Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/uZvRrw0lzyw0bdZ0wsjAgGPPfAY.roa
File: uZvRrw0lzyw0bdZ0wsjAgGPPfAY.roa (raw, json)
Hash identifier: YDtH9+Y+tL/Q+pMP03VhWX9TKJnaOeQ+n4cd55cZyNg=
Subject key identifier: B9:9B:D1:AF:0D:25:CF:2C:34:6D:D6:74:C2:C8:C0:80:63:CF:7C:06
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4608
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/uZvRrw0lzyw0bdZ0wsjAgGPPfAY.roa
Signing time: Fri 08 Apr 2022 00:30:10 +0000
ROA not before: Fri 08 Apr 2022 00:30:10 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17928 (0x4608)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 8 00:30:10 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=B99BD1AF0D25CF2C346DD674C2C8C08063CF7C06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5d:f3:40:e4:c1:69:27:48:f4:37:f6:c1:f0:
5d:cf:63:f9:b8:d9:10:c1:43:99:4c:d8:e2:bc:45:
eb:7d:de:c8:4f:c1:03:b7:98:24:6d:ab:44:1c:0f:
31:de:a6:d1:2b:47:32:f4:1c:b6:e7:8a:f0:21:94:
f3:5f:92:fd:a9:e4:93:e7:8e:2c:51:39:cd:96:89:
02:45:2b:28:0c:9d:13:e4:33:67:65:f0:e8:89:da:
75:43:bf:f1:83:f3:3b:34:4d:a1:2e:48:c5:c4:84:
06:f5:ff:3e:d8:f1:c3:ea:37:1c:10:55:d0:f7:8e:
8a:fe:25:72:47:96:2b:67:0b:27:0c:f4:b8:c6:5c:
f2:68:e1:b6:a4:f5:fe:44:11:42:b7:0d:58:0e:d5:
99:9b:32:9f:d9:04:34:2c:7f:35:80:3d:16:04:03:
19:57:92:c8:12:0f:30:54:4e:f2:66:c7:e2:a6:d1:
26:c9:98:cd:5d:78:dc:80:1d:35:9a:c3:e8:a7:56:
a9:0e:60:78:f9:6c:b8:e0:1a:84:0b:1f:29:b8:c7:
0e:4b:53:8c:c6:21:75:b0:38:6f:82:6a:1d:e2:79:
68:dd:2c:46:33:46:84:a5:0d:9b:76:73:a0:29:c4:
6c:a4:9c:5f:fb:62:83:09:05:ab:bb:d6:dc:85:3d:
0b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:9B:D1:AF:0D:25:CF:2C:34:6D:D6:74:C2:C8:C0:80:63:CF:7C:06
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/uZvRrw0lzyw0bdZ0wsjAgGPPfAY.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
53:0a:6b:7f:72:34:14:84:44:c3:cb:05:ec:fa:52:fc:c7:e3:
9a:cb:f4:ab:78:45:5c:e6:67:9d:55:cd:b3:11:8e:97:9d:c6:
ff:d8:fa:b5:18:6a:51:45:da:79:2b:28:a8:2b:78:53:fb:86:
ac:17:7b:8a:a6:34:ae:6a:4f:43:b0:dd:e8:3c:f8:07:bc:b0:
48:8c:fb:b4:d1:6a:1c:33:a0:74:13:44:f1:56:25:95:e3:91:
6e:ba:4e:a3:77:57:b4:d9:54:62:04:92:5f:80:9b:1e:d7:11:
c9:98:ca:91:42:ae:e7:f7:24:38:88:ad:83:9b:51:39:fa:ac:
4c:bc:07:4d:38:6c:5a:74:24:17:48:8e:04:70:dc:bf:3b:60:
ad:91:e2:5e:68:14:10:e2:89:60:0c:78:4e:85:6d:45:0a:f2:
47:2a:15:22:17:89:39:aa:b4:03:76:62:81:42:51:89:5a:b4:
79:7a:cf:a7:f4:b4:c4:9b:28:ca:0b:87:93:58:52:bb:74:62:
50:0f:4e:a2:76:25:3b:8b:0e:d7:08:39:46:62:2e:cd:fa:a3:
d0:e6:90:df:e6:25:a2:a5:75:6c:5b:66:e8:b7:44:d0:34:a7:
df:5c:4d:e9:65:fb:6b:8d:fe:42:b8:65:21:d3:a0:d8:c5:3c:
c2:be:06:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org