Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/CG__6Rkja7p-SRAVrPGMHhEA78Q.roa
File: CG__6Rkja7p-SRAVrPGMHhEA78Q.roa (raw, json)
Hash identifier: IqxAeMTu0wkqQd0yOGGojGPYYzMFuMzpsqLzDDD5K/M=
Subject key identifier: 08:6F:FF:E9:19:23:6B:BA:7E:49:10:15:AC:F1:8C:1E:11:00:EF:C4
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4754
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/CG__6Rkja7p-SRAVrPGMHhEA78Q.roa
Signing time: Mon 02 May 2022 00:30:08 +0000
ROA not before: Mon 02 May 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18260 (0x4754)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 2 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=086FFFE919236BBA7E491015ACF18C1E1100EFC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:30:fb:8e:ca:35:ed:26:3c:b0:46:ce:5d:94:
7d:bd:a2:f1:07:5d:98:09:02:fb:4b:1d:1b:50:2c:
2d:10:67:0a:b8:4b:85:06:2f:fb:fe:a6:a6:10:e9:
f7:7d:df:85:8c:24:b9:98:68:88:74:d7:74:8d:cb:
dd:06:2c:a9:21:85:c7:ed:8c:0d:10:69:c5:32:0c:
7c:1c:c3:bb:86:f0:01:04:d1:e6:82:9a:e5:a5:d9:
d5:71:ac:52:ee:16:32:93:07:53:ff:46:55:91:6b:
43:6f:d0:df:b8:c0:a6:54:82:9f:93:00:ce:7e:74:
4c:3d:6d:3f:af:c4:b8:17:c7:f0:20:d3:fb:f5:70:
5e:93:9c:a7:5b:a2:e4:16:5e:68:c0:ac:dd:6f:c8:
f9:89:c8:27:6b:6e:54:e7:91:8d:b6:36:f4:3b:72:
74:0b:0b:b0:7d:4c:08:c8:49:30:9b:81:ce:ed:df:
dc:5c:d9:5c:2d:2c:fb:b2:3a:16:63:7a:36:38:c9:
bf:dd:11:e8:20:d8:2f:8f:11:bd:9b:e6:86:cd:92:
f5:3c:26:0e:3c:66:4b:bf:d0:4f:fa:37:1e:71:f5:
c1:15:44:a6:30:f4:ab:bb:9b:59:ac:f8:a8:03:ad:
94:31:37:ac:39:e5:b6:a9:a3:2f:c8:83:38:ac:67:
37:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6F:FF:E9:19:23:6B:BA:7E:49:10:15:AC:F1:8C:1E:11:00:EF:C4
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/CG__6Rkja7p-SRAVrPGMHhEA78Q.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
30:c5:ab:e8:75:7b:5f:e7:5b:22:5f:fd:1a:5e:70:14:36:ec:
e3:78:84:c0:9e:ac:8c:9d:db:91:d8:e2:bd:36:7c:c9:3a:07:
c3:d1:29:e5:5d:4d:7f:18:9b:a7:99:5b:63:dc:ec:a1:31:e9:
f0:df:f6:ea:c1:2c:1f:cc:04:b5:e3:26:d4:19:fc:a6:d0:95:
eb:09:8a:47:1b:e3:68:51:a6:14:a3:b8:5c:a6:a8:4e:90:50:
27:fe:a8:0d:ba:bd:db:c2:21:3a:32:38:dc:24:20:8c:95:d2:
58:f4:24:c9:3f:37:aa:68:6c:fb:d0:e5:4d:d3:21:c4:da:b2:
f2:0b:60:76:59:3a:b2:52:57:32:a8:5b:4a:0e:7b:30:5c:0f:
56:e3:a1:99:6f:e0:f2:35:34:ee:99:28:e4:ec:24:d6:31:e8:
53:13:d6:dc:5f:04:51:6c:be:23:8c:ca:f1:25:e3:d9:b9:74:
81:d6:a1:af:9d:28:30:d2:1d:a3:85:9d:0e:b7:38:69:27:99:
98:06:84:c5:50:28:ef:dd:f1:49:ba:da:fd:3b:f9:79:43:ac:
43:d0:40:05:f4:23:6f:b8:80:41:e0:34:5f:2f:c6:45:4b:16:
7e:95:37:1d:07:24:29:be:00:e0:06:0d:18:67:5f:d4:0a:d7:
e5:08:0f:eb
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICR1QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA1MDIw
MDMwMDhaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDA4NkZGRkU5MTkyMzZC
QkE3RTQ5MTAxNUFDRjE4QzFFMTEwMEVGQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2MPuOyjXtJjywRs5dlH29ovEHXZgJAvtLHRtQLC0QZwq4S4UG
L/v+pqYQ6fd934WMJLmYaIh013SNy90GLKkhhcftjA0QacUyDHwcw7uG8AEE0eaC
muWl2dVxrFLuFjKTB1P/RlWRa0Nv0N+4wKZUgp+TAM5+dEw9bT+vxLgXx/Ag0/v1
cF6TnKdbouQWXmjArN1vyPmJyCdrblTnkY22NvQ7cnQLC7B9TAjISTCbgc7t39xc
2VwtLPuyOhZjejY4yb/dEegg2C+PEb2b5obNkvU8Jg48Zku/0E/6Nx5x9cEVRKYw
9Ku7m1ms+KgDrZQxN6w55bapoy/IgzisZzcnAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUCG//6Rkja7p+SRAVrPGMHhEA78QwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9DR19fNlJramE3cC1TUkFWclBHTUhoRUE3OFEucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL8wDQYJKoZIhvcNAQELBQADggEB
ADDFq+h1e1/nWyJf/RpecBQ27ON4hMCerIyd25HY4r02fMk6B8PRKeVdTX8Ym6eZ
W2Pc7KEx6fDf9urBLB/MBLXjJtQZ/KbQlesJikcb42hRphSjuFymqE6QUCf+qA26
vdvCIToyONwkIIyV0lj0JMk/N6pobPvQ5U3TIcTasvILYHZZOrJSVzKoW0oOezBc
D1bjoZlv4PI1NO6ZKOTsJNYx6FMT1txfBFFsviOMyvEl49m5dIHWoa+dKDDSHaOF
nQ63OGknmZgGhMVQKO/d8Um62v07+XlDrEPQQAX0I2+4gEHgNF8vxkVLFn6VNx0H
JCm+AOAGDRhnX9QK1+UID+s=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org