Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/4OFkussbDhO-MoPVbVoK0CL43q8.roa
File: 4OFkussbDhO-MoPVbVoK0CL43q8.roa (raw, json)
Hash identifier: llL+447PGDeF6swZ3HWUSsRWxRyg3KDJjy1SphqeL0c=
Subject key identifier: E0:E1:64:BA:CB:1B:0E:13:BE:32:83:D5:6D:5A:0A:D0:22:F8:DE:AF
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 435F
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/4OFkussbDhO-MoPVbVoK0CL43q8.roa
Signing time: Fri 18 Feb 2022 00:30:09 +0000
ROA not before: Fri 18 Feb 2022 00:30:09 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17247 (0x435f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 18 00:30:09 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=E0E164BACB1B0E13BE3283D56D5A0AD022F8DEAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e3:6c:ba:74:a3:f4:cf:61:6e:2a:de:a9:ff:
91:af:5a:a8:e9:43:71:a5:29:29:2d:b9:ab:15:1e:
06:5e:f4:6c:63:85:62:0c:84:03:be:06:f1:31:6d:
03:cc:51:fa:62:8d:38:c2:e2:4e:1e:fb:d5:fb:e7:
9a:e8:62:fb:77:10:51:5d:42:ea:b2:ac:38:6b:4a:
bc:7f:2c:75:c5:42:af:29:a8:44:6a:3b:a5:8f:8b:
cb:1e:b1:c2:01:48:24:e4:41:a1:37:f4:9a:39:eb:
8d:60:73:81:e1:a3:da:63:2b:1c:36:39:0d:81:f2:
0c:44:9c:59:fe:a3:5e:f3:69:0b:b7:ae:85:5f:8f:
06:fd:3b:2f:20:02:10:2b:1d:13:ca:de:38:bb:f0:
7e:aa:f1:bf:06:61:58:23:17:fc:65:b3:11:8c:4f:
d7:01:16:3e:74:c3:c8:44:1c:00:aa:1a:01:aa:a0:
cd:08:bf:0d:5e:0c:d5:34:26:88:62:9d:62:1b:ea:
5d:35:9b:52:1d:2b:61:71:8b:0a:95:a6:71:fd:c6:
2b:a6:5b:5b:fa:49:82:0a:a4:fa:63:f1:fa:0c:7e:
89:0c:43:63:61:5d:ac:45:31:18:94:2f:40:1f:60:
18:88:d3:72:c5:2f:70:1c:26:3e:f6:42:e0:ba:f6:
13:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E1:64:BA:CB:1B:0E:13:BE:32:83:D5:6D:5A:0A:D0:22:F8:DE:AF
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/4OFkussbDhO-MoPVbVoK0CL43q8.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
84:d4:4a:e8:50:9d:6d:96:13:9a:0d:39:1a:ae:c4:9c:1b:9c:
90:8c:03:0e:89:ed:9d:aa:c5:4b:d5:21:c6:cd:ea:ee:30:09:
38:96:59:9b:8a:ac:04:4f:f5:01:11:40:c9:d4:38:71:f6:b4:
0e:e9:92:bc:e1:c9:74:70:f6:ab:99:bb:e9:df:90:40:a3:07:
c7:62:a9:82:a6:4e:bb:1d:76:1f:bb:3e:6e:62:c4:14:77:1c:
24:e4:fc:59:2b:34:8a:11:6c:fe:d8:c7:74:c0:c3:1f:86:de:
4e:c1:7f:a0:fe:f7:92:61:7c:55:f6:b9:2c:a1:6b:49:2d:ce:
3b:22:b7:af:c2:a3:db:03:d6:38:d4:5b:2c:42:21:b6:41:73:
0d:d5:7e:a8:23:5b:69:ab:da:89:cb:b9:aa:86:54:d8:56:28:
1b:a6:99:aa:5c:c8:38:e8:36:ab:1f:0f:de:98:66:cc:90:94:
05:d3:a2:5b:b8:21:32:03:2d:bb:02:14:25:a4:d9:a4:10:ad:
21:7a:99:c9:3f:11:14:ae:1a:0b:63:10:f0:84:e0:4d:19:cb:
7d:f0:2f:ba:bd:a9:6c:ce:1f:52:be:c5:e3:0a:bb:ad:0f:ca:
d5:0a:0a:19:b5:03:dd:ac:91:16:a1:0a:f0:5b:ef:26:a9:c5:
43:75:69:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:52 2024 by rpki-client on console-fra.rpki-client.org