Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/1bBAthHyjqQxhdWaHixVfRm_0-0.roa
File: 1bBAthHyjqQxhdWaHixVfRm_0-0.roa (raw, json)
Hash identifier: 9gSlv4oVSKpeRU2DGP4dKbdLO4lHu3U98iIn0W6w0f4=
Subject key identifier: D5:B0:40:B6:11:F2:8E:A4:31:85:D5:9A:1E:2C:55:7D:19:BF:D3:ED
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4704
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/1bBAthHyjqQxhdWaHixVfRm_0-0.roa
Signing time: Tue 26 Apr 2022 00:30:08 +0000
ROA not before: Tue 26 Apr 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18180 (0x4704)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 26 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=D5B040B611F28EA43185D59A1E2C557D19BFD3ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4c:77:ae:cc:8f:13:75:2c:ad:17:e1:83:b0:
27:45:d1:ba:09:cd:6e:59:09:36:19:e5:b1:14:a5:
12:60:ae:5b:8f:ce:d9:b5:ce:ac:05:dc:3e:75:e2:
ca:65:2a:66:89:c8:57:7f:bf:be:1b:73:71:db:3f:
f3:f2:06:1e:f4:19:85:ca:c1:38:34:6f:a1:79:b1:
c3:12:17:51:1d:6b:41:be:68:3d:2a:67:4f:e0:1d:
d1:b2:ba:a9:f1:6c:98:c1:cc:64:a2:40:b7:e0:cf:
dd:6f:db:2a:46:74:c8:1c:e9:aa:af:fd:9b:fe:d2:
de:c3:91:5e:56:20:02:b8:24:ba:cb:63:97:bf:12:
33:d0:63:3f:73:f7:76:82:2d:7b:f0:01:36:7a:34:
70:26:1b:23:78:62:0b:19:dd:67:dd:c6:23:2b:32:
bf:d8:3d:a6:65:d5:c5:43:6d:2c:8f:2e:7d:26:2d:
10:f9:29:82:21:1f:9d:c5:62:1f:63:bd:83:cf:a7:
01:c9:e4:e9:19:8e:ea:c2:0e:df:bc:76:2b:dd:83:
ec:a4:65:c1:ef:81:d6:18:20:6a:1b:a9:1c:b4:cb:
00:2d:54:00:5a:67:b5:d4:3d:4b:0a:e4:31:0e:96:
10:3c:85:53:42:ec:4f:b8:84:f0:36:2f:ba:34:1d:
7f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B0:40:B6:11:F2:8E:A4:31:85:D5:9A:1E:2C:55:7D:19:BF:D3:ED
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/1bBAthHyjqQxhdWaHixVfRm_0-0.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:73:fc:cb:4b:4a:9c:c6:be:9a:52:74:a2:e3:b7:36:22:c2:
04:e4:8f:6e:68:8c:2c:92:ad:20:30:1f:19:5d:21:94:98:e2:
78:be:a8:00:71:29:b5:9d:4f:c0:5d:d2:ca:c9:27:0c:4d:05:
44:36:95:a9:45:d5:c4:92:f4:c0:fb:b6:44:c5:71:0e:d0:7d:
32:a1:6b:1b:a8:60:f1:4b:9f:bd:3a:eb:c4:92:de:ca:45:fc:
08:0d:19:4e:28:2a:85:bc:e5:b0:a5:1e:af:a3:3f:bf:7e:63:
be:7c:59:21:de:31:af:56:f6:c2:5e:f5:d3:38:69:5a:07:32:
aa:b6:ee:01:4e:17:8a:fe:ec:a2:b8:ab:b4:ff:bc:a6:d7:50:
00:2b:09:cf:f1:f3:92:f0:25:b3:f3:57:5b:a2:1b:b6:18:a1:
dd:8a:19:60:d1:6d:ae:5a:d1:3d:57:4e:86:49:e4:b8:49:38:
05:f4:8e:c0:0b:45:0e:b3:a1:a8:ff:56:35:0b:1f:ce:1c:cc:
2f:e9:2a:8d:cb:5a:9e:be:2e:5f:8e:f5:20:1b:26:c3:cd:00:
c2:f3:c9:cd:80:b4:34:c7:9f:d0:d2:37:ab:47:90:f3:f2:48:
4f:47:43:35:f8:09:85:54:a6:8d:25:93:3d:ff:b4:7d:25:b0:
48:02:9d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org