Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/DhzMxcFjiZkbquSqDKTF_a45rEs.roa
File: DhzMxcFjiZkbquSqDKTF_a45rEs.roa (raw, json)
Hash identifier: y1W+M7volTozFCstXK5PYe3slqxF67IdzShLBTo9AQI=
Subject key identifier: 0E:1C:CC:C5:C1:63:89:99:1B:AA:E4:AA:0C:A4:C5:FD:AE:39:AC:4B
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 48E0
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/DhzMxcFjiZkbquSqDKTF_a45rEs.roa
Signing time: Mon 30 May 2022 00:30:08 +0000
ROA not before: Mon 30 May 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18656 (0x48e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 30 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=0E1CCCC5C16389991BAAE4AA0CA4C5FDAE39AC4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1d:3d:13:22:f9:08:a2:9e:f7:bd:4e:74:85:
4f:eb:8f:ba:ff:87:2f:e9:71:fb:ab:a3:9b:85:42:
34:72:fd:5f:42:40:43:5b:92:f2:a7:2a:c6:27:42:
40:6b:76:11:4a:f8:57:c9:f3:a9:18:ce:a0:c2:b0:
45:19:52:01:f7:dc:f0:d5:55:17:8a:5a:03:75:bb:
c9:b7:9f:06:c6:61:58:7c:52:59:a5:45:f4:56:34:
bc:ca:22:3d:9c:1d:93:97:2f:67:19:bc:44:e9:c1:
41:e2:d0:01:3c:30:7d:11:b4:27:12:fe:bc:00:71:
53:67:12:40:4b:d2:d9:08:65:c9:80:9a:3a:23:9c:
d9:27:71:c4:6f:92:74:f0:45:a9:27:6d:c0:71:09:
80:6e:ec:98:00:55:c3:1f:36:0f:95:c6:a4:3f:ee:
c7:1c:3c:b4:4e:29:da:4a:7c:56:9c:95:f5:bb:ff:
8f:43:3a:2c:ab:5e:ad:e0:02:45:ab:5a:0a:65:82:
dd:2f:7b:5f:1c:95:64:3d:97:e3:ff:25:fa:fe:4a:
f1:f7:8f:2f:93:86:69:0d:8b:9c:8f:3c:45:6c:6d:
6f:8f:2d:73:9e:66:b2:dc:bf:bf:2b:48:7b:1b:d9:
ba:ef:c5:23:01:56:49:7c:00:2c:0f:d5:83:21:05:
55:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1C:CC:C5:C1:63:89:99:1B:AA:E4:AA:0C:A4:C5:FD:AE:39:AC:4B
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/DhzMxcFjiZkbquSqDKTF_a45rEs.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
33:53:b5:84:bb:42:48:18:c5:69:01:55:ee:1c:d2:5f:73:16:
48:6a:94:5e:79:a5:a4:db:ee:9b:70:41:e5:9d:0f:6c:25:16:
f0:81:33:7c:90:cd:56:df:be:c0:ea:f4:11:50:60:79:d6:b2:
bd:a6:c9:02:9f:2b:3d:40:ae:dd:eb:23:69:19:53:3b:ae:3f:
be:e2:1b:c1:71:9d:19:af:9b:e3:68:2c:e1:fe:5a:b9:06:2d:
04:c2:d5:13:7e:7b:36:22:b4:6e:3f:20:ae:53:13:d1:74:bc:
53:35:49:12:21:f2:24:43:d8:1c:3e:88:00:ba:f9:5f:18:0f:
2f:09:40:d7:2f:5c:06:27:d0:ee:62:65:fa:6c:3a:5f:ec:00:
38:94:ee:59:7a:75:01:7e:71:0c:4c:ac:92:d7:4b:ef:99:f7:
51:64:21:fb:38:89:ce:75:4b:d9:d3:88:1b:20:77:1a:01:19:
28:4f:49:01:af:ae:e3:c3:ca:d8:39:58:01:b9:6e:e7:ee:d9:
5a:4f:c6:72:0a:af:42:52:4c:bd:81:22:0c:f1:03:03:2e:60:
60:52:de:6a:b7:e6:4a:02:07:19:18:79:1c:b2:ad:7b:4c:be:
33:8e:11:ed:f9:48:24:30:c6:2b:e9:e9:56:eb:fd:57:21:4c:
07:e3:89:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org