Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/9MhU3kviq8HNieU_iymCw8aHn7M.roa
File: 9MhU3kviq8HNieU_iymCw8aHn7M.roa (raw, json)
Hash identifier: tSR3s75Y7RgugOa4NEDXjubNldOOFaVRMwOOr24ziiM=
Subject key identifier: F4:C8:54:DE:4B:E2:AB:C1:CD:89:E5:3F:8B:29:82:C3:C6:87:9F:B3
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 46B0
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/9MhU3kviq8HNieU_iymCw8aHn7M.roa
Signing time: Wed 20 Apr 2022 00:30:07 +0000
ROA not before: Wed 20 Apr 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18096 (0x46b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 20 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=F4C854DE4BE2ABC1CD89E53F8B2982C3C6879FB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:02:fd:3b:69:3b:31:6c:2e:74:e2:c0:a7:cf:
c9:7c:13:81:08:28:aa:20:64:58:eb:6f:ac:4b:9c:
81:bb:aa:88:bb:60:ed:eb:eb:56:6e:05:fe:10:29:
9f:59:61:42:21:4c:87:f8:b9:a6:2a:90:65:1d:f6:
93:6b:00:b0:30:6c:a6:67:9e:42:80:5c:27:f6:e6:
9f:a2:70:e7:f7:15:92:96:4a:60:52:54:eb:b0:c0:
d8:6e:c7:33:29:db:82:d7:b3:0e:b8:ac:7f:fb:c1:
bf:f3:9d:83:9b:55:c1:12:f0:55:05:f4:7c:8f:7b:
be:24:18:0f:52:cf:c3:1e:76:3a:f0:78:1f:2f:31:
94:25:09:0e:bd:f2:43:9c:80:84:00:bb:c1:b9:5d:
09:75:25:48:fa:3e:0e:07:1a:60:bc:f6:ac:e5:6f:
f1:9c:36:43:d3:e1:cb:b9:3f:69:14:1c:21:b8:ad:
5f:55:e5:77:27:c1:62:6c:25:eb:af:c7:ae:e0:f4:
29:21:6f:78:7a:d5:1b:04:5a:af:f0:40:7e:b2:2a:
42:7c:66:3a:1f:91:99:c1:b3:99:cf:50:c6:71:8b:
92:2c:e8:df:18:a1:a4:b4:f4:2f:f3:06:be:42:4e:
b2:c0:e1:89:71:89:57:7e:c7:28:48:9b:7a:14:9b:
60:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C8:54:DE:4B:E2:AB:C1:CD:89:E5:3F:8B:29:82:C3:C6:87:9F:B3
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/9MhU3kviq8HNieU_iymCw8aHn7M.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:b6:8b:c9:5d:9c:a5:a4:35:0b:dc:5b:4c:b8:da:8c:a5:eb:
64:ce:12:15:5d:a4:e9:00:54:c9:61:35:a3:cf:43:0c:40:87:
6f:bb:16:01:1a:cc:6e:e5:77:c4:b0:8b:56:78:c9:dd:09:b7:
d0:d0:13:94:13:f2:6e:d4:57:2d:17:90:c7:ad:df:42:2d:30:
07:46:94:b8:af:77:ef:81:1b:43:29:70:01:8f:77:ce:b9:96:
39:95:4b:83:c8:3f:5c:76:a5:36:aa:32:5b:28:e1:e2:e0:bb:
9b:2c:b9:3a:2c:99:4a:18:35:aa:de:30:58:56:b3:11:46:a9:
c8:b2:12:cd:56:e8:a3:58:4b:30:b6:b7:5c:41:f3:87:02:a3:
66:e3:03:f5:69:a7:00:f3:e9:3f:80:c6:fb:0e:f0:67:50:7c:
28:70:06:f2:32:c6:1a:2b:68:dd:40:04:4b:09:34:6b:0f:ae:
60:bd:71:f7:45:2b:3d:0c:20:ae:56:f0:8c:48:69:55:2f:8d:
13:8e:99:5d:b7:a1:c3:c6:3e:df:59:49:94:fe:26:8e:ee:e6:
3e:89:37:28:cd:cd:18:76:63:cd:70:13:36:96:31:06:77:d3:
0b:1b:55:b3:34:ee:3e:4c:ce:20:0a:13:d9:d2:a3:0d:ec:e5:
5b:61:ad:a4
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRrAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA0MjAw
MDMwMDdaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKEY0Qzg1NERFNEJFMkFC
QzFDRDg5RTUzRjhCMjk4MkMzQzY4NzlGQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCdAv07aTsxbC504sCnz8l8E4EIKKogZFjrb6xLnIG7qoi7YO3r
61ZuBf4QKZ9ZYUIhTIf4uaYqkGUd9pNrALAwbKZnnkKAXCf25p+icOf3FZKWSmBS
VOuwwNhuxzMp24LXsw64rH/7wb/znYObVcES8FUF9HyPe74kGA9Sz8MedjrweB8v
MZQlCQ698kOcgIQAu8G5XQl1JUj6Pg4HGmC89qzlb/GcNkPT4cu5P2kUHCG4rV9V
5XcnwWJsJeuvx67g9Ckhb3h61RsEWq/wQH6yKkJ8ZjofkZnBs5nPUMZxi5Is6N8Y
oaS09C/zBr5CTrLA4YlxiVd+xyhIm3oUm2DHAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU9MhU3kviq8HNieU/iymCw8aHn7MwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS85TWhVM2t2aXE4SE5pZVVfaXltQ3c4YUhuN00ucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL0wDQYJKoZIhvcNAQELBQADggEB
AKO2i8ldnKWkNQvcW0y42oyl62TOEhVdpOkAVMlhNaPPQwxAh2+7FgEazG7ld8Sw
i1Z4yd0Jt9DQE5QT8m7UVy0XkMet30ItMAdGlLivd++BG0MpcAGPd865ljmVS4PI
P1x2pTaqMlso4eLgu5ssuTosmUoYNareMFhWsxFGqciyEs1W6KNYSzC2t1xB84cC
o2bjA/VppwDz6T+AxvsO8GdQfChwBvIyxhoraN1ABEsJNGsPrmC9cfdFKz0MIK5W
8IxIaVUvjROOmV23ocPGPt9ZSZT+Jo7u5j6JNyjNzRh2Y81wEzaWMQZ30wsbVbM0
7j5MziAKE9nSow3s5VthraQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org