Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/oP_aZZgYb5mao3qEd4yrV1H9Jgo.roa
File: oP_aZZgYb5mao3qEd4yrV1H9Jgo.roa (raw, json)
Hash identifier: xGCnJ+hqScSqQz4qbE3cMem8gpCCx0rGSZ09SLp8g2w=
Subject key identifier: A0:FF:DA:65:98:18:6F:99:9A:A3:7A:84:77:8C:AB:57:51:FD:26:0A
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4712
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/oP_aZZgYb5mao3qEd4yrV1H9Jgo.roa
Signing time: Wed 27 Apr 2022 00:30:10 +0000
ROA not before: Wed 27 Apr 2022 00:30:10 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18194 (0x4712)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 27 00:30:10 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=A0FFDA6598186F999AA37A84778CAB5751FD260A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:59:ec:24:6a:8a:d5:c9:18:98:a9:21:ca:ed:
b8:39:8e:89:56:fa:29:1b:0e:cc:fa:fb:a2:b8:87:
12:59:95:05:cf:0b:2b:63:8f:59:84:66:55:6c:48:
b6:47:8b:1c:04:a9:37:a2:01:36:70:4f:5c:31:f1:
b3:7f:b2:e4:91:b3:07:b1:96:25:09:a8:f6:68:61:
95:a7:da:d4:b4:fb:72:38:1e:75:41:f0:68:84:41:
58:73:58:9d:6c:4d:01:ef:dc:4a:10:89:d5:63:5d:
56:43:fc:b2:7e:a8:2e:45:12:8b:1e:9c:1e:52:5d:
c7:aa:4d:a0:c0:16:ab:17:6d:0a:98:95:48:51:da:
aa:a3:9e:fc:48:17:59:f0:47:94:b9:97:02:3e:60:
27:93:b0:a0:32:2e:a1:f9:17:20:e7:9f:13:91:63:
29:81:6e:d1:98:a0:be:59:5b:04:16:f2:2b:74:4b:
7f:a7:fe:f6:6b:ad:e5:c9:09:0b:15:ee:ee:55:6b:
44:df:7a:3c:8e:b9:06:13:0a:6d:4d:90:0c:09:63:
24:91:1f:95:8b:c6:03:50:a6:b7:ee:a5:bd:a4:dd:
45:33:3b:61:6a:08:38:55:aa:fb:10:fd:7d:db:48:
78:82:4b:cc:83:6b:77:af:bc:38:30:d0:43:20:bc:
f9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FF:DA:65:98:18:6F:99:9A:A3:7A:84:77:8C:AB:57:51:FD:26:0A
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/oP_aZZgYb5mao3qEd4yrV1H9Jgo.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
72:32:3a:5c:78:a8:c7:ae:de:27:ec:c6:62:e0:7a:35:42:fd:
f7:39:1f:8b:32:2b:45:94:72:b3:5a:72:03:b6:d7:43:13:28:
c6:5b:30:8a:2e:95:90:a4:b3:b0:7b:21:1d:c3:7c:4c:2c:33:
96:1a:02:e0:ec:a7:f9:d6:e8:5d:f4:d7:f4:23:b7:8b:51:62:
61:41:4a:99:a9:55:6e:02:5d:0c:c4:22:dd:22:95:a0:b3:c8:
84:68:7a:98:3c:12:4f:57:79:d0:38:ee:3b:56:59:2c:4f:f4:
97:b6:87:6e:ee:32:92:8c:fa:92:24:46:70:7f:40:31:d0:f2:
60:be:29:58:7b:df:82:cf:dd:24:d9:83:06:3c:90:41:d8:30:
f1:7b:05:90:9c:d4:e6:21:77:e7:ed:0c:93:48:8d:00:dc:46:
be:17:89:37:6d:96:6f:b5:3c:91:ff:56:93:83:4b:08:78:70:
5c:0b:e1:af:c4:32:57:e4:07:c9:55:ac:81:eb:09:07:95:9d:
87:cb:a3:8b:46:73:5a:4b:d9:62:3c:fe:25:ba:b2:bc:f4:07:
7f:2c:ab:c2:92:e0:03:8e:fe:67:5d:2c:7c:26:58:fa:b8:0a:
a6:7c:2b:b5:65:eb:d7:a0:ba:04:fa:b0:64:19:4d:3a:d4:d2:
a7:bb:d2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org