Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/hyqhbWQWX5TMYR5MKvq_uKJzJ14.roa
File: hyqhbWQWX5TMYR5MKvq_uKJzJ14.roa (raw, json)
Hash identifier: nUBz07d9CQcRatR3HATuz/hQDycBegf/olXBR6oPEnE=
Subject key identifier: 87:2A:A1:6D:64:16:5F:94:CC:61:1E:4C:2A:FA:BF:B8:A2:73:27:5E
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 46D6
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/hyqhbWQWX5TMYR5MKvq_uKJzJ14.roa
Signing time: Sat 23 Apr 2022 00:30:07 +0000
ROA not before: Sat 23 Apr 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18134 (0x46d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 23 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=872AA16D64165F94CC611E4C2AFABFB8A273275E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b8:a8:6c:a3:18:47:5f:54:df:a6:d5:63:dc:
60:bd:f1:eb:49:d4:ef:91:2f:7d:50:82:3f:05:34:
12:ce:80:b5:70:de:15:51:e6:08:3d:ed:21:29:23:
d7:cd:e0:4c:29:04:e5:b1:d8:2f:ff:cb:20:48:3b:
b6:e6:f6:3f:42:5a:e7:ca:8e:ca:3c:18:39:45:62:
bc:0f:80:61:ea:2e:21:0d:3b:a5:e2:64:ed:ed:b5:
c2:c6:bf:22:c6:6d:cc:c2:83:9d:17:43:3c:00:58:
64:24:77:39:f7:b6:c1:56:52:f5:0b:7d:81:b7:b5:
fa:3d:1e:b5:5d:5d:bf:4e:08:b8:00:a5:cb:52:40:
ae:2b:73:fe:ca:30:b5:b2:0a:19:02:f6:5c:2d:3b:
9c:55:5c:de:87:ba:79:0c:f7:53:53:70:dd:13:1f:
31:de:ea:0d:87:cf:74:14:f1:00:04:fc:df:48:59:
47:d7:19:55:7d:c2:01:d1:59:45:97:cd:da:08:ca:
8e:60:f2:ce:76:2e:ad:84:c3:2a:6b:ec:c8:f0:87:
f3:fa:56:31:c2:72:6e:db:a4:dc:9e:d0:c4:df:5e:
65:77:52:79:18:12:02:4c:31:e3:c8:b5:9c:3f:5a:
6c:3a:aa:06:b9:04:8c:63:3e:e6:bb:92:d8:ab:38:
5b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:2A:A1:6D:64:16:5F:94:CC:61:1E:4C:2A:FA:BF:B8:A2:73:27:5E
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/hyqhbWQWX5TMYR5MKvq_uKJzJ14.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:cf:6e:ef:7a:6b:84:1f:c1:8e:84:f1:c5:dc:b5:9c:5e:fa:
fb:b0:cc:9d:00:89:43:56:a3:13:35:b5:00:84:7b:da:d5:7e:
94:c9:be:aa:89:50:b3:d4:33:ce:e3:e1:b4:ca:4a:d0:69:4b:
a2:9b:97:61:c6:c9:0f:0f:40:0a:24:e3:eb:84:ba:8d:c1:35:
99:b9:8f:2c:cc:69:46:e6:7f:22:51:1b:6f:b2:7b:38:2c:0c:
8c:b6:eb:b8:85:e5:80:a6:f6:35:b0:80:e6:f3:19:f0:84:47:
3e:05:a5:40:20:58:bb:48:ba:e4:f6:5c:cd:dc:dd:f6:5f:b2:
4b:6d:64:bd:62:38:9f:d7:19:af:29:eb:4b:5c:18:4f:80:79:
84:3a:8a:07:19:68:e9:41:2a:e7:eb:98:9e:f1:02:e8:3c:6e:
9f:c1:58:58:ac:d1:3d:ce:07:1b:32:3a:31:45:7d:1c:e6:07:
e5:95:7c:52:75:c4:cd:10:59:c9:0f:d2:08:3b:54:f9:c4:29:
0d:2b:7f:95:c9:7b:98:4c:9e:9f:3a:2e:2f:6a:5c:8d:71:6f:
e6:3a:f3:3f:7c:a3:9a:b8:06:85:f3:df:9f:5b:11:4e:51:15:
57:d5:d7:19:5d:d8:3b:26:a6:3d:23:7a:ba:50:53:02:77:a5:
26:da:d6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org