Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/6W2Z8UXW2MkQKkbImAzr5iHQNyI.roa
File: 6W2Z8UXW2MkQKkbImAzr5iHQNyI.roa (raw, json)
Hash identifier: uf9g3uGE0nm8PE1avQ13EzYjbMHTtxljYNohdbb9Yxg=
Subject key identifier: E9:6D:99:F1:45:D6:D8:C9:10:2A:46:C8:98:0C:EB:E6:21:D0:37:22
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4272
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/6W2Z8UXW2MkQKkbImAzr5iHQNyI.roa
Signing time: Tue 01 Feb 2022 00:30:07 +0000
ROA not before: Tue 01 Feb 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17010 (0x4272)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 1 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=E96D99F145D6D8C9102A46C8980CEBE621D03722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:31:21:71:f5:e2:2a:39:49:5d:cc:5e:e0:e4:
0c:f8:6f:10:d6:fb:30:6a:79:8e:ad:7f:10:1f:0c:
72:a1:27:fc:73:fc:da:62:f9:4e:3a:54:0e:65:0d:
34:6b:e8:69:35:e6:0d:e7:3c:a8:82:7b:8e:0c:f5:
0e:fc:00:90:d8:6c:0e:d9:6a:cb:fa:71:7c:38:c2:
9d:77:c1:4b:83:7c:7b:8a:f3:0f:a3:80:dd:39:a9:
40:68:2e:a1:23:ce:58:d5:f4:f7:e1:e8:3e:51:e1:
28:2e:d4:d0:11:2c:4a:57:a5:fd:14:6f:d2:dd:c7:
39:1c:46:06:9a:c3:57:7e:4f:d5:fc:05:e5:ae:b3:
74:a4:af:9c:d0:4a:ee:a9:f1:8b:78:83:1e:ee:93:
6e:4a:c2:99:85:aa:07:17:98:b4:9f:6e:18:0b:3e:
09:e3:55:74:8a:01:c8:b4:07:c0:f1:4f:44:4f:06:
45:5e:0e:d7:a5:b7:20:7e:d3:43:d4:a9:f9:26:c6:
41:ee:72:17:7a:18:3e:51:e2:47:36:b7:a5:b3:a0:
8d:4e:e2:99:a4:66:1e:90:3f:c2:a7:9a:5f:2c:89:
17:e1:93:23:fc:77:9f:c9:ab:f2:17:b3:5c:4f:3b:
79:27:c2:72:21:40:03:ef:b5:45:ad:11:cd:e9:17:
7a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:6D:99:F1:45:D6:D8:C9:10:2A:46:C8:98:0C:EB:E6:21:D0:37:22
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/6W2Z8UXW2MkQKkbImAzr5iHQNyI.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:ec:ac:d3:a9:b3:eb:0b:94:75:ec:db:8f:f5:d4:58:6a:e1:
b6:4f:3c:bc:14:d8:c4:c8:50:36:d3:71:72:b8:06:6d:06:a3:
0d:44:ce:31:3b:bd:ab:62:9e:e9:f6:73:d0:91:64:c9:21:fc:
1a:9f:23:76:ff:bf:d9:5f:6e:93:16:f0:35:98:fb:93:0a:53:
8f:00:21:5f:94:a4:b9:6c:59:5a:59:5f:a3:fe:f8:00:79:24:
a7:1d:10:43:92:b8:9f:44:61:14:04:31:db:21:21:dc:e2:02:
64:3f:91:29:47:e2:13:51:af:ab:89:d2:b4:c6:2b:74:34:35:
8e:d0:69:02:5c:8a:88:41:7e:e8:f1:48:03:b1:4e:3a:09:7f:
21:33:57:df:55:0c:01:5e:46:73:17:c2:03:32:89:36:59:4b:
1b:a7:2a:c3:ec:1a:59:58:fd:2f:25:93:9a:94:51:46:b6:e2:
03:2e:cc:97:63:23:fc:9c:25:06:58:38:41:9a:01:eb:fe:d2:
d9:7a:ce:56:a3:e9:d7:b9:b9:be:c5:7e:2e:e6:40:09:61:77:
51:bb:4a:11:bd:08:00:72:eb:7d:23:b2:4d:d3:36:9a:a6:8f:
09:db:03:27:22:71:f8:6b:6c:0b:19:91:6c:a9:b4:94:7c:f7:
8c:e5:15:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org