Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/ccti-1cD9TyfmY_ObRsRH6DfDNs.roa
File: ccti-1cD9TyfmY_ObRsRH6DfDNs.roa (raw, json)
Hash identifier: 4zUfQ0Eyn2ngvsXsu+ZAYwBZiwyuMAZQ5mJ+Lzf6sYE=
Subject key identifier: 71:CB:62:FB:57:03:F5:3C:9F:99:8F:CE:6D:1B:11:1F:A0:DF:0C:DB
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4931
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ccti-1cD9TyfmY_ObRsRH6DfDNs.roa
Signing time: Fri 03 Jun 2022 00:30:09 +0000
ROA not before: Fri 03 Jun 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18737 (0x4931)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 3 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=71CB62FB5703F53C9F998FCE6D1B111FA0DF0CDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:87:12:b5:f8:0c:6e:29:88:36:93:da:d3:d4:
eb:8d:69:51:80:fc:fc:28:b4:ba:a8:4d:91:76:bb:
a5:97:ce:43:59:d0:08:13:69:d6:3c:59:8c:be:29:
60:ce:8f:d4:81:fa:e6:b9:f4:f7:6b:80:19:e7:72:
4c:72:95:18:57:a9:f2:0d:74:d9:fd:55:ff:82:90:
77:c6:37:da:46:0c:1f:c8:2f:ce:bf:ea:cb:24:97:
6f:df:7d:b0:23:0f:4a:03:a4:f7:a8:9e:86:3a:25:
1a:a2:90:f9:51:a4:7f:d8:dc:a0:21:5c:fc:6c:d9:
c7:07:d0:bc:70:4b:b4:fd:97:35:7d:51:fa:c8:c7:
14:b7:fc:06:77:60:bb:59:68:38:e9:bf:ac:7b:51:
74:a6:d0:4b:ab:82:76:7c:fc:86:b9:60:8f:4a:a3:
df:f4:06:82:f6:d7:b8:67:91:02:0b:d5:6d:e4:4b:
f2:b7:e4:40:de:ed:09:45:a1:41:fa:66:ea:2c:47:
c1:27:75:20:c8:22:86:a4:16:65:07:9d:09:d0:44:
4c:4c:af:f3:a1:60:db:4c:9a:75:f4:75:f8:17:de:
fa:40:3f:c7:81:c2:b9:23:40:b4:0b:60:8f:2d:20:
e1:14:a9:0a:28:9f:30:97:79:92:11:6a:6c:6c:f7:
66:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CB:62:FB:57:03:F5:3C:9F:99:8F:CE:6D:1B:11:1F:A0:DF:0C:DB
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ccti-1cD9TyfmY_ObRsRH6DfDNs.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:45:3b:41:37:48:20:95:16:46:9a:d8:4b:d3:bd:9d:fa:05:
e3:d2:ec:18:b3:af:e2:42:ee:7d:49:e6:08:d2:59:5c:dd:d7:
96:bf:cf:1b:23:fa:16:0d:17:5d:46:7e:4d:70:8d:14:a9:cf:
8f:ca:1f:23:51:b3:f4:ed:f9:1e:8e:f2:54:de:6f:ed:dd:79:
04:ad:38:5d:1c:b1:af:6c:c7:4c:f3:8b:f8:52:82:b3:c0:9f:
16:de:92:07:30:74:61:78:27:e6:20:25:41:76:49:f8:2c:e5:
f8:92:0f:48:89:e7:64:a0:14:d4:b8:07:b4:af:f7:d5:bb:71:
cd:95:98:1d:a8:1e:73:81:f5:d7:2a:fa:c8:84:db:a9:b7:d8:
71:cc:4b:ae:40:b3:1d:40:fd:2c:bd:1a:66:5d:35:95:ec:b5:
ab:76:6f:3a:ca:ba:d9:f6:00:01:0e:89:02:ab:56:f9:37:1c:
c5:59:cb:30:07:7e:40:51:12:1c:6d:a1:1e:06:9b:46:a0:c0:
a4:06:67:cc:17:fe:28:dc:d7:8d:90:43:3b:80:32:fa:13:30:
60:e5:95:1b:de:23:99:43:92:9b:4c:de:77:a4:3e:98:c1:69:
84:42:0f:42:2e:f8:f5:5a:ac:d0:9e:67:06:3f:4d:87:d8:17:
ae:c8:a7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org