Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/aW50MfWp62EaS0981iCItOBsMXE.roa
File: aW50MfWp62EaS0981iCItOBsMXE.roa (raw, json)
Hash identifier: kI+O8N7hv8NwV7Ipzmq34NoHTJlsJ1oPYLuCpXYMEgo=
Subject key identifier: 69:6E:74:31:F5:A9:EB:61:1A:4B:4F:7C:D6:20:88:B4:E0:6C:31:71
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4790
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/aW50MfWp62EaS0981iCItOBsMXE.roa
Signing time: Fri 06 May 2022 00:30:07 +0000
ROA not before: Fri 06 May 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18320 (0x4790)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 6 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=696E7431F5A9EB611A4B4F7CD62088B4E06C3171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dc:d3:e5:42:70:93:a8:50:f2:de:86:83:31:
2a:d1:d2:de:a8:5f:32:91:48:7b:8b:8a:dd:8d:26:
ea:1b:87:a5:40:7e:67:9e:e6:4e:2a:0d:7d:91:e3:
69:ff:91:da:c5:ce:4b:22:16:fe:a9:33:c9:9b:7b:
6b:4f:f9:7e:54:63:2d:f8:56:59:de:2e:da:90:37:
f3:85:04:5f:80:47:b2:5e:03:04:ec:6b:e2:45:f2:
5b:bf:20:9d:44:13:79:69:87:4a:c1:6c:fa:65:cb:
ed:4a:78:12:76:e6:98:5d:b2:b1:47:74:61:fe:c8:
86:c5:50:2e:d3:cc:ec:d0:56:c6:e0:df:dd:51:91:
9c:df:a7:7a:81:fb:9d:77:b5:a1:1d:ba:60:e1:6d:
63:ca:23:16:15:0d:d5:11:c5:f8:ac:63:90:a2:4e:
8e:1a:16:09:46:a9:e2:2b:1e:98:ec:29:0d:4e:7b:
03:15:bf:33:2b:5a:70:98:61:58:96:19:25:fb:32:
43:74:76:18:11:ee:26:50:09:89:de:4a:93:86:4f:
88:05:46:8d:14:9e:91:75:2d:b5:fe:1c:01:c8:99:
a0:09:1e:35:46:5c:3f:1c:39:65:94:b4:41:df:3c:
d3:55:ab:e3:3a:e2:a2:54:f7:d6:e7:fe:9f:49:87:
ad:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6E:74:31:F5:A9:EB:61:1A:4B:4F:7C:D6:20:88:B4:E0:6C:31:71
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/aW50MfWp62EaS0981iCItOBsMXE.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
91:07:75:a6:9c:62:dc:5d:54:54:a9:e5:9a:eb:1f:4e:48:12:
dd:4f:a1:4d:74:2e:35:ad:db:dd:a1:b3:e2:a4:9e:20:a5:de:
0a:bb:8b:2c:95:c5:c9:81:47:ca:db:46:63:c2:2b:f8:6a:98:
7a:4b:c5:fd:a7:ff:15:5c:42:22:56:30:6c:e8:94:27:e9:1f:
62:ce:90:aa:87:d4:25:00:7d:06:55:3a:f6:ac:82:60:64:67:
47:e3:79:7b:d4:8f:d6:4c:62:18:a5:7a:b7:7a:75:37:ff:48:
26:18:d6:a5:71:4b:32:41:a5:41:10:cd:93:f1:37:ac:0d:50:
99:4e:e7:2c:e8:83:6a:55:df:e5:29:6f:ef:03:99:76:79:e1:
94:5b:4f:fb:44:e7:6f:85:48:56:2d:2d:62:1d:67:4e:b8:75:
33:62:9c:47:45:50:ee:eb:42:4b:a7:7f:7b:01:8f:06:f6:1f:
2b:32:69:91:84:62:d3:8c:d6:2b:d5:9b:42:e7:1c:23:c6:98:
f3:6b:1a:b2:15:c8:00:1b:0a:6e:9f:e6:69:94:b8:dc:a9:9f:
22:e9:ad:ad:26:d3:47:94:a5:1b:d7:39:07:67:77:83:6b:d1:
de:a5:e1:12:f3:d7:4d:47:05:12:8a:9b:de:e9:8a:61:be:4d:
a0:da:ee:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org