Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/67vx353dMCAXYz-s0ukQ9OS-1A4.roa
File: 67vx353dMCAXYz-s0ukQ9OS-1A4.roa (raw, json)
Hash identifier: kJDEZxKkWykHE9lLj3OMIVwaVL9uhB+vN4KPBjFdSPs=
Subject key identifier: EB:BB:F1:DF:9D:DD:30:20:17:63:3F:AC:D2:E9:10:F4:E4:BE:D4:0E
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4340
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/67vx353dMCAXYz-s0ukQ9OS-1A4.roa
Signing time: Wed 16 Feb 2022 00:30:06 +0000
ROA not before: Wed 16 Feb 2022 00:30:06 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17216 (0x4340)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 16 00:30:06 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=EBBBF1DF9DDD302017633FACD2E910F4E4BED40E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c2:be:62:a2:73:5d:64:a3:2c:b2:23:25:a2:
43:92:3f:75:cb:30:84:bb:17:26:f5:23:a8:8d:5f:
11:9b:c2:1f:04:cf:1b:57:e9:c2:de:de:22:d1:6f:
e7:a4:46:96:32:9e:cb:b1:f3:74:a7:86:7f:56:ca:
9f:21:45:2a:5a:d8:51:2a:fe:63:77:93:63:24:96:
35:7c:a0:d0:57:1c:ce:dd:89:b2:df:22:2a:06:ca:
9c:b6:ed:80:16:7f:93:7b:ad:47:a4:80:e9:6e:d3:
cc:c8:85:cf:89:5e:dc:94:8f:c4:a9:e4:2b:08:37:
e8:d9:f9:67:2b:87:c4:7e:d2:05:9d:a7:90:7f:e2:
60:ff:a7:7e:ad:3f:37:4f:34:99:49:ea:ae:53:b3:
76:b6:2d:7e:de:2f:24:33:4c:c5:36:15:88:62:f1:
96:31:4e:e6:8f:a8:60:d7:3d:0b:c5:57:cf:0d:97:
56:6c:5b:36:01:75:7b:17:e3:2a:89:6b:27:73:2b:
42:7f:81:a2:da:40:18:48:28:5e:bb:e4:7a:ec:c4:
44:5f:a9:6d:ee:cb:57:87:f6:b7:11:51:1f:0d:2d:
a3:98:c9:ba:7d:ff:5d:d6:4d:5f:b6:86:06:1a:c7:
0a:77:67:9b:92:16:05:71:52:3d:88:83:6a:50:50:
f9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BB:F1:DF:9D:DD:30:20:17:63:3F:AC:D2:E9:10:F4:E4:BE:D4:0E
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/67vx353dMCAXYz-s0ukQ9OS-1A4.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:3b:43:86:19:f5:3a:f6:85:3e:61:a9:52:22:64:78:22:5d:
01:f0:40:b3:3a:82:72:49:cc:e0:5b:88:a4:37:38:24:b9:75:
b7:44:15:39:60:63:15:b8:04:a1:35:b2:11:f9:a5:ba:1a:0f:
6a:f9:6c:97:76:20:c2:5e:fd:4e:7f:2f:63:b5:a4:70:4f:84:
99:88:1e:c9:d3:5c:9a:52:bd:84:b2:ad:33:6e:a8:0c:a9:69:
8b:77:ac:88:6e:93:5c:5c:02:8a:cb:f1:92:e1:98:e0:e3:33:
eb:7a:6d:86:36:52:16:60:a5:4f:c1:53:7d:11:90:ab:17:e9:
02:d4:60:8b:0f:19:67:5a:a1:68:de:17:6f:fb:a9:1f:71:bf:
2b:ca:a9:c4:ab:99:f1:77:7d:19:3d:56:b3:0c:e0:b5:ca:26:
d8:5b:33:a5:5f:ff:39:22:cb:7d:96:fc:14:c8:10:00:67:5d:
5c:0a:d7:1a:49:dd:27:4b:35:a3:7b:d8:83:d8:73:f7:0c:c2:
b8:aa:e5:6d:b0:00:9e:30:3c:ce:a2:2f:6b:02:f3:6e:53:b9:
87:97:c2:0e:57:f1:93:12:5a:97:7f:c1:a5:14:6e:bf:01:b5:
a0:e1:dc:ed:a7:8a:3b:41:89:b0:10:a0:66:24:9f:3d:19:52:
f5:a8:d3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:52 2024 by rpki-client on console-fra.rpki-client.org