Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/JnO8StzW9NNhmt9_VVZRY_RtWaE.roa
File: JnO8StzW9NNhmt9_VVZRY_RtWaE.roa (raw, json)
Hash identifier: 7QNswR0iN8X9UAaLlH8C955u+NAE16wtCXAy3HaRTF8=
Subject key identifier: 26:73:BC:4A:DC:D6:F4:D3:61:9A:DF:7F:55:56:51:63:F4:6D:59:A1
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 470E
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/JnO8StzW9NNhmt9_VVZRY_RtWaE.roa
Signing time: Wed 27 Apr 2022 00:30:08 +0000
ROA not before: Wed 27 Apr 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18190 (0x470e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 27 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=2673BC4ADCD6F4D3619ADF7F55565163F46D59A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:29:66:cc:b4:1e:d6:1f:e5:90:6f:84:63:f4:
a8:8e:40:e2:33:2e:0d:b4:3e:37:04:ee:e9:01:28:
f4:8e:ac:4f:c1:41:3f:ae:0f:c1:0d:32:70:24:ee:
b6:a0:9e:6f:1f:80:cc:3a:97:bc:ad:23:0e:5e:a5:
fe:cc:17:b1:28:38:15:81:a0:e8:9d:79:a8:c6:df:
69:93:34:0e:94:d0:89:fc:46:0b:46:d7:bd:3e:06:
11:47:7e:c2:eb:08:ee:72:15:d1:ab:df:7a:9a:40:
ec:26:8e:8f:14:b0:d2:74:1e:43:3b:f2:f1:cf:91:
cc:42:76:11:e3:3a:0a:8c:ef:a0:47:a5:ed:3e:fa:
33:19:af:5b:e4:73:91:a7:60:e5:81:8f:f6:c6:be:
24:4f:5d:98:9a:e6:61:6f:09:6d:8a:eb:c5:19:35:
d6:dd:8c:95:fb:bc:a9:43:fa:5b:e1:76:55:f6:29:
cc:46:f4:b8:bf:56:45:91:b1:e0:6f:2d:bc:f1:4c:
38:fb:12:6d:23:87:58:e7:24:37:f8:0d:a0:f2:e1:
9c:9d:47:34:a6:f1:7e:03:ab:63:a8:df:75:39:84:
4c:0c:f2:6e:3c:b2:3f:bb:b7:82:35:36:89:f4:71:
4b:7c:d1:82:55:5e:9e:32:29:86:bb:38:85:50:32:
9c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:73:BC:4A:DC:D6:F4:D3:61:9A:DF:7F:55:56:51:63:F4:6D:59:A1
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/JnO8StzW9NNhmt9_VVZRY_RtWaE.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:cb:d6:e5:7e:1d:07:6b:89:50:64:dc:77:85:6b:a9:c8:2c:
37:ca:c6:3b:fe:ea:b6:93:38:f2:52:14:a4:e9:f3:11:20:37:
4c:01:a4:fc:59:ed:77:b0:75:8e:36:a8:90:3a:e9:0a:89:b8:
3a:05:5a:5f:93:0b:9d:55:0b:d2:19:ce:00:32:5a:cd:80:99:
d2:07:c9:8c:54:37:f0:61:70:2e:fe:85:ba:7f:9f:26:22:ff:
a2:ba:d4:17:ab:b2:94:49:ff:e7:5f:f8:77:97:86:6e:19:6a:
c9:0b:6d:ea:74:5d:dd:29:f3:68:ef:8a:b4:4e:5f:0a:1e:0e:
6f:20:44:93:4a:76:53:af:08:15:1e:f6:c3:d3:04:82:60:35:
6e:34:4f:0c:7f:e8:c6:68:a9:5e:83:c2:56:13:e4:f2:86:f4:
8e:bc:25:a0:77:c8:4c:49:c4:e9:b3:f7:7b:b4:9c:2b:9a:f1:
39:5b:d7:8b:ad:36:c4:0f:ad:fb:51:4f:bd:54:28:ce:67:fc:
08:9b:93:b2:98:b8:0a:87:35:94:5a:7d:eb:6e:63:27:0a:f5:
0e:cd:7a:d4:12:92:3b:9f:87:a7:61:26:c4:d7:5c:ca:d2:d2:
0a:a4:97:af:7b:46:f7:8d:ac:fe:2a:33:dc:a0:1d:a5:5c:15:
34:57:aa:f4
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRw4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA0Mjcw
MDMwMDhaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDI2NzNCQzRBRENENkY0
RDM2MTlBREY3RjU1NTY1MTYzRjQ2RDU5QTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCnKWbMtB7WH+WQb4Rj9KiOQOIzLg20PjcE7ukBKPSOrE/BQT+u
D8ENMnAk7ragnm8fgMw6l7ytIw5epf7MF7EoOBWBoOideajG32mTNA6U0In8RgtG
170+BhFHfsLrCO5yFdGr33qaQOwmjo8UsNJ0HkM78vHPkcxCdhHjOgqM76BHpe0+
+jMZr1vkc5GnYOWBj/bGviRPXZia5mFvCW2K68UZNdbdjJX7vKlD+lvhdlX2KcxG
9Li/VkWRseBvLbzxTDj7Em0jh1jnJDf4DaDy4ZydRzSm8X4Dq2Oo33U5hEwM8m48
sj+7t4I1Non0cUt80YJVXp4yKYa7OIVQMpwBAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUJnO8StzW9NNhmt9/VVZRY/RtWaEwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9Kbk84U3R6VzlOTmhtdDlfVlZaUllfUnRXYUUucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL8wDQYJKoZIhvcNAQELBQADggEB
ACvL1uV+HQdriVBk3HeFa6nILDfKxjv+6raTOPJSFKTp8xEgN0wBpPxZ7XewdY42
qJA66QqJuDoFWl+TC51VC9IZzgAyWs2AmdIHyYxUN/BhcC7+hbp/nyYi/6K61Ber
spRJ/+df+HeXhm4ZaskLbep0Xd0p82jvirROXwoeDm8gRJNKdlOvCBUe9sPTBIJg
NW40Twx/6MZoqV6DwlYT5PKG9I68JaB3yExJxOmz93u0nCua8Tlb14utNsQPrftR
T71UKM5n/Aibk7KYuAqHNZRafetuYycK9Q7NetQSkjufh6dhJsTXXMrS0gqkl697
RveNrP4qM9ygHaVcFTRXqvQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org