Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/FzbqjQAWk4Dx6B1IRX5TUf3-zhQ.roa
File: FzbqjQAWk4Dx6B1IRX5TUf3-zhQ.roa (raw, json)
Hash identifier: EIb6hnexvdT5/XUBV5PZ2F81hhdfkgUGTmTOR34Vhbc=
Subject key identifier: 17:36:EA:8D:00:16:93:80:F1:E8:1D:48:45:7E:53:51:FD:FE:CE:14
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 436D
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/FzbqjQAWk4Dx6B1IRX5TUf3-zhQ.roa
Signing time: Sat 19 Feb 2022 00:30:08 +0000
ROA not before: Sat 19 Feb 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17261 (0x436d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 19 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=1736EA8D00169380F1E81D48457E5351FDFECE14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9c:26:59:dc:e1:81:30:73:b7:03:ae:49:7e:
0b:2b:7e:50:80:91:73:6f:a5:f9:60:e9:b8:6d:3e:
59:1c:e5:95:40:8e:4b:0c:a1:03:ef:00:9e:c6:cf:
6b:01:de:d6:20:1e:92:de:ba:b8:2c:2c:cb:3a:6d:
df:1d:7f:8c:fb:5e:2c:4e:71:7c:6d:fc:d6:e5:c4:
09:9e:a1:e3:18:ac:8e:66:5e:a3:06:a8:7f:38:6b:
5a:ee:44:05:6e:17:4e:96:06:ad:47:3a:0e:3c:17:
f7:19:d0:b2:e7:3d:ea:86:bd:f1:94:e8:4f:cb:54:
3b:ef:21:48:a6:2a:70:a4:1f:90:97:98:12:38:e0:
fb:7b:e2:5a:88:89:80:a3:d4:c8:9c:b4:05:01:81:
fc:42:fe:d0:ba:9a:12:30:73:0a:fd:80:a0:ce:b9:
1c:0d:56:51:31:67:53:00:da:f0:58:9e:1c:ac:5d:
4c:2c:1a:3d:93:f6:7d:70:54:ac:96:0e:e1:bb:7b:
28:b5:51:ee:4e:34:40:08:87:48:fc:55:60:60:94:
13:fa:47:19:ab:ef:25:38:99:6e:c5:c3:03:54:38:
9e:4c:f4:3d:8e:c9:e5:a2:11:76:82:1c:11:10:86:
97:d0:62:fe:f7:8a:9e:10:8d:9d:26:42:aa:16:b7:
8b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:36:EA:8D:00:16:93:80:F1:E8:1D:48:45:7E:53:51:FD:FE:CE:14
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/FzbqjQAWk4Dx6B1IRX5TUf3-zhQ.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:dd:8f:0e:ff:c6:2b:a9:5e:d5:ce:7b:ec:7a:f2:f3:83:ce:
2e:0e:dd:80:5f:fc:7b:26:20:0b:dc:36:a5:53:ae:ac:29:ec:
50:e1:9d:a0:83:62:8b:98:4e:13:46:0b:c7:14:58:2e:8c:94:
40:c2:0e:1a:39:ea:19:29:be:c3:38:41:c5:55:ac:04:fe:37:
ff:6f:b2:82:e5:0d:7c:43:5c:73:89:0e:44:f4:8d:79:11:c3:
0f:c2:f7:c3:9d:b1:e8:0e:d9:26:94:ec:7c:6f:9c:71:57:59:
50:3e:45:71:f7:b5:ca:a2:0b:6d:b5:1d:9e:c7:63:2f:1b:c7:
91:15:7e:d4:a5:a5:63:68:d8:a7:b5:07:62:0d:2f:c4:72:d2:
cb:73:98:73:05:d1:1e:ba:38:a8:d3:27:da:57:b1:b0:b1:f5:
1f:c7:93:2c:0f:25:24:d0:6d:68:ca:54:6f:1d:51:23:1a:63:
9a:08:5d:b4:11:e3:28:1c:05:aa:46:89:82:cf:39:36:9c:09:
bb:49:1e:da:26:b8:a5:fb:b7:a9:a1:d9:ea:1a:14:68:a1:cf:
af:f0:44:9e:e6:05:4f:38:4c:7e:1a:9a:b9:11:33:8f:45:b2:
45:ab:b4:e6:85:d8:10:a5:19:4a:74:31:45:47:d3:e2:eb:d2:
4f:04:cb:9f
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICQ20wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAyMTkw
MDMwMDhaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKDE3MzZFQThEMDAxNjkz
ODBGMUU4MUQ0ODQ1N0U1MzUxRkRGRUNFMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQClnCZZ3OGBMHO3A65JfgsrflCAkXNvpflg6bhtPlkc5ZVAjksM
oQPvAJ7Gz2sB3tYgHpLeurgsLMs6bd8df4z7XixOcXxt/NblxAmeoeMYrI5mXqMG
qH84a1ruRAVuF06WBq1HOg48F/cZ0LLnPeqGvfGU6E/LVDvvIUimKnCkH5CXmBI4
4Pt74lqIiYCj1MictAUBgfxC/tC6mhIwcwr9gKDOuRwNVlExZ1MA2vBYnhysXUws
Gj2T9n1wVKyWDuG7eyi1Ue5ONEAIh0j8VWBglBP6Rxmr7yU4mW7FwwNUOJ5M9D2O
yeWiEXaCHBEQhpfQYv73ip4QjZ0mQqoWt4snAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUFzbqjQAWk4Dx6B1IRX5TUf3+zhQwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9GemJxalFBV2s0RHg2QjFJUlg1VFVmMy16aFEucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL0wDQYJKoZIhvcNAQELBQADggEB
AAvdjw7/xiupXtXOe+x68vODzi4O3YBf/HsmIAvcNqVTrqwp7FDhnaCDYouYThNG
C8cUWC6MlEDCDho56hkpvsM4QcVVrAT+N/9vsoLlDXxDXHOJDkT0jXkRww/C98Od
segO2SaU7HxvnHFXWVA+RXH3tcqiC221HZ7HYy8bx5EVftSlpWNo2Ke1B2INL8Ry
0stzmHMF0R66OKjTJ9pXsbCx9R/HkywPJSTQbWjKVG8dUSMaY5oIXbQR4ygcBapG
iYLPOTacCbtJHtomuKX7t6mh2eoaFGihz6/wRJ7mBU84TH4amrkRM49FskWrtOaF
2BClGUp0MUVH0+Lr0k8Ey58=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org