd:0a:d6:0b:a7:d7:28:38:b8:6b:ec:a3:38:
ba:60:83:e6:78:cb:c4:c9:8d:a5:a4:31:8a:c6:a5:1e:fa:87:
33:c9:c2:c2:d2:67:9a:21:0b:79:53:9f:00:5d:51:8d:d4:c4:
7a:a4:b9:3f:ad:08:6a:f0:dc:c1:5f:44:58:70:41:51:cd:04:
41:fa:cc:4c:9b:27:91:cc:06:4d:7f:92:51:00:ad:a6:47:b6:
dc:6a:e1:c2:a0:a2:c3:d6:d9:f6:17:8e:1d:90:d5:8c:4e:6a:
01:cb:85:cb:b9:fa:f0:e2:33:66:16:3d:66:db:78:40:d5:87:
8e:fb:2c:c4:58:52:f3:fe:8b:94:9a:93:d0:18:40:44:25:f8:
b3:11:46:ac:29:83:6c:56:2f:28:01:dd:a6:3d:87:f9:7e:ff:
6d:2e:69:e8:51:90:9e:4a:95:fa:b1:a3:60:1b:b0:c7:16:1e:
15:e1:f6:43:23:7e:b9:0d:7d:b3:c9:33:01:ce:da:0b:62:8b:
f7:fa:b7:63:42:3e:13:6c:b9:b3:e8:0c:5a:0f:9e:01:bc:09:
8c:b7:43:29:5e:4e:4b:86:91:e1:e7:72:78:6f:ad:a7:5e:a3:
69:0d:5f:18:fa:f4:fb:ed:e3:86:eb:92:b7:13:35:36:60:0f:
0f:53:6c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org