Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/89u6YAjNJ2vbIhcxp7JEGp6vyHQ.roa
File: 89u6YAjNJ2vbIhcxp7JEGp6vyHQ.roa (raw, json)
Hash identifier: Slc0v7zFp/jBhqEK2eX7P0DyRJylcacTaYmQPHCMruk=
Subject key identifier: F3:DB:BA:60:08:CD:27:6B:DB:22:17:31:A7:B2:44:1A:9E:AF:C8:74
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 47C4
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/89u6YAjNJ2vbIhcxp7JEGp6vyHQ.roa
Signing time: Tue 10 May 2022 00:30:08 +0000
ROA not before: Tue 10 May 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18372 (0x47c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 10 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=F3DBBA6008CD276BDB221731A7B2441A9EAFC874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8b:5e:c1:ea:41:db:61:4e:09:09:d8:81:60:
55:a7:17:4d:ec:41:d6:6b:1a:4e:23:28:21:9f:69:
10:2f:98:21:26:e0:86:96:ad:0c:ef:18:a9:c9:eb:
33:b4:5e:5f:09:58:c0:23:b3:77:ce:b3:c9:a6:95:
d0:a6:b4:c9:d1:e1:f4:0c:c0:e4:d4:f8:e3:32:be:
6c:a1:14:c2:ad:43:bb:7f:aa:1c:8d:ed:29:57:83:
40:94:fd:fa:b2:0e:f8:55:d2:21:2c:06:8f:f1:fa:
f3:c5:85:0d:04:30:d8:f2:3c:01:a2:a7:f7:46:97:
90:d1:34:65:46:04:8b:89:9f:99:6b:d8:46:05:0a:
13:e5:33:f8:10:95:4c:9b:7a:9d:f2:9d:68:f6:10:
8d:9f:4c:e3:40:15:e7:0c:c0:55:7d:4d:be:ae:64:
06:39:11:4d:43:b8:af:b3:cc:7c:d3:d5:3e:22:79:
4a:65:35:23:dd:ee:4e:7e:c0:54:f6:26:23:c0:2e:
73:79:d5:f4:88:4d:c9:cc:47:77:6e:f9:8e:e7:00:
37:9f:8f:b4:0a:ff:42:08:c2:4b:ac:51:59:09:25:
e1:fd:4a:64:7f:cb:f6:e1:e9:33:e1:3d:86:d7:2e:
57:75:87:a3:e0:64:08:62:88:e1:d8:97:3b:b2:39:
f2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DB:BA:60:08:CD:27:6B:DB:22:17:31:A7:B2:44:1A:9E:AF:C8:74
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/89u6YAjNJ2vbIhcxp7JEGp6vyHQ.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
45:a2:38:d0:59:5c:82:1b:76:e6:5f:a4:0a:69:95:6b:92:75:
4b:ca:4f:c6:80:83:c8:4d:2d:4e:fa:ea:47:4d:15:e6:92:3f:
80:87:1b:ed:de:39:dd:35:77:df:cd:f4:5b:75:1d:dc:fb:93:
24:3e:92:8a:da:f3:69:1a:13:b0:63:a7:2f:47:46:bf:9f:b0:
3a:69:0f:0a:d6:83:17:36:15:af:dd:1e:1c:f6:04:ab:5f:41:
c9:04:9e:6e:be:52:2b:3b:6f:51:2d:b3:a6:69:d2:73:71:b9:
54:58:92:f9:09:b4:8d:c4:33:82:5e:f8:1e:78:a6:7b:c6:8e:
33:ba:98:ff:39:a9:7e:a1:8c:00:30:81:4f:93:7b:a0:17:2f:
48:86:78:5b:c6:24:bc:30:c8:99:0e:45:7d:8a:02:b6:f6:36:
7b:d7:5d:ab:11:e3:ad:f0:6c:3f:71:67:27:09:af:c8:0a:37:
56:14:f4:08:48:54:af:e2:14:b4:93:b5:4a:ee:03:00:7d:1d:
55:9f:b2:ae:85:bc:d6:7b:d9:ac:f8:57:22:f5:31:f5:da:92:
48:7d:ea:de:8d:0a:63:f7:1d:6d:9b:42:e0:6c:c7:43:e2:b1:
2d:71:ea:12:87:a9:32:f1:fd:eb:11:24:00:cd:27:88:f2:2c:
69:d6:f3:0c
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICR8QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA1MTAw
MDMwMDhaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKEYzREJCQTYwMDhDRDI3
NkJEQjIyMTczMUE3QjI0NDFBOUVBRkM4NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIi17B6kHbYU4JCdiBYFWnF03sQdZrGk4jKCGfaRAvmCEm4IaW
rQzvGKnJ6zO0Xl8JWMAjs3fOs8mmldCmtMnR4fQMwOTU+OMyvmyhFMKtQ7t/qhyN
7SlXg0CU/fqyDvhV0iEsBo/x+vPFhQ0EMNjyPAGip/dGl5DRNGVGBIuJn5lr2EYF
ChPlM/gQlUybep3ynWj2EI2fTONAFecMwFV9Tb6uZAY5EU1DuK+zzHzT1T4ieUpl
NSPd7k5+wFT2JiPALnN51fSITcnMR3du+Y7nADefj7QK/0IIwkusUVkJJeH9SmR/
y/bh6TPhPYbXLld1h6PgZAhiiOHYlzuyOfL7AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU89u6YAjNJ2vbIhcxp7JEGp6vyHQwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS84OXU2WUFqTkoydmJJaGN4cDdKRUdwNnZ5SFEucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL8wDQYJKoZIhvcNAQELBQADggEB
AEWiONBZXIIbduZfpApplWuSdUvKT8aAg8hNLU766kdNFeaSP4CHG+3eOd01d9/N
9Ft1Hdz7kyQ+kora82kaE7Bjpy9HRr+fsDppDwrWgxc2Fa/dHhz2BKtfQckEnm6+
Uis7b1Ets6Zp0nNxuVRYkvkJtI3EM4Je+B54pnvGjjO6mP85qX6hjAAwgU+Te6AX
L0iGeFvGJLwwyJkORX2KArb2NnvXXasR463wbD9xZycJr8gKN1YU9AhIVK/iFLST
tUruAwB9HVWfsq6FvNZ72az4VyL1MfXakkh96t6NCmP3HW2bQuBsx0PisS1x6hKH
qTLx/esRJADNJ4jyLGnW8ww=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org