Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/LeL7-Rbv-JFRGnt9j8ru7Th_aow.roa
File: LeL7-Rbv-JFRGnt9j8ru7Th_aow.roa (raw, json)
Hash identifier: NXJnKlmfOfHt47viLeAY0KabUeSlh3j2R+4fPdKQ+RE=
Subject key identifier: 2D:E2:FB:F9:16:EF:F8:91:51:1A:7B:7D:8F:CA:EE:ED:38:7F:6A:8C
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4369
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/LeL7-Rbv-JFRGnt9j8ru7Th_aow.roa
Signing time: Sat 19 Feb 2022 00:30:06 +0000
ROA not before: Sat 19 Feb 2022 00:30:06 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17257 (0x4369)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 19 00:30:06 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=2DE2FBF916EFF891511A7B7D8FCAEEED387F6A8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6f:8c:cf:a0:6f:76:5c:d2:4d:20:aa:c2:bb:
85:96:12:ee:57:2d:b6:ce:db:9d:ef:5a:85:8b:3a:
60:51:b9:1a:38:f9:71:d2:19:1d:5c:c3:10:b6:e9:
1d:fd:3f:b5:e8:6d:6c:4c:54:eb:28:13:5a:0d:3c:
96:4b:c5:1c:86:4e:4c:37:0c:cd:95:f4:02:ef:b9:
1c:7d:42:4e:8a:74:ea:fe:84:10:38:d5:e6:6c:3a:
67:de:18:c5:dd:fc:1c:79:88:ee:b3:fc:7b:6a:35:
8a:0d:53:b5:0f:44:dd:0f:dc:20:3c:83:c5:b4:ce:
b8:6d:ad:56:bc:b8:dc:e4:eb:30:ae:86:5f:a1:50:
4a:11:91:25:f8:30:12:ae:9d:83:c3:da:c8:b2:bf:
67:5c:e6:8b:4e:ec:a7:1c:23:6d:7a:07:b4:96:39:
ce:36:99:63:ec:53:37:75:ab:70:d9:83:f3:9a:c2:
5a:4b:f2:65:b8:9a:d1:fc:a0:89:5e:7b:9d:08:33:
44:55:2d:49:e7:f8:fe:9e:b1:1a:86:ff:1b:05:e3:
bb:2f:6b:ce:d7:51:e0:e9:a9:41:09:9e:a7:bb:11:
fc:30:b1:90:2e:14:f4:60:3c:a6:57:09:b4:e8:20:
91:a8:f0:5f:61:8b:a6:b9:e3:b0:2d:87:f7:c9:66:
1e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E2:FB:F9:16:EF:F8:91:51:1A:7B:7D:8F:CA:EE:ED:38:7F:6A:8C
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/LeL7-Rbv-JFRGnt9j8ru7Th_aow.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
10:5a:12:52:59:bb:a2:68:ce:42:36:47:18:71:8f:4a:e9:eb:
71:9a:e0:9c:0d:bf:29:42:55:fa:5f:8c:70:63:c7:aa:e7:85:
53:ad:38:91:06:96:fb:21:b9:06:96:5f:4c:07:e1:68:84:1f:
24:46:41:54:6e:21:41:d4:0b:92:4a:4a:e6:f1:b3:81:3a:22:
80:5b:2d:d8:dc:5a:03:e3:e6:0f:ce:47:58:ff:0b:a2:25:9d:
06:2b:9c:b9:44:8e:1d:89:84:ce:7d:ce:7d:b0:95:b7:ec:e3:
af:d1:1f:af:77:78:43:ed:e5:e1:5e:72:54:7e:fb:11:5d:ca:
61:4b:6a:9c:b1:94:d9:d9:16:41:9f:fd:6c:66:38:62:9b:6e:
d3:ca:66:00:25:df:a8:20:44:4a:13:7d:f0:da:ed:d2:75:59:
3e:2d:50:29:cb:75:92:a4:91:6c:a4:18:1d:64:d8:31:82:f0:
29:59:0a:6e:bf:6d:c3:fc:2a:a9:b1:e2:7e:ab:da:05:64:b2:
ec:bc:54:16:36:b0:db:23:6b:d0:2d:ac:25:d4:ed:2c:c7:9d:
c1:ec:e3:e5:48:84:7f:65:0c:af:6c:d4:fb:3a:29:be:3e:72:
fd:a6:6e:6f:ab:45:14:f8:75:d0:2b:7d:44:c8:a6:a5:8d:bb:
0a:70:cd:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org