Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/0ZsPG1iCvkzCZ7My92bqGh4WgP8.roa
File: 0ZsPG1iCvkzCZ7My92bqGh4WgP8.roa (raw, json)
Hash identifier: S5e3weMbsql8slXNbbmVk53qNJbHnvBFJpRNsjOgR0Y=
Subject key identifier: D1:9B:0F:1B:58:82:BE:4C:C2:67:B3:32:F7:66:EA:1A:1E:16:80:FF
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4404
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/0ZsPG1iCvkzCZ7My92bqGh4WgP8.roa
Signing time: Wed 02 Mar 2022 00:30:16 +0000
ROA not before: Wed 02 Mar 2022 00:30:16 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17412 (0x4404)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 2 00:30:16 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=D19B0F1B5882BE4CC267B332F766EA1A1E1680FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ea:53:ff:ce:ef:35:da:18:ed:0e:c1:c7:da:
a1:c3:e2:d7:98:04:10:3b:e7:1d:34:b0:b9:81:f6:
a8:1f:33:79:d3:b8:67:f1:96:65:6b:de:52:dd:03:
7f:06:3b:cb:96:71:27:03:93:7d:59:c4:32:90:1a:
24:09:d4:56:29:5a:2c:10:5f:0f:f6:28:83:93:62:
ab:d8:bc:8a:ce:3a:84:1b:64:ee:40:94:c3:12:27:
77:2b:bc:9d:63:fa:8e:05:d3:80:9a:d3:ce:0c:2e:
51:60:fa:eb:f5:b7:31:cf:9d:b0:2a:6b:c3:fc:fb:
2e:51:fd:ff:45:c4:6f:b1:6d:f6:c1:6a:50:d1:7e:
a2:3c:77:7f:7b:ef:7b:a0:16:04:7e:5d:5a:8c:75:
40:9b:b8:25:06:cf:9e:c9:64:03:ba:61:80:ab:61:
61:dc:fb:4d:0b:97:ad:31:cc:f4:f5:a0:86:2a:02:
33:50:bd:00:97:ba:60:27:68:95:8a:4f:3a:cb:c4:
6f:31:0c:45:08:48:8a:9c:bb:34:88:c4:82:b2:ca:
b6:bf:cc:85:dc:32:4a:77:cf:38:b6:9f:01:7f:52:
aa:f6:b6:53:fb:4f:b1:a0:0b:a8:89:0a:46:a3:74:
c4:42:90:aa:c2:18:d9:8f:fc:0c:27:6f:77:56:d0:
ab:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:9B:0F:1B:58:82:BE:4C:C2:67:B3:32:F7:66:EA:1A:1E:16:80:FF
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/0ZsPG1iCvkzCZ7My92bqGh4WgP8.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:1c:31:55:18:af:32:55:92:68:83:88:03:ac:af:e0:91:dd:
3f:ce:a8:2b:00:5d:ca:d2:57:74:cc:91:d7:9a:63:44:19:a2:
5a:78:12:22:59:1c:29:c2:90:ec:f7:62:6e:5b:b0:cc:a2:b0:
d2:f6:f6:2a:b8:9c:5f:cb:c2:28:99:9b:d0:bd:97:f3:2d:a4:
71:b4:e7:d7:ba:53:e7:f5:e4:56:99:01:42:e5:8d:4a:b5:db:
af:56:20:4f:57:92:41:7f:3d:a0:83:b2:d5:19:a9:3f:a6:46:
91:ce:7c:ce:c6:67:fc:d7:07:6f:d3:d0:75:42:cb:ec:f9:69:
87:6b:5d:c8:61:9a:65:f0:cc:2e:a6:2d:6d:2e:4d:4d:0a:ba:
cf:f4:ef:ba:68:db:98:3c:d3:68:ed:f7:ea:13:74:42:90:50:
c8:74:b0:55:9f:e9:48:04:59:b3:a3:e2:b7:2c:86:9b:19:7a:
7b:1a:b1:01:cf:c5:5d:ae:17:34:12:93:5f:bb:d9:50:95:74:
b4:15:c9:c1:7a:25:51:5e:92:31:96:20:a2:cf:cc:bd:f2:1e:
b7:a7:30:cc:82:a3:12:61:30:70:7c:fd:b8:28:d8:a3:2b:59:
ab:bc:67:5d:86:91:89:64:df:d2:22:bc:63:eb:79:60:f6:e8:
8d:d6:44:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org