Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/SalX3pEAwHlyuZWA6jSd9ylAGaw.roa
File: SalX3pEAwHlyuZWA6jSd9ylAGaw.roa (raw, json)
Hash identifier: PxXa0Hm1C+8LbjD72EPosbvh2glp3gpf3LmgTgymrJg=
Subject key identifier: 49:A9:57:DE:91:00:C0:79:72:B9:95:80:EA:34:9D:F7:29:40:19:AC
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4682
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/SalX3pEAwHlyuZWA6jSd9ylAGaw.roa
Signing time: Sun 17 Apr 2022 00:30:07 +0000
ROA not before: Sun 17 Apr 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18050 (0x4682)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 17 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=49A957DE9100C07972B99580EA349DF7294019AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3e:54:48:ae:54:d2:83:f0:2c:1f:b8:ac:a6:
f3:20:49:5d:bf:dd:70:a0:96:aa:3b:06:42:64:ad:
99:93:48:8b:fa:71:e5:04:5f:73:4e:1d:17:9c:a8:
ab:df:ab:ee:e2:d0:1f:ad:58:1b:71:45:ec:02:d2:
f8:ed:85:b6:f0:70:23:01:a1:d4:00:cc:0f:cf:79:
f1:e8:c2:02:0e:24:4d:cc:3e:b0:d7:38:95:50:6e:
36:d8:97:92:da:9b:28:3d:83:af:c2:97:ab:c3:f2:
85:cd:bf:25:f9:32:c2:30:25:8e:2a:4f:1c:cc:b3:
f4:ad:de:d5:7a:ba:de:ba:c5:0f:aa:eb:b6:e5:dd:
8f:fa:04:b2:4c:11:76:b0:fd:e2:54:f0:8b:0d:6e:
c1:9a:1d:2a:52:bc:27:14:3d:85:8a:ea:d5:a4:d2:
23:6a:3c:9b:ba:c8:0d:af:9d:fc:55:f2:8e:d6:b4:
77:36:66:12:b3:ce:cd:65:56:8d:39:f3:db:f0:ba:
e7:2c:16:0b:35:ac:50:d0:a8:22:94:dc:e4:d0:65:
ae:c9:72:92:a1:de:72:ff:89:20:1b:e2:32:8f:73:
61:f8:68:c1:32:01:23:f8:80:9e:4d:71:88:50:81:
b7:38:32:cd:75:58:8f:2f:22:b9:e0:30:ea:ee:c1:
d7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A9:57:DE:91:00:C0:79:72:B9:95:80:EA:34:9D:F7:29:40:19:AC
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/SalX3pEAwHlyuZWA6jSd9ylAGaw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:cd:e2:e1:e1:d9:1b:e9:70:09:84:23:a4:77:c6:7e:4e:2a:
69:68:75:62:3b:7f:a0:93:d5:a3:0c:9c:21:f6:37:cd:0a:24:
52:92:57:d2:36:f6:eb:e1:95:4f:d6:d7:36:64:59:4c:d3:15:
cd:d5:b0:d6:c0:ce:39:b9:24:23:c0:82:ce:c4:6c:7b:70:c3:
a6:9c:f5:ed:5f:4d:02:cd:f2:2b:10:98:38:73:26:ff:69:b4:
38:3d:f9:e9:b4:0c:de:32:41:f1:97:54:a0:76:a5:c1:28:ee:
98:c6:6d:17:40:d2:ae:e1:ff:9d:56:80:d9:b2:ba:48:03:a8:
59:67:da:eb:a7:17:79:70:3c:04:fc:58:19:b4:ed:a7:6c:88:
1d:89:b7:b4:25:92:c4:8f:87:46:1b:18:19:33:59:eb:b5:17:
a8:6e:7c:f4:fd:07:f7:cc:2c:fb:e2:65:76:93:e1:49:5e:e0:
a2:63:43:5c:bf:5d:7a:b5:e4:bb:19:2c:c8:c2:7f:39:32:94:
0b:a0:4a:2f:d3:13:79:4e:b0:8a:b0:0c:12:f8:ab:be:13:3a:
62:8c:3a:fe:86:71:ee:43:e5:e7:48:77:5b:4e:04:9d:6c:91:
4d:98:9a:23:a9:d2:70:6c:76:e2:dd:04:f0:ca:1a:bf:e3:17:
41:df:34:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org