Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/9RMaKUHCZxi2PlIsk2F248B1UOc.roa
File: 9RMaKUHCZxi2PlIsk2F248B1UOc.roa (raw, json)
Hash identifier: rbBiXF8FyJGi84jdqYItXpfP5yT0ShFtdUlD9sGwGFk=
Subject key identifier: F5:13:1A:29:41:C2:67:18:B6:3E:52:2C:93:61:76:E3:C0:75:50:E7
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 463C
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/9RMaKUHCZxi2PlIsk2F248B1UOc.roa
Signing time: Tue 12 Apr 2022 00:30:10 +0000
ROA not before: Tue 12 Apr 2022 00:30:10 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17980 (0x463c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 12 00:30:10 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=F5131A2941C26718B63E522C936176E3C07550E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:17:9b:c1:31:0c:bf:c5:bf:79:b4:cc:ce:0f:
4a:0e:93:de:f3:81:c1:45:0a:c9:09:19:e1:50:61:
eb:39:1c:0e:ed:c9:87:ac:d0:57:9b:f6:9f:43:57:
51:86:a6:0c:0d:03:2c:c5:af:85:64:d6:c6:e0:fa:
38:ea:43:df:01:da:27:49:c7:c9:93:fa:5f:ef:de:
1a:60:b0:5f:a4:5f:5f:d6:14:f5:d2:2f:10:19:69:
59:4e:10:d6:8d:8e:1a:5a:97:15:57:7e:e5:be:f6:
e4:dd:5c:77:f8:d6:0f:70:43:88:98:d7:1d:90:ff:
ce:38:bd:58:36:76:bf:e4:3c:5a:06:83:8f:b3:8a:
9c:5c:19:ca:b9:71:a8:c9:18:b5:22:0a:0a:bc:8a:
0d:84:ef:f9:81:74:9a:78:9f:7e:c7:3c:5f:45:f6:
f4:42:20:ee:0b:f1:0f:68:1c:59:7f:7b:61:3d:7e:
1f:00:28:5d:80:79:2e:4f:62:3a:2f:a1:94:4d:6b:
0a:93:b2:c5:39:e4:80:ca:e1:0d:1b:8a:5e:30:cf:
6f:d1:56:5f:f9:85:78:b0:e3:46:6b:d6:51:03:e9:
83:8d:01:8b:09:10:15:c9:b4:5a:a5:cb:a7:e3:2b:
96:a8:38:03:ad:65:7a:5b:dc:3a:47:06:75:19:d2:
c9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:13:1A:29:41:C2:67:18:B6:3E:52:2C:93:61:76:E3:C0:75:50:E7
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/9RMaKUHCZxi2PlIsk2F248B1UOc.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
44:83:4d:a2:38:ec:f5:cf:42:1f:d8:55:4e:c6:a6:c3:22:eb:
62:40:12:17:a1:bb:60:11:e6:40:7c:79:4f:17:40:df:c7:57:
70:6d:07:0b:cd:e2:57:1b:d4:aa:23:59:56:cf:70:31:f5:c9:
6a:ac:08:51:a8:c3:43:a2:bd:54:b3:f9:99:f8:43:b0:f4:d7:
0b:17:c5:ba:06:26:a6:61:7e:79:73:43:52:b5:1d:55:20:09:
c9:af:9c:72:d3:62:3b:00:e6:a7:e4:4e:e2:5e:ea:48:8f:d0:
2b:6e:0e:0d:00:c9:95:cf:03:b9:40:63:e6:ba:1f:54:7f:9d:
54:30:84:a9:a7:73:a7:05:df:95:a1:0f:c9:08:d7:42:c5:60:
e0:82:b9:52:7a:74:08:4c:5a:ea:b9:25:c1:9a:37:58:b4:f5:
c4:13:69:c3:8d:ce:4e:d7:03:5a:c3:11:36:a7:4a:c8:8d:13:
f0:88:37:03:f6:18:ab:03:93:35:36:08:4f:71:0d:5e:38:61:
25:5d:4a:15:2d:24:21:1e:5e:73:bb:4b:9f:24:44:30:4a:7d:
95:00:cc:5a:02:9d:d2:a5:7b:a6:fd:c1:dc:3a:cb:78:38:83:
71:5d:fc:ed:62:d5:11:fd:5d:48:9f:8f:2a:4c:86:29:77:81:
82:80:e6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org