Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/Cy_OWR9RW-l0PwbrK1P12zF0h5E.roa
File: Cy_OWR9RW-l0PwbrK1P12zF0h5E.roa (raw, json)
Hash identifier: sV1th+Xj+REGPPRIwGXsoq+yQao6xzvlhcPNRDx0U6E=
Subject key identifier: 0B:2F:CE:59:1F:51:5B:E9:74:3F:06:EB:2B:53:F5:DB:31:74:87:91
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 47EE
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Cy_OWR9RW-l0PwbrK1P12zF0h5E.roa
Signing time: Fri 13 May 2022 00:30:07 +0000
ROA not before: Fri 13 May 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18414 (0x47ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 13 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=0B2FCE591F515BE9743F06EB2B53F5DB31748791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2e:9b:67:ba:4b:cc:fc:4d:94:2a:d0:2e:3b:
a8:99:d7:a9:aa:4c:3a:15:7e:4f:02:b3:3b:43:cb:
e8:81:20:19:79:ea:79:39:da:e8:fa:7e:b0:6f:e7:
c3:83:94:b1:54:05:73:cd:c5:de:28:3d:74:bb:41:
36:e9:fa:f5:f7:43:b1:c7:82:dc:d1:aa:ad:47:d4:
d9:88:a5:ee:c4:e6:12:93:4d:bf:fb:d9:65:4a:4e:
61:09:a8:77:c2:90:82:63:b8:84:2c:cc:2f:0a:d3:
16:c2:54:1c:b3:4a:e0:08:1c:0e:57:b0:bb:6c:e5:
f9:a9:e3:6f:4a:1f:59:61:34:f8:d3:1c:af:5f:0e:
fa:59:e9:4e:d8:6e:9e:ac:55:90:e0:d3:fb:4d:5b:
73:95:8e:47:c4:d3:5a:58:0b:f3:6b:92:ac:d8:9f:
41:ba:ea:a3:65:a7:e0:01:c0:5d:31:96:1a:45:ad:
b4:c2:e0:73:0d:7b:0b:c0:52:69:45:1b:dd:84:b4:
5a:79:04:30:23:11:c0:f0:22:2e:23:ab:c5:40:04:
2e:1a:2b:d8:31:a5:9c:35:68:d4:4b:23:07:b8:df:
6d:99:9a:3a:79:6c:2d:83:4a:2f:22:1b:b7:13:b6:
8a:b0:54:37:a5:ef:d9:82:87:32:55:35:17:43:a3:
75:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2F:CE:59:1F:51:5B:E9:74:3F:06:EB:2B:53:F5:DB:31:74:87:91
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Cy_OWR9RW-l0PwbrK1P12zF0h5E.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:40:8f:96:32:a8:2f:a5:9b:fb:99:d8:6f:be:a4:0b:a6:e4:
fb:79:b9:65:e7:d6:b4:f2:85:5e:d3:56:e7:63:0d:d3:af:1c:
c6:d8:2b:e7:90:fa:5c:5e:b2:97:f1:42:3c:0a:05:f4:ab:cd:
ac:e7:00:ad:68:c8:b1:ca:c2:4e:0f:4f:4c:93:5a:72:e4:6c:
46:97:94:ab:40:86:ac:8b:81:96:61:0d:e4:10:2e:dc:68:a1:
74:45:fb:0d:ce:bd:28:36:a0:a1:96:27:27:90:55:3c:7a:f5:
78:03:ed:a2:4a:cc:ab:6f:4e:64:e4:78:72:1c:ff:4c:7a:80:
dc:f7:7c:f6:79:5c:e4:0d:7a:a6:77:42:3e:4d:79:ab:cb:54:
78:0d:97:93:08:f8:a7:77:8a:42:e6:29:cf:78:ff:67:65:00:
23:a8:2d:5a:d9:21:25:e2:f5:b3:17:c2:0b:4d:51:db:00:32:
8d:44:68:19:32:56:ac:71:17:dc:83:75:9f:82:8d:00:d2:d8:
fd:bf:43:33:a8:89:fc:ef:69:08:30:06:9a:59:96:60:48:20:
53:37:94:ed:a5:92:3d:a0:d0:76:98:f2:bd:b6:38:c7:a1:ee:
0d:af:1a:2b:fc:9d:11:db:a5:85:81:7e:8e:2c:61:4c:dd:9b:
d5:4b:5b:44
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICR+4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA1MTMw
MDMwMDdaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDBCMkZDRTU5MUY1MTVC
RTk3NDNGMDZFQjJCNTNGNURCMzE3NDg3OTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqLptnukvM/E2UKtAuO6iZ16mqTDoVfk8CsztDy+iBIBl56nk5
2uj6frBv58ODlLFUBXPNxd4oPXS7QTbp+vX3Q7HHgtzRqq1H1NmIpe7E5hKTTb/7
2WVKTmEJqHfCkIJjuIQszC8K0xbCVByzSuAIHA5XsLts5fmp429KH1lhNPjTHK9f
DvpZ6U7Ybp6sVZDg0/tNW3OVjkfE01pYC/NrkqzYn0G66qNlp+ABwF0xlhpFrbTC
4HMNewvAUmlFG92EtFp5BDAjEcDwIi4jq8VABC4aK9gxpZw1aNRLIwe4322Zmjp5
bC2DSi8iG7cTtoqwVDel79mChzJVNRdDo3XxAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUCy/OWR9RW+l0PwbrK1P12zF0h5EwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9DeV9PV1I5UlctbDBQd2JySzFQMTJ6RjBoNUUucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL8wDQYJKoZIhvcNAQELBQADggEB
ADxAj5YyqC+lm/uZ2G++pAum5Pt5uWXn1rTyhV7TVudjDdOvHMbYK+eQ+lxespfx
QjwKBfSrzaznAK1oyLHKwk4PT0yTWnLkbEaXlKtAhqyLgZZhDeQQLtxooXRF+w3O
vSg2oKGWJyeQVTx69XgD7aJKzKtvTmTkeHIc/0x6gNz3fPZ5XOQNeqZ3Qj5NeavL
VHgNl5MI+Kd3ikLmKc94/2dlACOoLVrZISXi9bMXwgtNUdsAMo1EaBkyVqxxF9yD
dZ+CjQDS2P2/QzOoifzvaQgwBppZlmBIIFM3lO2lkj2g0HaY8r22OMeh7g2vGiv8
nRHbpYWBfo4sYUzdm9VLW0Q=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org