Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/P-MSVLy51oR4XE1CRO2DPDi6qIA.roa
File: P-MSVLy51oR4XE1CRO2DPDi6qIA.roa (raw, json)
Hash identifier: a3FnMedlrHURcZ583vYPhdfcmNKAY5ESPPx68A1rG48=
Subject key identifier: 3F:E3:12:54:BC:B9:D6:84:78:5C:4D:42:44:ED:83:3C:38:BA:A8:80
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 46C8
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/P-MSVLy51oR4XE1CRO2DPDi6qIA.roa
Signing time: Fri 22 Apr 2022 00:30:07 +0000
ROA not before: Fri 22 Apr 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18120 (0x46c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 22 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=3FE31254BCB9D684785C4D4244ED833C38BAA880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:48:8f:f8:d1:9e:be:7e:bc:6f:d6:03:e6:49:
52:d7:40:0b:24:4a:bd:6a:f2:bf:af:6a:ab:66:19:
d2:ef:30:98:c7:82:05:f6:34:bc:0a:b8:8c:f7:3a:
70:e3:64:3a:67:c3:ce:11:c0:7e:92:70:99:f9:8a:
d5:b8:19:ae:82:79:e1:6b:df:8e:2f:ac:b4:5b:ac:
93:cc:c0:67:21:5f:48:a2:95:8a:1d:28:2d:7e:8c:
7e:c3:8f:0d:9c:1a:f8:8d:45:83:bd:fb:d4:27:4a:
00:4c:28:d0:25:de:24:0c:ea:f9:b2:ed:46:19:bf:
51:af:3e:d5:77:34:1b:7b:e9:d6:20:bf:79:6c:c6:
f1:71:65:c6:3b:c5:e0:d6:66:c1:17:83:3d:58:6f:
33:67:a3:d6:b8:32:d0:f1:20:e9:57:2d:89:bb:6e:
4b:ea:a2:09:12:70:d4:64:00:eb:d1:0c:d8:a4:1b:
cf:8b:63:e7:1c:d8:8b:a1:da:b7:36:7e:aa:25:2f:
d8:52:24:0b:15:56:db:6c:ae:1a:5f:7f:e6:c1:9e:
5f:20:04:b9:7a:b4:fd:a0:73:85:b9:6c:b4:e8:81:
11:70:d1:e6:e4:6b:39:d6:fb:ad:f7:1c:70:5c:59:
ad:6f:38:41:75:b6:94:3f:f0:3f:2a:06:99:71:8b:
19:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E3:12:54:BC:B9:D6:84:78:5C:4D:42:44:ED:83:3C:38:BA:A8:80
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/P-MSVLy51oR4XE1CRO2DPDi6qIA.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
52:e1:85:c3:8e:01:a0:a5:c9:8f:c7:aa:53:dd:e2:b4:40:0c:
ed:75:bf:cb:c0:19:04:88:10:55:9c:04:f8:bc:55:cc:e6:fe:
21:a0:fa:71:38:a7:c6:93:d0:c1:ec:bf:00:26:e9:20:9b:ca:
f5:7a:d8:1c:28:ab:17:09:fb:d8:b6:97:0a:bd:84:42:25:f6:
11:61:96:52:8d:43:fa:76:db:9c:f9:98:31:bc:ea:19:23:77:
90:7b:39:ed:c3:26:ad:ec:be:fc:4c:86:c5:4a:ba:3c:fc:e0:
38:04:a2:6d:40:26:66:d3:4a:d2:36:e3:17:50:90:88:c2:9b:
67:4c:c5:4d:b2:90:b7:64:f8:90:8d:b4:80:e4:ee:e3:fd:bc:
4d:0b:90:22:85:01:67:34:c7:98:c7:80:9d:dc:c1:2c:45:dd:
43:df:7d:48:6b:33:7a:af:d8:08:0a:df:c7:ed:89:d3:39:e8:
74:a9:fc:08:74:62:f8:29:6e:bf:3e:4f:8c:4f:b9:db:10:87:
6f:3b:b0:15:ee:26:05:45:12:90:b4:8b:b3:a5:a2:c9:6f:30:
03:d7:b3:15:e4:d6:04:e7:91:b0:01:cc:69:21:2a:bb:ea:6d:
a4:b6:9f:dd:f2:7b:97:14:50:3b:aa:f5:bf:eb:32:32:06:0e:
8e:0f:5a:02
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRsgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA0MjIw
MDMwMDdaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDNGRTMxMjU0QkNCOUQ2
ODQ3ODVDNEQ0MjQ0RUQ4MzNDMzhCQUE4ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+SI/40Z6+frxv1gPmSVLXQAskSr1q8r+vaqtmGdLvMJjHggX2
NLwKuIz3OnDjZDpnw84RwH6ScJn5itW4Ga6CeeFr344vrLRbrJPMwGchX0iilYod
KC1+jH7Djw2cGviNRYO9+9QnSgBMKNAl3iQM6vmy7UYZv1GvPtV3NBt76dYgv3ls
xvFxZcY7xeDWZsEXgz1YbzNno9a4MtDxIOlXLYm7bkvqogkScNRkAOvRDNikG8+L
Y+cc2Iuh2rc2fqolL9hSJAsVVttsrhpff+bBnl8gBLl6tP2gc4W5bLTogRFw0ebk
aznW+633HHBcWa1vOEF1tpQ/8D8qBplxixkRAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUP+MSVLy51oR4XE1CRO2DPDi6qIAwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9QLU1TVkx5NTFvUjRYRTFDUk8yRFBEaTZxSUEucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL8wDQYJKoZIhvcNAQELBQADggEB
AFLhhcOOAaClyY/HqlPd4rRADO11v8vAGQSIEFWcBPi8Vczm/iGg+nE4p8aT0MHs
vwAm6SCbyvV62BwoqxcJ+9i2lwq9hEIl9hFhllKNQ/p225z5mDG86hkjd5B7Oe3D
Jq3svvxMhsVKujz84DgEom1AJmbTStI24xdQkIjCm2dMxU2ykLdk+JCNtIDk7uP9
vE0LkCKFAWc0x5jHgJ3cwSxF3UPffUhrM3qv2AgK38ftidM56HSp/Ah0Yvgpbr8+
T4xPudsQh287sBXuJgVFEpC0i7OloslvMAPXsxXk1gTnkbABzGkhKrvqbaS2n93y
e5cUUDuq9b/rMjIGDo4PWgI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org