Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/3y3bCeo0NGlz0fZyQhgNPERN2gM.roa
File: 3y3bCeo0NGlz0fZyQhgNPERN2gM.roa (raw, json)
Hash identifier: QLaxcG1wk4iZ6gWMdxpJdSwycdORfM19gMKUKDEF8ew=
Subject key identifier: DF:2D:DB:09:EA:34:34:69:73:D1:F6:72:42:18:0D:3C:44:4D:DA:03
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 47F2
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/3y3bCeo0NGlz0fZyQhgNPERN2gM.roa
Signing time: Fri 13 May 2022 00:30:08 +0000
ROA not before: Fri 13 May 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18418 (0x47f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 13 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=DF2DDB09EA34346973D1F67242180D3C444DDA03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c0:77:4f:c2:9c:60:1b:fb:39:7a:cc:5a:d6:
48:34:14:30:ef:ee:d6:00:f6:41:63:9c:71:b6:af:
1a:85:52:60:64:80:7a:48:ba:b4:d2:d2:8b:a9:d5:
06:cc:37:bd:bc:35:d8:b8:d9:25:d1:23:0f:49:43:
48:f0:8f:96:f6:1d:e5:ea:00:4f:c0:81:f0:bb:08:
68:b4:c9:e4:3e:df:b5:6f:30:e6:5c:a4:30:e3:3e:
b4:75:4a:3a:be:ad:0d:0b:af:de:31:02:6a:fc:6f:
c0:03:28:00:f9:05:ac:20:b1:34:27:bc:a7:4f:07:
f7:51:a5:c6:79:c0:f1:a1:00:1f:4a:c3:4d:0b:35:
e2:64:a0:f4:a0:5e:43:32:46:f6:d2:8c:ca:ac:5a:
73:e9:d0:bb:c4:b6:15:1c:c8:d4:92:87:8d:97:fe:
15:8a:74:53:49:67:11:90:f9:a8:54:84:83:92:83:
60:0e:a9:18:77:d5:00:1d:a9:27:39:74:67:5a:f3:
7a:98:f9:b3:d8:48:3e:67:98:db:42:af:e2:c7:65:
68:59:3d:0a:69:d0:16:f6:4a:41:2a:2c:1b:32:7e:
0b:0d:56:e2:61:9a:77:50:df:e7:95:76:8f:b5:10:
4b:56:1f:f1:3d:05:29:d4:fd:45:53:7f:43:2c:f1:
41:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2D:DB:09:EA:34:34:69:73:D1:F6:72:42:18:0D:3C:44:4D:DA:03
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/3y3bCeo0NGlz0fZyQhgNPERN2gM.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:eb:6b:a2:34:7b:5e:09:55:36:25:cc:4b:5c:98:3a:bf:f5:
32:49:1a:45:e1:06:7d:5f:a6:e8:a7:17:2b:89:19:20:cf:6f:
b8:e4:dc:0e:0c:c5:3d:de:24:36:ee:a4:f2:5a:43:00:c1:60:
e5:16:ac:0e:78:68:49:21:8f:c8:54:71:14:c4:d1:75:dd:35:
4c:87:e6:4f:94:6f:a9:55:87:2b:cc:4a:d4:97:fb:18:61:08:
b6:b2:dd:cd:73:88:c3:92:e3:dd:9e:15:2e:89:32:d5:7a:9f:
8f:46:21:e6:93:ce:7c:e6:1d:d8:b2:98:39:b0:55:19:d4:a1:
47:17:0a:b6:4c:eb:8a:29:2b:db:1a:44:46:32:47:c2:cd:6f:
c3:70:15:74:54:ca:f2:cf:96:98:56:f9:ed:37:83:96:a1:6b:
02:c7:c9:38:0e:af:63:2c:03:e7:30:b7:b2:c6:40:a7:15:d3:
a9:46:b8:c0:84:c7:83:21:72:29:b5:7c:8a:8c:0b:ef:34:54:
6d:ba:90:9d:c1:2d:5a:33:b4:16:4b:9d:ca:a9:77:71:35:7f:
9b:75:4f:0b:40:81:33:bd:b4:43:be:83:dd:c4:a3:4f:c4:fe:
4d:e0:aa:b7:a3:00:b4:4d:1a:03:3d:69:d0:d4:02:8b:46:1c:
08:c1:bc:87
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICR/IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA1MTMw
MDMwMDhaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKERGMkREQjA5RUEzNDM0
Njk3M0QxRjY3MjQyMTgwRDNDNDQ0RERBMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDpwHdPwpxgG/s5esxa1kg0FDDv7tYA9kFjnHG2rxqFUmBkgHpI
urTS0oup1QbMN728Ndi42SXRIw9JQ0jwj5b2HeXqAE/AgfC7CGi0yeQ+37VvMOZc
pDDjPrR1Sjq+rQ0Lr94xAmr8b8ADKAD5BawgsTQnvKdPB/dRpcZ5wPGhAB9Kw00L
NeJkoPSgXkMyRvbSjMqsWnPp0LvEthUcyNSSh42X/hWKdFNJZxGQ+ahUhIOSg2AO
qRh31QAdqSc5dGda83qY+bPYSD5nmNtCr+LHZWhZPQpp0Bb2SkEqLBsyfgsNVuJh
mndQ3+eVdo+1EEtWH/E9BSnU/UVTf0Ms8UEtAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU3y3bCeo0NGlz0fZyQhgNPERN2gMwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS8zeTNiQ2VvME5HbHowZlp5UWhnTlBFUk4yZ00ucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL0wDQYJKoZIhvcNAQELBQADggEB
AArra6I0e14JVTYlzEtcmDq/9TJJGkXhBn1fpuinFyuJGSDPb7jk3A4MxT3eJDbu
pPJaQwDBYOUWrA54aEkhj8hUcRTE0XXdNUyH5k+Ub6lVhyvMStSX+xhhCLay3c1z
iMOS492eFS6JMtV6n49GIeaTznzmHdiymDmwVRnUoUcXCrZM64opK9saREYyR8LN
b8NwFXRUyvLPlphW+e03g5ahawLHyTgOr2MsA+cwt7LGQKcV06lGuMCEx4Mhcim1
fIqMC+80VG26kJ3BLVoztBZLncqpd3E1f5t1TwtAgTO9tEO+g93Eo0/E/k3gqrej
ALRNGgM9adDUAotGHAjBvIc=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org