Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/66x-kUUCwJbqjvYBxyr68yu_6kg.roa
File: 66x-kUUCwJbqjvYBxyr68yu_6kg.roa (raw, json)
Hash identifier: E3CN0rdSIAG/H1TZ9aqxO/Y1092k/ysw23ScSrOUgTY=
Subject key identifier: EB:AC:7E:91:45:02:C0:96:EA:8E:F6:01:C7:2A:FA:F3:2B:BF:EA:48
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4624
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/66x-kUUCwJbqjvYBxyr68yu_6kg.roa
Signing time: Sun 10 Apr 2022 00:30:12 +0000
ROA not before: Sun 10 Apr 2022 00:30:12 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17956 (0x4624)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 10 00:30:12 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=EBAC7E914502C096EA8EF601C72AFAF32BBFEA48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ea:99:cd:04:70:35:16:23:d3:e8:f2:b6:c3:
b7:25:13:0e:d8:b8:fa:75:71:cc:ef:00:22:81:00:
33:ba:87:64:83:5e:09:ea:6e:2f:cd:05:81:e9:3e:
27:da:a6:53:03:a6:6a:69:15:c6:37:bf:d1:55:37:
a1:88:0c:ef:44:e1:7e:07:00:29:1f:cc:f9:ff:6b:
c6:38:a1:21:a4:32:2b:d3:e7:97:fb:ea:c2:ee:6d:
15:4e:86:b5:af:ae:5f:16:08:20:8b:ed:b0:13:a9:
cb:ed:82:0b:4c:b6:51:59:df:3a:56:ff:60:f0:87:
b3:cb:7b:1c:50:e0:d5:c9:55:f3:74:b1:f0:d3:5e:
54:6e:69:4e:cb:1b:05:f2:8f:f2:60:b1:d0:d6:fb:
c6:57:8b:46:fd:18:d9:04:13:31:4e:bd:c2:1d:3c:
06:db:ce:01:75:f6:0a:1d:e5:34:5f:b5:b9:fd:89:
99:74:cb:89:e2:34:2c:2b:e4:76:70:7a:9b:e0:b7:
ca:e1:89:a2:dd:13:ee:ae:42:08:3c:b4:76:41:b4:
66:af:19:de:d4:42:9a:ac:bb:cb:d0:56:f1:29:d9:
b1:0a:f5:86:cb:3a:d2:23:89:01:78:28:db:c6:6c:
21:b2:d3:d7:c6:28:c5:71:2c:c2:07:52:08:65:a4:
7a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AC:7E:91:45:02:C0:96:EA:8E:F6:01:C7:2A:FA:F3:2B:BF:EA:48
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/66x-kUUCwJbqjvYBxyr68yu_6kg.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
62:c4:a0:bc:68:2a:ed:30:bd:d7:d1:27:6f:76:e3:e3:e7:dd:
27:6f:28:0c:a5:62:bc:8b:85:4d:10:17:52:0b:59:d7:43:b7:
45:90:5b:6c:f5:10:08:93:dc:bf:97:ff:27:de:0e:7e:7a:b7:
58:8f:47:da:6e:fb:5a:b3:68:fb:63:61:f1:63:77:bb:e9:43:
f1:9b:ff:0a:45:91:55:13:ee:0c:e7:97:35:23:c0:95:4e:d5:
17:2b:6c:ee:da:d9:45:cf:71:44:31:81:66:6a:ce:e1:2a:70:
66:23:2d:1c:ca:3f:f5:ea:27:03:97:d0:43:ec:93:15:fc:00:
08:f8:47:bb:22:f7:0b:ce:d8:b8:3e:0c:6e:91:7b:6a:97:06:
4d:5a:a7:b9:8f:0b:0e:cf:b3:c4:e6:e0:72:ed:b7:4f:ab:f6:
09:d2:40:ff:c2:bc:45:8c:ed:59:2b:f9:f3:77:66:0d:17:f5:
75:64:9f:1b:ae:8c:c1:0d:9c:13:85:8d:98:eb:b9:a8:db:dd:
ca:2b:9a:ff:ec:1f:48:65:57:6b:0f:0b:80:59:ba:4a:64:34:
7f:22:ed:71:aa:a6:4f:71:28:cf:c2:99:60:04:dc:ae:02:36:
f4:5b:ec:39:33:31:b0:3f:7b:34:38:5c:c7:5a:50:d9:8b:89:
cb:a4:8c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:52 2024 by rpki-client on console-fra.rpki-client.org