Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/5ZDWIFcc_ePb5Ap_rJAPHYSuXsg.roa
File: 5ZDWIFcc_ePb5Ap_rJAPHYSuXsg.roa (raw, json)
Hash identifier: uf5PBV2ea9gC8WmdSZP7xCI5or684G1koWDgJzSZS1o=
Subject key identifier: E5:90:D6:20:57:1C:FD:E3:DB:E4:0A:7F:AC:90:0F:1D:84:AE:5E:C8
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4543
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/5ZDWIFcc_ePb5Ap_rJAPHYSuXsg.roa
Signing time: Fri 25 Mar 2022 00:30:09 +0000
ROA not before: Fri 25 Mar 2022 00:30:09 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17731 (0x4543)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 25 00:30:09 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=E590D620571CFDE3DBE40A7FAC900F1D84AE5EC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:64:a1:fb:a5:6e:48:34:0c:09:26:1c:7f:e9:
4c:ef:de:1b:bd:ad:0b:d1:fa:c4:70:b6:fa:34:4b:
03:78:5e:8c:91:14:a3:e9:83:de:12:53:6b:68:c2:
38:3e:6c:f0:1a:d9:e0:b8:18:04:44:a1:35:82:6f:
aa:93:d2:05:b0:1e:49:e5:ec:76:d0:f4:91:91:41:
db:c7:32:b5:1d:52:5d:2c:e2:d3:37:9c:ec:2a:d0:
4a:ec:0d:36:4c:dc:ac:58:85:6a:86:39:f4:be:0b:
02:ae:3d:1c:8f:18:7f:11:e4:41:57:3d:ef:a4:58:
c8:1e:7b:86:13:54:0b:5f:f6:b0:6a:3d:ea:ea:c5:
a9:41:8a:d1:3c:20:fc:62:1d:b3:64:d0:f1:99:5b:
98:b2:f8:b3:9d:da:8c:34:08:14:0a:e5:d5:ab:26:
a4:94:30:b3:dd:49:bd:94:74:29:d3:84:20:1e:e6:
6e:87:10:45:83:10:f7:29:6d:af:7e:95:cb:cc:3c:
da:fc:0c:20:92:3a:7f:4b:64:08:ed:b4:73:05:9e:
7d:79:43:ce:a9:fe:7b:97:38:7c:bb:92:0d:03:3f:
21:6e:12:f3:84:1a:1f:ad:e9:ba:7d:37:8f:b1:c8:
87:48:cb:b6:67:73:00:66:57:6c:1e:a2:8b:6c:ef:
95:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:90:D6:20:57:1C:FD:E3:DB:E4:0A:7F:AC:90:0F:1D:84:AE:5E:C8
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/5ZDWIFcc_ePb5Ap_rJAPHYSuXsg.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
41:a4:99:25:38:2f:78:c9:41:90:d5:28:3f:b3:eb:0b:ab:35:
86:4a:35:f9:54:ab:91:29:66:32:d3:24:1e:90:19:80:cf:bf:
c0:76:27:7c:ec:25:6a:54:73:f5:fc:b7:3a:49:9f:6a:62:26:
38:26:6b:e2:88:50:62:f5:29:13:b0:6e:93:d0:61:36:c9:e0:
d6:fb:03:b5:70:9b:be:a1:09:05:4e:2c:c3:bd:d5:39:b7:6a:
89:21:0a:7d:c7:b4:96:88:c1:86:d1:2b:65:e8:46:de:15:45:
7a:d9:1d:5a:59:0b:e9:ca:a8:1e:a7:e5:f6:09:83:9b:29:8d:
15:26:94:73:a2:80:2d:93:95:19:50:ed:5d:63:60:97:53:51:
bb:17:6b:9e:ad:2d:10:40:7b:f4:37:85:35:1b:7f:21:2b:78:
a1:86:26:d4:e4:30:fb:0f:57:34:42:eb:ab:7b:43:0b:34:f7:
e9:4c:da:8c:ed:76:80:66:0e:26:b4:df:34:95:7c:e4:9d:73:
e1:43:38:27:53:42:1d:c7:40:68:ae:59:1d:4a:68:67:37:4d:
a1:cd:f4:67:24:b8:ef:c5:fd:7e:5f:3f:95:22:d4:ca:c4:80:
12:d3:f0:0d:3a:a6:27:c5:83:9c:a6:1a:be:85:97:b8:e0:2f:
91:ae:44:36
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRUMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAzMjUw
MDMwMDlaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKEU1OTBENjIwNTcxQ0ZE
RTNEQkU0MEE3RkFDOTAwRjFEODRBRTVFQzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFZKH7pW5INAwJJhx/6Uzv3hu9rQvR+sRwtvo0SwN4XoyRFKPp
g94SU2towjg+bPAa2eC4GAREoTWCb6qT0gWwHknl7HbQ9JGRQdvHMrUdUl0s4tM3
nOwq0ErsDTZM3KxYhWqGOfS+CwKuPRyPGH8R5EFXPe+kWMgee4YTVAtf9rBqPerq
xalBitE8IPxiHbNk0PGZW5iy+LOd2ow0CBQK5dWrJqSUMLPdSb2UdCnThCAe5m6H
EEWDEPcpba9+lcvMPNr8DCCSOn9LZAjttHMFnn15Q86p/nuXOHy7kg0DPyFuEvOE
Gh+t6bp9N4+xyIdIy7ZncwBmV2weoots75UFAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU5ZDWIFcc/ePb5Ap/rJAPHYSuXsgwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS81WkRXSUZjY19lUGI1QXBfckpBUEhZU3VYc2cucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL0wDQYJKoZIhvcNAQELBQADggEB
AEGkmSU4L3jJQZDVKD+z6wurNYZKNflUq5EpZjLTJB6QGYDPv8B2J3zsJWpUc/X8
tzpJn2piJjgma+KIUGL1KROwbpPQYTbJ4Nb7A7Vwm76hCQVOLMO91Tm3aokhCn3H
tJaIwYbRK2XoRt4VRXrZHVpZC+nKqB6n5fYJg5spjRUmlHOigC2TlRlQ7V1jYJdT
UbsXa56tLRBAe/Q3hTUbfyEreKGGJtTkMPsPVzRC66t7Qws09+lM2oztdoBmDia0
3zSVfOSdc+FDOCdTQh3HQGiuWR1KaGc3TaHN9GckuO/F/X5fP5Ui1MrEgBLT8A06
pifFg5ymGr6Fl7jgL5GuRDY=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org