Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/BT05UgE_Xys0w9b1vVy2EISHxPc.roa
File: BT05UgE_Xys0w9b1vVy2EISHxPc.roa (raw, json)
Hash identifier: bZAZdBqj9uJR7zOihhhl0v2LmoxOtjiSQdSvgsUjtvs=
Subject key identifier: 05:3D:39:52:01:3F:5F:2B:34:C3:D6:F5:BD:5C:B6:10:84:87:C4:F7
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 479E
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/BT05UgE_Xys0w9b1vVy2EISHxPc.roa
Signing time: Sat 07 May 2022 00:30:13 +0000
ROA not before: Sat 07 May 2022 00:30:13 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18334 (0x479e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 7 00:30:13 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=053D3952013F5F2B34C3D6F5BD5CB6108487C4F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3c:ac:2a:0c:cd:42:c5:12:a7:cf:d8:61:1d:
14:d9:0b:92:46:ef:f8:54:64:11:aa:6e:2e:dc:d6:
e8:41:4c:a3:9f:3b:50:1b:ec:45:a1:33:40:ef:20:
72:dd:33:58:15:ad:8d:82:92:14:fb:f3:2b:2d:9f:
82:89:65:8b:9f:4c:7d:a8:e5:61:69:85:1f:9e:a6:
fc:67:d4:bf:b0:31:c6:c2:ba:3a:78:2b:51:41:78:
f9:15:b6:10:e0:21:a8:c8:73:e7:49:d6:c4:16:2b:
35:c9:3c:9b:3c:59:00:71:2d:f3:c3:0b:3d:30:76:
3d:d7:81:4b:44:6e:a2:dd:3b:5a:5c:b2:59:ac:f4:
d0:f3:82:95:0b:89:17:2c:29:21:f0:b6:b1:ea:03:
15:8b:16:a1:86:70:48:1b:35:5b:cf:40:60:00:fa:
ef:b3:a4:8f:c8:f2:b8:3b:c8:fe:8d:0f:64:ad:c5:
73:cc:ab:ec:a2:c1:65:1f:e7:72:8b:86:e5:22:9c:
4e:94:63:4d:d3:06:82:13:b2:51:eb:8b:92:93:2c:
9a:10:94:0e:89:27:4b:8c:9b:4d:f7:0d:09:4f:0f:
ed:d1:05:8b:99:2c:5a:cd:31:8d:56:ff:a0:8c:f3:
07:bc:48:4f:42:48:9d:93:0c:8c:27:2e:e0:a1:aa:
e4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3D:39:52:01:3F:5F:2B:34:C3:D6:F5:BD:5C:B6:10:84:87:C4:F7
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/BT05UgE_Xys0w9b1vVy2EISHxPc.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
22:22:65:1e:30:58:c9:38:87:cf:e7:e3:e6:41:4d:d9:5b:2f:
25:6b:8a:30:0e:61:49:02:90:b8:c0:20:13:6b:24:12:91:86:
f0:f8:13:fc:88:53:f7:c8:59:14:9d:4b:11:2b:da:2d:6d:ad:
f6:f7:63:38:62:9f:8b:c2:b2:bf:6b:5c:22:47:40:b2:1c:b0:
62:62:7a:c9:35:2e:bc:d6:57:c7:cc:aa:80:b3:a9:ed:1d:34:
4b:b7:53:0e:18:c3:31:5d:8d:a7:94:d8:19:db:72:4c:a6:1d:
ed:ef:2a:b4:e6:54:85:a2:bd:33:a0:f3:85:7d:19:d2:1a:90:
8d:26:2a:a4:fe:bc:ac:97:38:0a:43:68:a4:a3:40:26:23:8a:
cd:8e:9d:77:3b:41:6e:e7:87:f3:24:07:e2:87:c6:55:d9:ef:
66:25:26:00:dc:32:19:69:dc:9d:8c:c9:2e:ea:d7:4f:82:0b:
52:41:b4:d3:f5:b0:76:08:e8:3d:b8:43:1a:3d:81:de:db:63:
99:39:57:d7:9c:a7:c6:02:fb:9e:8c:ea:fc:ae:57:8f:39:d1:
26:39:bb:82:1c:5d:05:55:2a:f7:00:e6:0a:3c:9e:f0:76:0d:
94:3c:65:13:36:49:4d:9f:09:9d:53:aa:b9:3f:d1:75:1c:de:
00:26:03:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:52 2024 by rpki-client on console-fra.rpki-client.org