Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/gZEIQ5nvodxmKEYHCFNwBZRbCho.roa
File: gZEIQ5nvodxmKEYHCFNwBZRbCho.roa (raw, json)
Hash identifier: PoS5fDlGknnFxjgfyd+K5/ZoLjK4UfP3x/32aj8AhHM=
Subject key identifier: 81:91:08:43:99:EF:A1:DC:66:28:46:07:08:53:70:05:94:5B:0A:1A
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 449A
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/gZEIQ5nvodxmKEYHCFNwBZRbCho.roa
Signing time: Sun 13 Mar 2022 00:30:09 +0000
ROA not before: Sun 13 Mar 2022 00:30:09 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17562 (0x449a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 13 00:30:09 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=8191084399EFA1DC6628460708537005945B0A1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ab:2b:5a:80:78:17:cc:3c:2c:58:71:4f:59:
7d:b3:71:52:9e:6e:43:47:a4:d8:77:ad:33:75:e7:
04:7d:f3:b2:5a:21:44:e3:1d:b5:53:c2:54:f2:50:
b2:d1:7f:69:36:0d:0b:a1:12:7a:96:5d:19:e8:58:
56:66:46:37:fa:6c:bd:67:53:ca:3b:ea:74:7a:60:
e9:c3:ff:0c:0d:97:fb:4c:22:e5:66:6f:7a:58:c1:
dd:01:d2:41:28:5e:50:b6:1e:f3:ed:b2:8c:04:cc:
57:65:9f:da:ff:15:e3:9b:94:c6:d1:8b:77:e4:23:
c2:c4:6c:18:cd:66:4a:29:62:a5:51:d2:46:60:69:
75:9b:8a:ea:12:03:ed:d4:ff:34:1b:6c:c3:80:f9:
12:7f:d9:12:74:bc:85:0d:61:10:c7:36:b0:9d:0a:
94:22:9d:12:c2:13:f5:f9:e8:2a:6d:cf:63:ce:70:
7e:74:bf:87:30:9f:ec:55:88:dd:ea:61:d4:78:89:
f2:eb:15:25:7a:43:55:2a:ab:8d:77:fe:f9:fd:e9:
c2:8f:e6:30:a4:de:88:0f:09:0a:78:df:a9:b2:9d:
a0:63:22:3c:56:8d:94:47:e9:38:fe:3b:33:73:27:
eb:31:86:9b:44:ea:52:a0:a1:1e:a7:7a:f4:75:40:
da:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:91:08:43:99:EF:A1:DC:66:28:46:07:08:53:70:05:94:5B:0A:1A
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/gZEIQ5nvodxmKEYHCFNwBZRbCho.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
af:dd:38:a6:50:2a:c8:3a:60:3f:dd:a0:29:d7:ba:4f:6f:67:
f5:66:41:66:81:61:79:17:68:a0:41:fb:99:66:e6:5e:51:38:
85:f6:4d:62:4b:0b:c5:ad:c3:70:c8:96:8e:46:ec:14:2b:ce:
63:8d:bf:f4:f0:f7:eb:db:4e:91:f2:f0:87:a3:d8:8b:b7:3b:
c4:c5:8d:b3:3c:14:08:bc:ab:9e:1b:d9:9d:94:37:86:88:36:
5b:71:5a:e9:43:9e:4c:2b:f2:fa:91:96:ae:41:b5:e3:c3:d8:
58:bc:bb:6c:5f:8c:28:00:a6:a7:0b:01:f0:7b:78:06:67:fd:
a0:73:23:c1:61:f7:70:98:d6:51:51:e1:86:a6:b0:4d:cd:49:
17:29:7d:1f:af:57:c8:86:20:1e:26:ab:ca:1d:f0:c1:a9:26:
cd:81:54:38:c5:7c:3b:8d:65:8f:ee:19:3a:cf:43:f9:ab:53:
fc:08:05:8b:7a:d7:b2:1f:52:0e:e5:37:7f:e8:54:1e:e0:45:
75:40:ab:bc:5d:3b:e5:55:15:eb:5d:d7:12:f5:d0:e3:02:7e:
4e:4d:99:21:c6:11:96:d7:bf:27:9a:d6:c0:c9:f6:a3:e4:51:
a7:a7:29:79:2d:ad:32:45:56:2f:85:b7:b3:3a:84:19:7c:4a:
80:ee:95:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org