Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/cTh6g9HZ4IqUjCegISFqMGaFU6I.roa
File: cTh6g9HZ4IqUjCegISFqMGaFU6I.roa (raw, json)
Hash identifier: bF8CAHIqH4DdMbUnUUtPTwRIb07ia0SnYGUkUsgq2u0=
Subject key identifier: 71:38:7A:83:D1:D9:E0:8A:94:8C:27:A0:21:21:6A:30:66:85:53:A2
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 441F
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/cTh6g9HZ4IqUjCegISFqMGaFU6I.roa
Signing time: Fri 04 Mar 2022 00:30:10 +0000
ROA not before: Fri 04 Mar 2022 00:30:10 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17439 (0x441f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 4 00:30:10 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=71387A83D1D9E08A948C27A021216A30668553A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c3:0a:50:22:36:8f:ea:4c:04:33:ba:4c:9b:
d2:1b:4a:08:ad:44:a3:d1:7c:54:fd:9b:f4:01:95:
ca:56:6a:e5:18:0a:c8:32:d4:a7:da:f1:69:0b:3a:
ed:d0:fa:fc:83:3b:a9:24:f3:65:a7:a1:42:a7:d6:
93:18:0e:52:3f:ed:e3:b8:72:a8:ac:da:3d:3f:b3:
84:28:c8:50:7f:05:32:47:33:70:fc:21:20:99:e2:
8a:e2:3f:62:db:c6:7f:90:4b:1f:3e:51:24:de:97:
d2:90:ef:7e:4e:e6:47:3f:6e:a4:fd:f4:53:40:e4:
01:0b:55:82:c6:21:f6:92:79:73:33:90:66:5e:5a:
6b:b6:47:3a:8c:f5:fb:ad:d0:54:17:2b:dd:0c:48:
29:48:5a:e5:f0:1b:3b:dd:43:1e:b6:8e:3d:0d:87:
b4:79:25:9f:b4:3e:d7:c2:4e:49:f6:17:64:22:d1:
ec:c4:b0:cf:2e:0a:63:35:2a:04:1e:fc:03:39:43:
94:93:36:81:32:01:9a:fd:59:ee:40:0b:68:c5:4b:
e9:fb:5b:e1:f6:c4:0f:58:0e:72:fb:ce:79:9a:66:
9e:9c:67:16:c6:7c:c3:85:05:ec:08:ec:22:68:6f:
7e:47:85:1e:9c:01:44:43:0a:2a:73:4f:12:88:18:
11:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:38:7A:83:D1:D9:E0:8A:94:8C:27:A0:21:21:6A:30:66:85:53:A2
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/cTh6g9HZ4IqUjCegISFqMGaFU6I.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:d9:8a:21:ef:73:96:14:c4:5d:e4:5f:ad:f8:de:92:ea:ae:
c5:99:d7:41:ee:c7:8e:5c:3d:33:08:0f:72:3f:b0:c7:a3:54:
db:5a:b7:4b:6c:1b:3f:e8:e1:e4:b4:bd:ff:24:74:c4:bb:30:
d1:6d:c9:a2:64:35:30:c9:ea:9f:cd:3f:44:da:2f:b2:f7:64:
05:d2:7a:0d:a1:4e:e4:7b:6a:f4:a0:30:c4:2d:2d:0d:5a:ca:
e1:b1:04:dd:b2:40:f5:1e:93:bc:4e:10:f1:3f:0a:ec:26:a2:
8b:c8:bd:4c:5e:fb:a1:99:d7:79:d6:bb:f1:51:55:64:b6:62:
8b:0a:a6:b6:1e:fb:0c:a7:04:01:66:53:67:27:e9:aa:19:16:
6c:1c:42:65:0e:bd:3e:d6:33:f5:b7:36:12:7b:22:5d:fc:41:
e7:19:c1:90:e1:f2:12:21:bc:dd:25:78:40:20:4e:cc:a6:42:
de:0a:4b:34:3f:a2:91:0d:ec:17:61:3c:51:a2:e5:16:a7:db:
e3:43:ad:b1:53:0e:c2:18:b5:79:c1:b8:59:0b:5d:f2:df:7f:
20:12:f4:8c:aa:74:5c:97:52:7d:bc:c7:d0:70:57:35:41:5f:
10:9c:8b:a9:37:50:ba:ea:3f:fd:35:ee:bf:77:aa:be:79:71:
64:b0:a1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org