Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/aSl-lcChX006NMNW0tX6EQunmhQ.roa
File: aSl-lcChX006NMNW0tX6EQunmhQ.roa (raw, json)
Hash identifier: o1xNkWxBnxp+HJVem0VO7/HRoSKJR5LfeOkgNC85mTY=
Subject key identifier: 69:29:7E:95:C0:A1:5F:4D:3A:34:C3:56:D2:D5:FA:11:0B:A7:9A:14
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4782
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/aSl-lcChX006NMNW0tX6EQunmhQ.roa
Signing time: Thu 05 May 2022 00:30:09 +0000
ROA not before: Thu 05 May 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18306 (0x4782)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 5 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=69297E95C0A15F4D3A34C356D2D5FA110BA79A14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:68:a7:28:f2:74:2e:74:9f:8f:5b:69:e6:c9:
5a:d2:a4:71:78:c2:41:c4:d1:ca:c9:c0:9d:b8:4a:
65:22:02:a4:70:41:9d:b0:92:05:30:cc:19:4a:ac:
8f:49:64:38:cd:85:2d:54:eb:cb:cb:a4:4b:38:f0:
5d:fc:3d:9f:0b:32:56:26:96:23:a6:93:77:a7:aa:
fe:34:69:c7:9e:62:c9:94:0a:20:84:e1:9f:d2:dc:
f7:bc:d4:ad:de:12:ee:bf:e7:a4:6a:14:b7:5c:6b:
49:42:76:7b:a0:c2:11:69:e8:fc:ed:19:fa:fd:de:
bb:8a:d3:16:77:c3:4f:73:1f:80:4f:d0:67:b9:17:
00:6b:81:ec:55:0e:4c:24:fb:e8:71:3c:88:0b:bd:
c9:77:09:14:08:02:7d:6c:6d:8f:a6:0e:0f:21:9e:
f5:e9:75:b1:4e:30:1a:f5:de:35:18:3a:9d:67:aa:
32:43:16:e0:6e:69:db:18:18:e7:d1:ae:7e:2c:36:
1f:ad:05:c4:c4:36:44:26:ae:0d:e2:1e:c8:b6:fe:
9a:cb:94:f0:2e:5f:19:e3:c1:88:06:b1:5e:ba:76:
95:1e:b6:04:a7:ba:dd:0d:a6:8a:62:0f:db:75:c3:
49:69:30:23:01:11:1d:e1:6c:c0:6d:42:0e:10:44:
df:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:29:7E:95:C0:A1:5F:4D:3A:34:C3:56:D2:D5:FA:11:0B:A7:9A:14
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/aSl-lcChX006NMNW0tX6EQunmhQ.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:b2:22:65:f7:3d:36:ea:5d:37:39:2a:f1:a5:f1:b3:fe:cb:
55:6c:af:df:41:07:cc:43:12:ff:db:54:e4:4f:2b:49:58:26:
3a:f9:c4:4f:93:0c:11:d5:bf:91:49:fb:8f:e0:dd:3b:bf:e8:
31:41:e1:76:ef:20:fc:03:1e:4a:88:f6:07:59:62:4c:ff:b8:
10:68:57:75:7c:13:cd:1b:d3:95:03:21:54:88:20:ab:f3:9b:
f9:cb:ac:d7:1a:65:19:23:e9:a7:df:3e:df:af:1f:d0:a5:e0:
06:42:95:4c:1f:d6:25:a7:e5:86:56:2a:0d:ed:a5:0d:4b:7e:
4e:6f:c3:7d:74:23:bc:d5:b1:a6:ba:59:ff:88:0c:51:2f:3d:
e6:cb:7a:22:23:02:40:5e:4f:4d:c0:be:54:4d:f9:84:b7:dd:
1a:ec:16:85:a9:e8:da:bc:f4:26:15:db:2f:45:78:39:04:63:
b6:13:cb:9e:62:73:89:c3:8b:d4:0a:87:cb:7c:63:bb:7e:ef:
68:02:bb:20:f5:7d:1a:ba:3c:d7:1d:48:62:02:ad:6b:f0:fa:
44:d1:f8:8a:cf:22:b0:14:28:fb:ce:d0:91:63:fa:ee:48:2f:
d9:6c:f5:89:4b:55:c0:b4:68:e7:12:94:c3:46:7f:44:e0:93:
a0:48:0f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org