Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/NV7xFqn_nN9sQ-ynf8xhj7Q4DzQ.roa
File: NV7xFqn_nN9sQ-ynf8xhj7Q4DzQ.roa (raw, json)
Hash identifier: 9fzXF6KVw9d0App8WpRbltepPd/B75GHtExmMyWNEP4=
Subject key identifier: 35:5E:F1:16:A9:FF:9C:DF:6C:43:EC:A7:7F:CC:61:8F:B4:38:0F:34
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 45C2
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/NV7xFqn_nN9sQ-ynf8xhj7Q4DzQ.roa
Signing time: Sun 03 Apr 2022 00:30:10 +0000
ROA not before: Sun 03 Apr 2022 00:30:10 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17858 (0x45c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 3 00:30:10 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=355EF116A9FF9CDF6C43ECA77FCC618FB4380F34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:51:d8:dc:2f:4c:1c:86:07:28:67:c7:0c:a5:
4c:61:c0:df:d2:a8:40:72:ee:c8:91:30:9a:83:ac:
dc:cb:5a:c7:5c:1c:d4:a8:2d:d4:5b:fa:5f:18:f4:
65:95:e7:01:fe:ae:81:ca:4f:49:66:52:e0:51:75:
9f:94:68:1c:34:3e:cb:14:ac:d9:43:fe:03:e8:08:
eb:92:a7:3d:69:f3:b8:eb:ef:4f:ae:57:84:fa:40:
68:82:4f:8a:ac:74:d1:39:4c:c8:89:7f:04:85:b9:
71:4a:0d:f5:9d:43:01:72:0a:89:c5:07:50:19:20:
3c:b8:55:f1:b5:ee:58:c0:c9:6d:84:a6:98:56:c9:
43:fc:ba:18:c6:c7:f4:0b:af:0b:d7:e5:6a:78:e6:
61:bb:54:64:be:10:28:f3:0a:f2:37:1d:8d:0c:1e:
c6:58:2a:58:f9:af:af:5e:b0:93:3b:55:50:53:f0:
0f:d3:77:de:60:85:c5:e5:ad:c5:5a:52:e7:7d:56:
c2:dd:94:0d:af:7b:f5:10:64:c6:08:4d:1a:8f:8b:
d8:5d:8c:e6:e1:35:2e:81:f3:67:a6:8b:67:2a:9a:
aa:b9:07:20:17:fd:8e:43:c1:4f:41:d5:28:0d:12:
12:26:3b:ad:0a:2f:31:eb:d9:80:f5:be:c7:c5:cf:
7d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5E:F1:16:A9:FF:9C:DF:6C:43:EC:A7:7F:CC:61:8F:B4:38:0F:34
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/NV7xFqn_nN9sQ-ynf8xhj7Q4DzQ.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:c2:de:e5:c5:e7:c4:8d:32:69:85:1d:2c:80:44:d0:15:0e:
b3:3a:fe:30:8a:88:a9:27:ae:5a:fc:45:c0:0d:b2:73:cb:c2:
56:22:b9:7c:d9:98:fe:6c:f6:e5:82:35:0a:12:04:32:b1:00:
fd:93:37:61:64:e2:bc:83:23:1b:29:a5:d4:1c:40:e6:7e:ff:
6e:84:76:44:56:e8:c6:da:4f:8d:f0:ab:5e:97:7a:94:0c:91:
8b:d2:94:98:c6:7e:8e:86:0e:6c:f4:94:9c:83:bf:04:5e:af:
2e:96:7e:5e:f8:24:48:ad:ca:bb:4b:18:a5:35:ea:2c:c3:cc:
52:5e:49:67:75:d3:52:b5:0f:ce:01:d3:1b:76:ab:97:bb:90:
20:12:38:ae:26:bb:41:e6:73:17:80:1a:f4:59:ff:89:80:15:
4c:99:32:98:b8:c6:a5:28:ad:45:34:db:e9:eb:a3:86:75:5e:
03:87:36:5b:5b:d8:8a:34:b6:d6:ca:f2:55:ed:72:1d:40:e7:
a6:e6:09:db:a6:f8:21:18:d8:e2:a6:d1:b0:0a:a7:82:56:e3:
fc:3b:49:f7:f1:dd:8b:cc:5d:fa:dd:c7:fd:ad:5f:1e:97:a9:
e4:69:30:1a:4f:3e:18:a4:de:4f:9b:de:f4:a1:c6:12:93:14:
1c:34:d5:84
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRcIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA0MDMw
MDMwMTBaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDM1NUVGMTE2QTlGRjlD
REY2QzQzRUNBNzdGQ0M2MThGQjQzODBGMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8UdjcL0wchgcoZ8cMpUxhwN/SqEBy7siRMJqDrNzLWsdcHNSo
LdRb+l8Y9GWV5wH+roHKT0lmUuBRdZ+UaBw0PssUrNlD/gPoCOuSpz1p87jr70+u
V4T6QGiCT4qsdNE5TMiJfwSFuXFKDfWdQwFyConFB1AZIDy4VfG17ljAyW2EpphW
yUP8uhjGx/QLrwvX5Wp45mG7VGS+ECjzCvI3HY0MHsZYKlj5r69esJM7VVBT8A/T
d95ghcXlrcVaUud9VsLdlA2ve/UQZMYITRqPi9hdjObhNS6B82emi2cqmqq5ByAX
/Y5DwU9B1SgNEhImO60KLzHr2YD1vsfFz319AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUNV7xFqn/nN9sQ+ynf8xhj7Q4DzQwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9OVjd4RnFuX25OOXNRLXluZjh4aGo3UTREelEucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL0wDQYJKoZIhvcNAQELBQADggEB
AD7C3uXF58SNMmmFHSyARNAVDrM6/jCKiKknrlr8RcANsnPLwlYiuXzZmP5s9uWC
NQoSBDKxAP2TN2Fk4ryDIxsppdQcQOZ+/26EdkRW6MbaT43wq16XepQMkYvSlJjG
fo6GDmz0lJyDvwRery6Wfl74JEityrtLGKU16izDzFJeSWd101K1D84B0xt2q5e7
kCASOK4mu0HmcxeAGvRZ/4mAFUyZMpi4xqUorUU02+nro4Z1XgOHNltb2Io0ttbK
8lXtch1A56bmCdum+CEY2OKm0bAKp4JW4/w7Sffx3YvMXfrdx/2tXx6XqeRpMBpP
Phik3k+b3vShxhKTFBw01YQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org