Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/Gb9EOfoPpiZrxLcH8bwPb3U69aQ.roa
File: Gb9EOfoPpiZrxLcH8bwPb3U69aQ.roa (raw, json)
Hash identifier: HyLQhOR0dV8RLqfBC/pqKzy7ZMDsY412buLCleIvZts=
Subject key identifier: 19:BF:44:39:FA:0F:A6:26:6B:C4:B7:07:F1:BC:0F:6F:75:3A:F5:A4
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4720
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Gb9EOfoPpiZrxLcH8bwPb3U69aQ.roa
Signing time: Thu 28 Apr 2022 00:30:09 +0000
ROA not before: Thu 28 Apr 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18208 (0x4720)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 28 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=19BF4439FA0FA6266BC4B707F1BC0F6F753AF5A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6a:8a:bb:c6:ca:f2:bb:bd:bc:44:f0:ad:7c:
60:e3:82:1f:c1:0d:2e:5c:0b:78:c2:39:1f:22:84:
72:7a:ee:6a:fb:b8:8f:73:fb:fc:88:ec:9c:e0:5d:
00:aa:67:8e:56:88:b0:32:49:5c:51:7f:ab:e3:67:
25:10:a5:1c:53:06:4b:52:78:a8:72:49:89:6d:b3:
6e:ed:0b:64:8f:b6:a7:f9:d5:21:2a:6d:86:3d:e6:
8f:51:aa:5d:48:d1:a3:7f:f7:07:82:58:a7:33:98:
bc:a9:7e:c9:27:ab:7b:ca:98:87:ec:80:78:75:f1:
f3:45:4d:d5:0e:20:f1:74:d1:cf:ff:12:b4:9d:45:
0c:b1:75:09:a6:9f:58:b2:c2:9d:83:df:0f:53:19:
92:e1:ea:0b:ce:70:53:cd:73:ce:6c:ca:c4:c1:13:
be:0c:80:9b:21:09:4e:34:c0:36:3a:b2:cd:76:ab:
cc:f5:81:54:86:c7:3c:16:bd:51:20:39:05:b9:af:
30:21:35:8c:77:48:2c:76:96:ee:61:26:3b:e9:11:
4c:21:5c:4b:9f:66:51:61:64:36:94:58:b5:00:7d:
21:47:b3:56:f4:71:fc:eb:94:14:61:a3:54:d3:5e:
84:f0:4f:d8:da:38:92:43:49:7e:5e:43:16:2b:31:
e7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BF:44:39:FA:0F:A6:26:6B:C4:B7:07:F1:BC:0F:6F:75:3A:F5:A4
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Gb9EOfoPpiZrxLcH8bwPb3U69aQ.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:c0:ad:3e:12:a1:b0:7d:ba:04:0b:a9:69:06:29:64:81:dd:
60:e1:7e:72:3a:dc:eb:12:38:f4:2b:17:4e:74:0e:b9:5f:91:
90:f8:80:33:e0:44:d8:11:2d:84:ba:f3:cc:13:ff:ec:ce:f3:
de:0c:1b:89:21:36:a9:7f:ff:4d:9e:8a:d9:88:34:b1:67:e4:
fd:64:2d:2d:30:78:a0:5e:e2:5c:5d:ae:4f:94:54:e8:ad:35:
78:07:5a:58:f0:18:1c:4a:16:04:e7:96:88:d5:62:55:6c:fb:
25:26:59:20:17:56:a6:96:42:aa:1d:e2:4f:90:87:fb:85:d7:
ed:18:85:60:ca:e3:5d:d4:9a:a0:64:2c:93:09:fc:d6:97:62:
59:95:d6:a7:dd:f4:2e:87:30:95:b4:41:ed:4b:8b:45:d0:56:
10:08:7e:69:79:f4:59:69:70:22:6d:16:b2:3f:db:3f:a2:fb:
c6:bb:3f:57:b5:67:d9:97:88:ad:25:a6:e9:88:0f:0c:f1:0c:
55:18:7d:ef:c7:f8:a3:b1:b9:8d:02:66:33:8e:12:36:7b:65:
fc:ff:f3:dc:f3:1d:e0:e3:19:d8:34:f6:33:bc:23:ed:f9:c0:
c0:16:47:e4:5d:da:61:47:57:a4:26:59:ae:61:eb:a0:d4:38:
b3:a5:48:59
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRyAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA0Mjgw
MDMwMDlaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDE5QkY0NDM5RkEwRkE2
MjY2QkM0QjcwN0YxQkMwRjZGNzUzQUY1QTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvaoq7xsryu728RPCtfGDjgh/BDS5cC3jCOR8ihHJ67mr7uI9z
+/yI7JzgXQCqZ45WiLAySVxRf6vjZyUQpRxTBktSeKhySYlts27tC2SPtqf51SEq
bYY95o9Rql1I0aN/9weCWKczmLypfsknq3vKmIfsgHh18fNFTdUOIPF00c//ErSd
RQyxdQmmn1iywp2D3w9TGZLh6gvOcFPNc85sysTBE74MgJshCU40wDY6ss12q8z1
gVSGxzwWvVEgOQW5rzAhNYx3SCx2lu5hJjvpEUwhXEufZlFhZDaUWLUAfSFHs1b0
cfzrlBRho1TTXoTwT9jaOJJDSX5eQxYrMedLAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUGb9EOfoPpiZrxLcH8bwPb3U69aQwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9HYjlFT2ZvUHBpWnJ4TGNIOGJ3UGIzVTY5YVEucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL0wDQYJKoZIhvcNAQELBQADggEB
ALXArT4SobB9ugQLqWkGKWSB3WDhfnI63OsSOPQrF050DrlfkZD4gDPgRNgRLYS6
88wT/+zO894MG4khNql//02eitmINLFn5P1kLS0weKBe4lxdrk+UVOitNXgHWljw
GBxKFgTnlojVYlVs+yUmWSAXVqaWQqod4k+Qh/uF1+0YhWDK413UmqBkLJMJ/NaX
YlmV1qfd9C6HMJW0Qe1Li0XQVhAIfml59FlpcCJtFrI/2z+i+8a7P1e1Z9mXiK0l
pumIDwzxDFUYfe/H+KOxuY0CZjOOEjZ7Zfz/89zzHeDjGdg09jO8I+35wMAWR+Rd
2mFHV6QmWa5h66DUOLOlSFk=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org