Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/w0BftRjEznZHqBPgicwK3Itu5cA.roa
File: w0BftRjEznZHqBPgicwK3Itu5cA.roa (raw, json)
Hash identifier: aIYQ6TXOkNoaAyXdirECxja2TIGkjlmRIKkbJmhDCOU=
Subject key identifier: C3:40:5F:B5:18:C4:CE:76:47:A8:13:E0:89:CC:0A:DC:8B:6E:E5:C0
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 466A
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/w0BftRjEznZHqBPgicwK3Itu5cA.roa
Signing time: Fri 15 Apr 2022 00:30:09 +0000
ROA not before: Fri 15 Apr 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18026 (0x466a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 15 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=C3405FB518C4CE7647A813E089CC0ADC8B6EE5C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:df:b4:3e:80:80:92:e6:5a:33:a8:f5:db:49:
0f:e2:c4:4c:9e:14:63:c4:75:20:a5:11:15:4c:00:
1b:f0:35:69:09:e7:7e:2d:34:73:c5:cb:40:94:88:
9c:78:ea:3a:72:39:f9:bf:0c:7a:c4:03:e0:73:25:
0f:82:a9:3d:b3:7c:87:da:09:30:e2:05:32:c1:64:
d5:6b:d7:54:0c:37:39:2a:71:1a:12:ba:79:8a:34:
9c:a7:7a:6c:cc:3f:00:98:77:d1:cc:02:9b:94:13:
71:20:4d:a5:6f:b9:c9:f3:42:f9:03:5a:d7:95:f9:
20:7c:42:3d:f6:ae:e1:f4:e2:b5:a8:4c:72:66:f5:
56:f3:7c:04:77:24:c8:53:c0:d7:0f:59:dd:74:f1:
f5:fa:99:8c:50:be:e7:15:85:68:2e:69:d8:cb:1f:
50:6a:72:a4:28:79:67:60:eb:3b:0c:db:04:95:f3:
91:07:70:7d:95:38:ab:88:96:f0:9f:d4:7a:6a:82:
c4:2d:77:8e:d4:08:c5:64:26:2f:13:bf:2b:c5:13:
b9:1e:b4:1c:e9:1a:2b:63:bd:c0:31:a5:6e:d4:af:
66:cf:0e:54:3e:d2:47:e9:7b:01:a9:e2:56:db:3f:
e9:20:bd:71:b2:d4:a2:69:a3:bf:5e:c4:42:48:b3:
16:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:40:5F:B5:18:C4:CE:76:47:A8:13:E0:89:CC:0A:DC:8B:6E:E5:C0
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/w0BftRjEznZHqBPgicwK3Itu5cA.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
03:7d:14:4e:7f:aa:78:81:d2:59:82:7b:c4:22:36:91:40:96:
b2:3b:25:a8:3f:b4:7e:44:88:3a:01:e8:b3:ba:b8:f5:8a:c8:
e0:bc:3b:49:c0:ce:e7:ef:19:98:e4:39:57:67:f1:81:ab:d2:
16:0f:74:be:b6:5d:1f:e2:6b:ad:52:a6:be:d2:03:f0:53:56:
ad:8f:22:b5:ea:3d:90:ca:09:dd:14:3e:ac:ea:df:e7:43:7c:
00:4b:ab:2c:bb:b7:73:b7:f5:97:0b:b9:d3:aa:0a:ac:11:45:
d3:4f:45:f0:29:3c:fc:ec:74:c6:47:1c:27:f6:a1:24:c6:b5:
ed:4f:7f:10:e4:c0:4e:c9:f6:f0:0b:a1:0d:b9:a7:c5:a5:fe:
ab:9e:75:14:f1:47:59:e4:21:43:c3:2e:38:f8:f9:3b:b8:10:
7e:11:b9:32:10:7c:a0:27:77:42:95:4e:06:fb:1a:99:26:c3:
e2:a6:cc:fd:da:37:00:29:30:92:6d:cf:94:00:f4:f1:00:e0:
84:3d:73:b5:7b:89:8e:8f:ed:34:7f:85:a8:d8:11:cb:ae:4d:
04:f4:18:c4:86:fb:5c:09:78:dd:33:b2:5c:85:20:6f:0d:24:
a9:c9:c8:1b:d6:1d:fd:2d:e4:b4:2c:c1:91:45:24:c3:42:0a:
4d:7e:e7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org