Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/U_fOfFiQffsEaGEN9K3HG-0mODE.roa
File: U_fOfFiQffsEaGEN9K3HG-0mODE.roa (raw, json)
Hash identifier: 3egVIHdeZ31yoJt/sLO2nwmbzMWPWGWU8otCK2EF57w=
Subject key identifier: 53:F7:CE:7C:58:90:7D:FB:04:68:61:0D:F4:AD:C7:1B:ED:26:38:31
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4280
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/U_fOfFiQffsEaGEN9K3HG-0mODE.roa
Signing time: Wed 02 Feb 2022 00:30:08 +0000
ROA not before: Wed 02 Feb 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17024 (0x4280)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 2 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=53F7CE7C58907DFB0468610DF4ADC71BED263831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8e:83:e8:4a:08:d0:ce:f8:3d:fe:da:b9:76:
d8:40:65:1f:54:27:4d:72:a4:5b:2f:1b:c8:37:76:
af:29:95:d5:e3:a9:69:e1:ab:98:ff:9a:c1:c2:b7:
4f:17:3a:de:9c:f4:df:93:ec:6d:93:a3:a2:9f:c2:
0d:19:77:28:d2:61:37:56:bf:b8:9b:64:3a:ba:51:
2b:19:05:8e:1b:26:1d:a7:fd:be:75:e9:c3:32:4e:
c5:37:6e:03:a0:21:0e:18:ce:79:1e:11:33:c8:87:
75:d1:c6:dc:ff:fd:c3:c8:3f:73:f2:d7:64:63:ab:
a3:6c:4a:0c:ee:31:0a:e6:81:b2:fa:d4:68:6b:3a:
b6:2d:6b:20:94:03:a3:91:32:d0:fc:bd:bf:b2:b5:
25:1a:01:d0:3a:21:2e:37:26:0c:b8:91:a0:9b:89:
8b:58:ec:15:36:af:36:21:4b:d1:ed:0d:fa:a4:fa:
35:5f:08:2e:92:15:a5:ac:01:d6:e4:e5:1f:1e:c5:
8f:59:c1:65:c1:9b:5e:1b:93:51:a4:f1:d4:c7:b6:
50:66:07:cc:a9:aa:4f:87:5b:c0:9a:16:36:f2:f4:
8c:4a:9a:60:dd:ce:f9:58:2f:19:55:31:93:ba:5a:
e9:ea:b5:f0:c5:2d:c4:d5:a0:ba:40:a3:5c:45:7e:
75:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F7:CE:7C:58:90:7D:FB:04:68:61:0D:F4:AD:C7:1B:ED:26:38:31
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/U_fOfFiQffsEaGEN9K3HG-0mODE.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
58:ef:89:69:88:8e:51:e4:66:cf:26:aa:5a:18:b9:15:48:3f:
4b:84:43:78:b7:6b:26:99:22:01:27:68:8a:63:bd:36:c9:0b:
ef:22:19:f1:65:1c:76:e1:aa:51:e3:ad:cd:6a:9c:fc:7e:64:
ec:d2:82:e7:60:33:f9:00:f7:d2:3e:06:8f:4c:50:47:c5:bf:
e6:ee:4b:34:4c:7e:64:6a:78:3d:f6:c3:32:94:a3:3b:ec:6d:
0a:88:54:f3:64:d9:08:42:cd:55:8b:92:a7:53:9e:1e:84:34:
76:fe:6e:2b:58:ac:c7:50:89:30:b4:30:cf:2f:f6:f3:80:fa:
2b:6e:f9:15:ae:93:cb:33:00:fe:2b:45:ad:8a:4b:b9:2e:12:
20:82:bf:ce:0f:5e:3d:0b:85:68:16:0f:51:6c:50:03:a9:9f:
24:9c:d7:e6:9c:98:f2:74:b9:8f:eb:bf:16:37:4b:6a:0a:ac:
9d:f3:45:d5:e9:fd:23:55:4b:57:b3:9a:4e:5d:e6:6d:c2:77:
68:99:6d:c7:3f:7d:7f:4f:5e:0c:8b:5b:a9:a7:9f:db:89:33:
04:d7:42:2e:9f:15:09:3d:88:c6:14:8e:9a:07:af:38:9b:74:
6d:7b:ba:06:84:a4:a4:79:fa:48:44:38:b7:1f:5b:e4:a8:19:
12:bc:cf:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org