Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/IBlvLzjmhxQ5HDiBFKhv_ccJ4vU.roa
File: IBlvLzjmhxQ5HDiBFKhv_ccJ4vU.roa (raw, json)
Hash identifier: 9zVpqYOcVzB43O654qKz59DfOVr6XLBDHSfRFuYvAP4=
Subject key identifier: 20:19:6F:2F:38:E6:87:14:39:1C:38:81:14:A8:6F:FD:C7:09:E2:F5
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 46DA
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/IBlvLzjmhxQ5HDiBFKhv_ccJ4vU.roa
Signing time: Sat 23 Apr 2022 00:30:10 +0000
ROA not before: Sat 23 Apr 2022 00:30:10 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18138 (0x46da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 23 00:30:10 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=20196F2F38E68714391C388114A86FFDC709E2F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:1b:5b:a5:53:bc:dc:ad:e1:3f:63:da:1f:df:
98:80:fe:1c:4e:e8:26:36:bf:a1:08:65:25:16:2c:
69:dc:51:c1:ea:59:21:2f:c0:84:15:64:6b:c1:71:
54:3d:63:39:f4:38:7e:cf:9c:0c:59:cc:29:ce:f6:
cb:88:d9:a9:6a:e2:9f:50:9b:e0:0c:79:1b:76:34:
bf:80:1c:52:df:1c:f4:01:c1:ba:99:71:28:2c:93:
03:ee:e3:f3:36:09:cc:e6:36:d1:dc:80:c5:cb:12:
a0:45:ac:af:0f:08:94:cc:6f:a5:78:8a:37:a1:f9:
60:e6:47:00:27:fa:8a:2c:a2:08:ba:ba:86:1e:61:
86:87:41:6d:a6:99:4f:06:87:f3:47:20:56:87:96:
8e:69:a8:3e:7e:ac:05:bd:84:ff:aa:2a:b6:5d:19:
b9:dc:9c:09:92:d4:95:9e:32:72:03:8a:80:70:7a:
d8:5f:a1:26:5a:24:7a:1b:11:2a:2d:af:b9:18:8d:
88:78:05:59:38:5f:54:13:6c:24:1c:b8:97:68:44:
c6:44:7e:27:b6:da:d3:18:9d:12:a9:9c:f4:52:e0:
94:44:06:d2:4b:72:03:f2:01:0c:77:88:69:20:b8:
56:ad:06:a5:9c:f6:8a:7b:28:ba:09:33:8d:47:d1:
3d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:19:6F:2F:38:E6:87:14:39:1C:38:81:14:A8:6F:FD:C7:09:E2:F5
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/IBlvLzjmhxQ5HDiBFKhv_ccJ4vU.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
76:96:f1:6d:7f:a9:8f:4f:f6:24:b8:74:db:e1:60:7a:93:95:
2a:34:38:86:67:16:25:55:5b:2c:4c:f7:60:0d:67:3a:91:fe:
d9:cd:98:d1:d1:fd:bc:ee:3e:ac:f6:f1:38:9c:50:70:6a:34:
c3:0d:5c:1b:28:73:25:b7:d2:a2:60:54:0d:bc:2a:b8:7b:87:
85:d5:1a:cb:4a:e0:78:65:94:d2:fe:29:77:8a:6b:15:d0:fb:
d0:3c:ef:45:14:35:6b:ac:e2:aa:29:f0:6e:d6:3e:b7:44:89:
28:a1:85:f0:53:37:30:79:32:01:7a:84:09:70:67:ff:25:79:
11:d9:35:67:1b:cb:e2:03:df:83:c8:8d:ec:7a:63:11:09:eb:
c9:ba:aa:5c:40:9b:37:5b:63:16:24:85:9a:1b:01:7a:e3:d6:
c0:e0:a0:b7:46:16:3b:ac:16:ff:4d:4d:0a:4a:43:e0:22:0c:
de:e1:93:90:48:a1:c3:85:a2:25:24:d5:54:b6:bd:de:78:a2:
b9:60:87:11:5f:ad:fd:2d:74:42:ff:85:1d:cc:b7:b3:6a:b1:
01:18:94:72:8d:5f:43:f8:e2:5c:b9:51:cd:ff:33:8d:a1:f2:
a5:48:76:8c:80:64:24:2b:ed:d3:d3:d7:51:ed:b8:49:13:31:
22:93:69:98
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRtowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA0MjMw
MDMwMTBaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDIwMTk2RjJGMzhFNjg3
MTQzOTFDMzg4MTE0QTg2RkZEQzcwOUUyRjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD4G1ulU7zcreE/Y9of35iA/hxO6CY2v6EIZSUWLGncUcHqWSEv
wIQVZGvBcVQ9Yzn0OH7PnAxZzCnO9suI2alq4p9Qm+AMeRt2NL+AHFLfHPQBwbqZ
cSgskwPu4/M2CczmNtHcgMXLEqBFrK8PCJTMb6V4ijeh+WDmRwAn+oosogi6uoYe
YYaHQW2mmU8Gh/NHIFaHlo5pqD5+rAW9hP+qKrZdGbncnAmS1JWeMnIDioBwethf
oSZaJHobESotr7kYjYh4BVk4X1QTbCQcuJdoRMZEfie22tMYnRKpnPRS4JREBtJL
cgPyAQx3iGkguFatBqWc9op7KLoJM41H0T3tAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUIBlvLzjmhxQ5HDiBFKhv/ccJ4vUwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9JQmx2THpqbWh4UTVIRGlCRktodl9jY0o0dlUucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL0wDQYJKoZIhvcNAQELBQADggEB
AHaW8W1/qY9P9iS4dNvhYHqTlSo0OIZnFiVVWyxM92ANZzqR/tnNmNHR/bzuPqz2
8TicUHBqNMMNXBsocyW30qJgVA28Krh7h4XVGstK4HhllNL+KXeKaxXQ+9A870UU
NWus4qop8G7WPrdEiSihhfBTNzB5MgF6hAlwZ/8leRHZNWcby+ID34PIjex6YxEJ
68m6qlxAmzdbYxYkhZobAXrj1sDgoLdGFjusFv9NTQpKQ+AiDN7hk5BIocOFoiUk
1VS2vd54orlghxFfrf0tdEL/hR3Mt7NqsQEYlHKNX0P44ly5Uc3/M42h8qVIdoyA
ZCQr7dPT11HtuEkTMSKTaZg=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org