Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/xYnX2ssqyIC0V8YhUkf-5PgMR5k.roa
File: xYnX2ssqyIC0V8YhUkf-5PgMR5k.roa (raw, json)
Hash identifier: vP13ew1KmN7sNz3JqSlK5VMBT/A5IFoOjzvvqfNHRaw=
Subject key identifier: C5:89:D7:DA:CB:2A:C8:80:B4:57:C6:21:52:47:FE:E4:F8:0C:47:99
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 455F
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/xYnX2ssqyIC0V8YhUkf-5PgMR5k.roa
Signing time: Sun 27 Mar 2022 00:30:09 +0000
ROA not before: Sun 27 Mar 2022 00:30:09 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17759 (0x455f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 27 00:30:09 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=C589D7DACB2AC880B457C6215247FEE4F80C4799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b9:79:4d:54:e5:8f:13:cc:5f:d6:0a:e9:74:
90:1b:33:29:eb:b6:60:28:25:95:ea:f2:86:f5:ef:
85:1f:1d:7b:82:06:80:d0:c2:5c:f7:f6:1a:df:4d:
3b:61:d3:4c:80:0b:b6:a2:d9:1e:2a:69:70:10:7e:
da:4e:26:40:07:d4:d8:a3:43:86:2e:13:83:23:a6:
21:fc:20:50:96:1c:8c:e5:ec:99:be:12:53:2d:17:
bd:d9:6a:23:7e:de:a1:c9:7a:86:af:1d:52:b9:22:
b0:b7:fc:9e:58:f7:5d:bb:aa:dc:f8:28:9c:e0:f7:
8c:62:ee:f9:e8:1d:4c:4a:7f:30:e7:6c:0d:6a:6e:
76:95:57:ef:a4:f4:79:26:8c:f6:52:4b:31:4f:ae:
5f:d4:3b:72:a2:d7:a4:4b:47:c5:29:11:a3:93:90:
59:58:9d:18:a4:d0:13:cd:5d:27:1f:95:e8:7e:de:
e3:e3:4d:1e:08:de:66:64:ae:92:66:cf:2c:04:2d:
f6:f2:6d:f1:62:bd:2e:a2:52:b9:55:96:f2:a3:01:
86:7c:4e:27:c4:21:70:86:f5:db:e1:60:bc:76:4e:
c7:64:52:5b:97:42:f5:4e:6d:ea:a0:ed:ff:a6:5a:
d2:30:8d:5e:d2:f5:d6:9c:14:6b:c6:42:01:19:fd:
ba:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:89:D7:DA:CB:2A:C8:80:B4:57:C6:21:52:47:FE:E4:F8:0C:47:99
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/xYnX2ssqyIC0V8YhUkf-5PgMR5k.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
73:5b:59:a6:57:75:e3:12:fe:76:69:5b:aa:e2:ec:d1:1c:ca:
56:15:ad:26:3b:a6:ce:24:90:71:44:b7:6c:e1:98:d4:04:39:
a8:7c:55:6d:ad:17:46:95:60:23:13:9e:cb:c9:c3:fb:ef:f5:
62:78:df:85:d1:01:b3:07:7d:65:d5:c8:4f:e5:da:3b:29:08:
be:96:28:cd:4a:6a:14:5c:db:c5:8b:e9:23:5d:b5:74:8b:33:
9f:c0:9e:59:51:b9:55:da:6c:cb:df:3d:fd:6f:b2:0d:45:17:
a7:f0:13:f5:c2:6c:04:10:0e:88:03:62:3d:3d:2b:db:d1:05:
79:6f:d0:b8:72:5d:d4:e1:fc:db:0c:34:c4:4c:b6:a0:75:5f:
ec:49:82:e8:f1:3e:c9:f3:38:2d:83:ff:05:03:ab:2c:2b:12:
ae:03:1f:7e:67:a2:2b:70:8a:c0:00:2a:48:82:d3:3e:77:5a:
0a:75:f6:b6:b7:17:e2:1c:39:92:77:2b:53:b8:f6:77:3d:7d:
26:ee:a8:7b:06:3c:eb:6d:f2:16:83:bf:8b:8d:b0:a0:60:86:
84:2c:de:b7:38:f3:a0:e3:b6:19:9a:3d:97:63:10:26:f9:d5:
05:ee:c4:ef:be:14:d9:bf:27:d7:52:58:44:12:9c:2d:8e:b5:
fd:32:39:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org