Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/KlHdwiEo_LoiTNsmVguM-QV-DXg.roa
File: KlHdwiEo_LoiTNsmVguM-QV-DXg.roa (raw, json)
Hash identifier: jw1enBbh6mMMr1eVwmM3KkSTUkhcRx2nVXtAN29YGUE=
Subject key identifier: 2A:51:DD:C2:21:28:FC:BA:22:4C:DB:26:56:0B:8C:F9:05:7E:0D:78
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 47FC
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/KlHdwiEo_LoiTNsmVguM-QV-DXg.roa
Signing time: Sat 14 May 2022 00:30:06 +0000
ROA not before: Sat 14 May 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18428 (0x47fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 14 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=2A51DDC22128FCBA224CDB26560B8CF9057E0D78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cc:f0:97:c0:25:f4:1d:bf:d3:0a:33:4b:d9:
e7:97:49:a0:f1:bb:ca:3a:68:04:c7:82:46:68:9a:
06:01:49:07:c2:42:82:f2:f6:02:52:93:bd:5b:a7:
32:30:84:c7:c5:17:a6:16:da:c9:fd:90:05:0a:03:
9b:c0:68:a3:80:6f:4b:b0:53:21:b9:90:dc:e8:63:
f2:55:7d:6a:9a:57:17:a6:9b:0b:44:5e:0a:e2:f5:
5f:7a:25:3d:04:20:fa:9e:5d:48:1c:ff:bb:e5:75:
16:63:67:84:b1:e0:50:e4:ed:57:5a:aa:fd:2c:75:
84:9f:76:32:db:8b:c8:b8:1d:19:56:ac:65:bc:51:
56:4e:65:b5:18:74:ad:35:08:f3:64:6a:81:71:f1:
0d:aa:ef:bc:60:2d:dd:2b:5e:89:02:8c:fd:51:06:
d5:b7:6a:fd:9c:0e:00:50:f8:9f:96:5d:d3:f6:10:
a2:17:1d:b1:c0:97:ef:00:35:05:bb:8e:5d:10:6c:
cd:92:7a:35:0e:95:0d:58:ca:dc:11:c9:1d:c3:b0:
b5:aa:09:6c:c2:d8:02:fa:c7:7c:c0:44:35:fa:0a:
c4:da:96:bd:69:a0:11:19:d8:96:ff:60:a4:7c:72:
84:0a:c4:19:9b:85:b4:40:21:bc:cd:86:55:5b:b5:
1f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:51:DD:C2:21:28:FC:BA:22:4C:DB:26:56:0B:8C:F9:05:7E:0D:78
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/KlHdwiEo_LoiTNsmVguM-QV-DXg.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:37:c5:9f:49:e6:d1:95:fa:f2:e1:f9:2a:fc:62:e1:cc:6b:
24:04:30:b7:11:fb:75:39:be:49:62:25:a5:d3:47:6a:19:e7:
98:6c:f2:d8:8b:90:e3:80:57:32:69:72:0f:ee:92:1d:04:17:
fd:05:be:2a:24:68:85:c9:01:7c:6d:95:12:20:35:7e:89:eb:
3b:21:cc:00:ee:98:4c:d2:53:56:73:f8:36:4b:f8:f7:cc:b8:
42:49:c2:5d:06:c2:c9:f3:08:e6:02:a5:c7:91:b5:85:57:5a:
a5:7d:87:b2:6b:76:c3:bc:92:b9:ab:ef:b0:04:cb:1f:5a:02:
86:96:2f:17:44:0a:b9:47:45:d9:1e:43:21:b6:dc:be:46:f8:
b1:7c:96:31:58:09:03:8a:65:de:a5:9f:a6:fe:7c:e8:19:80:
f2:4d:20:d0:c5:d4:d8:40:04:bf:d0:73:0b:5b:f4:df:ba:1a:
f5:1a:6e:48:ea:00:60:d6:21:44:d9:48:8a:d4:00:b7:96:3b:
5c:bd:a1:eb:b3:c4:b8:92:cd:ad:8a:3f:8a:c2:53:3b:50:63:
f7:cc:50:e3:01:ef:57:c9:a1:a8:1a:96:d4:2e:e7:04:78:38:
62:50:c6:16:c6:35:61:df:ad:88:ee:dc:4d:61:5c:15:f0:a3:
0a:42:72:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org