Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/63VPYM39NsbMmnLR0sR3PZOS20Q.roa
File: 63VPYM39NsbMmnLR0sR3PZOS20Q.roa (raw, json)
Hash identifier: BN5Rhv4FpEBuN2QEo7sVUZZYe/ugU6hK5ghn5rFZNLc=
Subject key identifier: EB:75:4F:60:CD:FD:36:C6:CC:9A:72:D1:D2:C4:77:3D:93:92:DB:44
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4909
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/63VPYM39NsbMmnLR0sR3PZOS20Q.roa
Signing time: Wed 01 Jun 2022 00:30:11 +0000
ROA not before: Wed 01 Jun 2022 00:30:11 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18697 (0x4909)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 1 00:30:11 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=EB754F60CDFD36C6CC9A72D1D2C4773D9392DB44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9e:e3:eb:87:51:88:ce:91:7a:ce:d8:c3:06:
be:a3:b4:f2:3a:85:d9:ef:3d:5c:f4:88:ee:d3:98:
f3:51:8c:7e:05:90:8b:b3:c1:16:49:fe:3b:68:cd:
e3:6b:6b:56:e6:16:cc:14:49:aa:2e:e9:23:a5:82:
c9:4d:02:ea:bc:06:45:92:22:83:36:f9:8f:2b:fe:
4f:bf:78:fc:a4:ac:2f:1a:9d:4f:44:31:7b:5e:44:
01:c3:f8:f1:12:d1:ba:c7:76:50:ea:88:8d:06:c5:
8c:d0:53:4e:37:7d:10:15:2b:06:9e:48:37:5c:ac:
d2:90:b8:7f:5a:6a:71:3e:54:48:52:0b:ed:f9:e2:
d6:82:7e:4c:79:f9:cd:f6:58:a4:d8:55:45:70:7d:
b1:8e:1c:da:b9:2f:bd:7a:3f:99:7d:01:81:ce:7b:
ba:b3:4e:9d:9d:1a:fa:e8:bc:7b:e9:58:47:4d:75:
e5:96:82:97:a9:7d:7c:c3:72:3f:ca:15:be:30:6b:
7a:74:8f:56:91:1e:13:77:3f:8d:a7:a4:16:e7:9e:
69:6f:7c:18:c9:f1:18:ff:82:58:29:fa:04:3d:ce:
1e:53:e0:0c:0d:2f:2a:91:e8:0c:19:2d:b6:97:cf:
1c:d5:98:8c:d4:c3:21:48:37:f7:a7:44:21:53:63:
df:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:75:4F:60:CD:FD:36:C6:CC:9A:72:D1:D2:C4:77:3D:93:92:DB:44
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/63VPYM39NsbMmnLR0sR3PZOS20Q.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:03:54:dc:1b:e6:61:c6:db:79:1c:07:ed:72:e1:17:ba:e3:
36:af:ab:3b:e8:7f:76:0a:55:29:d9:96:13:95:75:7a:13:02:
a1:d3:c6:d8:20:b4:39:1e:d9:e2:de:d9:3c:1a:a3:78:5b:c2:
15:91:35:f6:4f:62:5e:a0:bd:c4:e1:f6:dc:bb:f8:6d:f3:33:
ca:ae:3e:63:dc:62:04:31:bc:07:67:6b:b6:aa:0a:40:e0:8d:
13:52:bb:ae:74:a7:46:53:f1:bb:54:7a:a5:e6:72:19:1f:b6:
3a:27:aa:15:94:59:05:1c:48:b7:81:e7:a0:1c:0a:59:63:d0:
d2:c7:52:49:02:34:31:13:a5:27:ab:04:b9:ce:e6:dd:b0:f8:
f2:29:ac:a0:c0:c0:57:61:ef:24:0a:f9:c2:d1:08:02:bf:11:
16:7c:b5:0d:10:29:db:73:28:57:88:1d:a6:45:f0:29:0d:c7:
3e:c5:dd:2c:f9:e6:2d:0c:41:97:a0:52:90:0c:37:3b:16:91:
93:1f:f8:b5:cd:1f:b6:eb:20:66:28:ff:23:4b:24:ef:29:8e:
67:48:cd:b8:e0:f1:9b:60:bd:06:25:d4:3c:88:58:3c:00:d1:
02:7b:9c:f5:1f:e3:63:30:ad:b4:2f:36:1e:20:7c:64:48:cc:
77:17:dc:5f
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICSQkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA2MDEw
MDMwMTFaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKEVCNzU0RjYwQ0RGRDM2
QzZDQzlBNzJEMUQyQzQ3NzNEOTM5MkRCNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCrnuPrh1GIzpF6ztjDBr6jtPI6hdnvPVz0iO7TmPNRjH4FkIuz
wRZJ/jtozeNra1bmFswUSaou6SOlgslNAuq8BkWSIoM2+Y8r/k+/ePykrC8anU9E
MXteRAHD+PES0brHdlDqiI0GxYzQU043fRAVKwaeSDdcrNKQuH9aanE+VEhSC+35
4taCfkx5+c32WKTYVUVwfbGOHNq5L716P5l9AYHOe7qzTp2dGvrovHvpWEdNdeWW
gpepfXzDcj/KFb4wa3p0j1aRHhN3P42npBbnnmlvfBjJ8Rj/glgp+gQ9zh5T4AwN
LyqR6AwZLbaXzxzVmIzUwyFIN/enRCFTY98TAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU63VPYM39NsbMmnLR0sR3PZOS20QwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS82M1ZQWU0zOU5zYk1tbkxSMHNSM1BaT1MyMFEucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL0wDQYJKoZIhvcNAQELBQADggEB
AKoDVNwb5mHG23kcB+1y4Re64zavqzvof3YKVSnZlhOVdXoTAqHTxtggtDke2eLe
2Twao3hbwhWRNfZPYl6gvcTh9ty7+G3zM8quPmPcYgQxvAdna7aqCkDgjRNSu650
p0ZT8btUeqXmchkftjonqhWUWQUcSLeB56AcCllj0NLHUkkCNDETpSerBLnO5t2w
+PIprKDAwFdh7yQK+cLRCAK/ERZ8tQ0QKdtzKFeIHaZF8CkNxz7F3Sz55i0MQZeg
UpAMNzsWkZMf+LXNH7brIGYo/yNLJO8pjmdIzbjg8ZtgvQYl1DyIWDwA0QJ7nPUf
42MwrbQvNh4gfGRIzHcX3F8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org