Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/5Y1VLJPnbZULEWrjPmNIzDuKFEc.roa
File: 5Y1VLJPnbZULEWrjPmNIzDuKFEc.roa (raw, json)
Hash identifier: OHd4yHCbPPRXl7nO8y18dr9iC1euPPBCYj/jQCjEHK8=
Subject key identifier: E5:8D:55:2C:93:E7:6D:95:0B:11:6A:E3:3E:63:48:CC:3B:8A:14:47
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4460
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/5Y1VLJPnbZULEWrjPmNIzDuKFEc.roa
Signing time: Wed 09 Mar 2022 00:36:46 +0000
ROA not before: Wed 09 Mar 2022 00:36:46 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17504 (0x4460)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 9 00:36:46 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=E58D552C93E76D950B116AE33E6348CC3B8A1447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:37:e5:40:8a:04:8e:df:7d:8f:08:84:50:f9:
b8:96:1c:f6:bc:b6:9b:d8:4d:bb:83:4f:b7:68:f4:
bf:07:97:1d:f0:4a:7f:0c:27:70:59:a8:2a:3f:51:
91:93:99:a2:b0:6c:4c:b0:f3:a2:83:61:66:a3:50:
eb:79:ca:8d:05:cb:b6:e5:42:2c:3e:34:75:6b:9d:
40:ac:a8:f6:2d:ce:eb:a7:5b:e7:c3:a8:01:43:2f:
fb:e4:fe:fa:ad:4c:3e:0c:9d:c7:8e:e5:17:f6:e5:
bb:b1:70:c9:1b:40:0e:14:0c:1a:b7:ef:a4:ea:74:
81:57:19:34:01:8b:d2:25:4a:82:60:29:8a:fd:bf:
bc:49:c0:40:3c:6b:25:b0:8b:53:68:7a:31:0a:30:
11:3c:a7:dd:dd:dd:44:1c:d4:66:ae:5e:22:2e:fd:
7b:30:f9:37:40:ff:48:6a:51:07:de:cb:f0:98:52:
f0:94:bb:22:e8:e6:06:9a:41:7d:02:72:79:d5:ec:
2b:ce:f9:41:6c:4d:6d:a4:3b:7f:fa:02:30:fe:48:
66:6e:7b:50:b3:cf:54:fd:4a:8d:9c:47:fd:00:39:
6f:39:2b:d7:e5:de:e1:9c:fe:a5:06:58:77:59:df:
2a:2d:c7:a9:35:b7:59:cd:60:04:94:14:07:16:b7:
38:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8D:55:2C:93:E7:6D:95:0B:11:6A:E3:3E:63:48:CC:3B:8A:14:47
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/5Y1VLJPnbZULEWrjPmNIzDuKFEc.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
34:8c:21:4e:44:4f:36:f2:83:20:25:66:a7:8e:3b:eb:9f:f1:
59:89:48:48:83:d0:89:84:bb:fe:c7:13:7e:a4:41:99:32:86:
1e:6f:15:1a:9d:d1:ae:01:2b:99:88:0c:8d:2e:a6:f5:5f:22:
d2:02:e6:29:1c:69:0a:21:2b:ec:a3:1f:a2:b3:bb:62:6f:d4:
b8:e8:75:80:e8:a0:a6:5a:d0:5d:79:43:aa:bf:67:8f:82:00:
61:82:ca:8c:e6:94:86:5e:e1:c9:e7:56:8c:d4:cd:62:13:b7:
14:c7:2c:02:ce:1a:17:9f:02:7b:86:8c:01:da:0d:5a:68:9b:
ee:23:cd:7a:ee:9d:2a:fc:aa:e2:fa:de:74:5c:56:66:c0:91:
58:e0:7f:28:84:61:ca:61:77:8f:40:75:6d:ce:1f:c8:b2:6e:
1d:52:c8:8f:ae:5d:ea:b4:5d:15:60:6e:20:94:5f:30:82:44:
f9:46:96:99:ef:3d:23:76:ec:60:5c:12:eb:aa:9e:00:cf:79:
c4:c3:57:ae:bc:65:92:27:04:d5:7c:53:ed:23:23:d1:ef:fe:
2b:d2:0f:ae:e3:03:95:7c:9b:3f:6e:52:14:15:48:c3:01:35:
c7:27:d1:9e:c7:27:4b:31:0c:15:cf:db:13:1d:d5:6f:1b:b3:
06:21:e6:d1
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRGAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAzMDkw
MDM2NDZaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKEU1OEQ1NTJDOTNFNzZE
OTUwQjExNkFFMzNFNjM0OENDM0I4QTE0NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD7N+VAigSO332PCIRQ+biWHPa8tpvYTbuDT7do9L8Hlx3wSn8M
J3BZqCo/UZGTmaKwbEyw86KDYWajUOt5yo0Fy7blQiw+NHVrnUCsqPYtzuunW+fD
qAFDL/vk/vqtTD4MnceO5Rf25buxcMkbQA4UDBq376TqdIFXGTQBi9IlSoJgKYr9
v7xJwEA8ayWwi1NoejEKMBE8p93d3UQc1GauXiIu/Xsw+TdA/0hqUQfey/CYUvCU
uyLo5gaaQX0CcnnV7CvO+UFsTW2kO3/6AjD+SGZue1Czz1T9So2cR/0AOW85K9fl
3uGc/qUGWHdZ3yotx6k1t1nNYASUFAcWtzitAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU5Y1VLJPnbZULEWrjPmNIzDuKFEcwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS81WTFWTEpQbmJaVUxFV3JqUG1OSXpEdUtGRWMucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL8wDQYJKoZIhvcNAQELBQADggEB
ADSMIU5ETzbygyAlZqeOO+uf8VmJSEiD0ImEu/7HE36kQZkyhh5vFRqd0a4BK5mI
DI0upvVfItIC5ikcaQohK+yjH6Kzu2Jv1LjodYDooKZa0F15Q6q/Z4+CAGGCyozm
lIZe4cnnVozUzWITtxTHLALOGhefAnuGjAHaDVpom+4jzXrunSr8quL63nRcVmbA
kVjgfyiEYcphd49AdW3OH8iybh1SyI+uXeq0XRVgbiCUXzCCRPlGlpnvPSN27GBc
EuuqngDPecTDV668ZZInBNV8U+0jI9Hv/ivSD67jA5V8mz9uUhQVSMMBNccn0Z7H
J0sxDBXP2xMd1W8bswYh5tE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org