Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/PBgRLDu3hUCqo00Ii6eOgUoc1hg.roa
File: PBgRLDu3hUCqo00Ii6eOgUoc1hg.roa (raw, json)
Hash identifier: 78z7IC0fQa/Mqwq52ZLBXexE9gt7GFhOrWf7UzjADkY=
Subject key identifier: 3C:18:11:2C:3B:B7:85:40:AA:A3:4D:08:8B:A7:8E:81:4A:1C:D6:18
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 48C4
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/PBgRLDu3hUCqo00Ii6eOgUoc1hg.roa
Signing time: Sat 28 May 2022 00:30:08 +0000
ROA not before: Sat 28 May 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18628 (0x48c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 28 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=3C18112C3BB78540AAA34D088BA78E814A1CD618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ee:f5:01:3c:96:b1:24:06:39:ba:36:2e:f3:
dd:5b:d2:8d:6f:e4:58:c1:bd:59:5c:e5:31:10:31:
dc:64:12:0b:78:9a:ba:e8:b6:57:f3:fa:6b:88:03:
6b:b5:62:e8:a7:c7:ae:9a:6b:3c:d1:fb:23:44:a6:
f9:f2:24:db:9f:1c:b8:81:2d:1c:9f:26:0b:6f:77:
00:ba:a3:df:5a:7f:8b:9a:20:09:ea:c3:4c:70:c0:
ee:80:6b:e9:af:2e:20:b8:b5:de:dc:35:ac:4c:20:
29:f1:8f:10:60:2e:34:3b:9e:26:db:a7:d6:15:20:
9d:cf:be:6f:19:20:d7:17:b8:77:ed:98:5c:f9:bd:
67:87:84:ff:df:88:d7:f8:d1:6d:9e:fb:4a:db:bd:
c4:be:b8:9f:5c:e2:70:e9:71:80:4f:bc:ae:b7:0c:
21:b8:02:fc:c2:b9:4c:ff:a4:8f:51:05:cc:fe:ed:
31:c4:41:0d:07:0b:73:24:08:c5:69:41:4b:dc:d6:
31:36:74:59:29:66:b0:dc:5b:f7:b9:2b:96:1a:48:
d9:b0:bb:25:47:17:35:50:08:01:e5:66:a0:13:40:
e5:46:c0:eb:2c:97:68:a9:fc:10:9f:58:e7:39:54:
a9:57:9f:48:6a:b0:aa:a1:8f:0a:78:db:ca:89:61:
22:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:18:11:2C:3B:B7:85:40:AA:A3:4D:08:8B:A7:8E:81:4A:1C:D6:18
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/PBgRLDu3hUCqo00Ii6eOgUoc1hg.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:48:e2:76:bf:b6:e3:d4:47:28:54:10:2d:21:6a:f6:69:47:
2a:35:ca:62:0c:2c:84:fd:12:47:8b:ed:c7:d7:1a:44:73:e7:
31:4c:95:ae:1b:e8:84:aa:3c:39:fa:a4:3b:21:21:2a:fd:b9:
1b:76:de:3f:74:56:79:40:ec:b6:44:fe:a0:83:c5:41:a6:58:
d9:0b:aa:e7:3c:3b:7e:c7:42:22:f7:6a:0a:7b:1f:94:0a:ed:
52:2f:58:41:38:9f:7c:5d:5d:77:8f:19:17:ed:63:ea:83:42:
0c:46:a1:39:c7:65:67:a8:70:39:c4:76:59:6d:9b:82:a0:12:
5a:c1:ac:8b:8d:fd:9c:88:24:69:75:57:07:4b:cb:d3:01:55:
43:57:1b:18:85:a0:da:fc:f4:4b:36:60:b6:a1:7e:65:81:3f:
16:5a:a1:5e:98:59:6b:7e:8c:86:08:f7:e8:af:0f:3d:d2:ae:
f9:a4:95:7c:49:ad:66:62:c9:d0:8f:c7:09:dd:40:26:54:d8:
47:65:c3:f8:dc:fe:f4:35:a7:0a:56:55:b9:34:71:84:0e:75:
fb:0c:b8:e6:fa:9c:72:5a:8e:34:6b:7e:17:e9:da:22:7d:48:
38:e1:80:2c:4b:92:6a:a3:18:4f:6e:fc:30:e4:61:38:1f:db:
3e:da:ff:f0
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICSMQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA1Mjgw
MDMwMDhaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDNDMTgxMTJDM0JCNzg1
NDBBQUEzNEQwODhCQTc4RTgxNEExQ0Q2MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCi7vUBPJaxJAY5ujYu891b0o1v5FjBvVlc5TEQMdxkEgt4mrro
tlfz+muIA2u1Yuinx66aazzR+yNEpvnyJNufHLiBLRyfJgtvdwC6o99af4uaIAnq
w0xwwO6Aa+mvLiC4td7cNaxMICnxjxBgLjQ7nibbp9YVIJ3Pvm8ZINcXuHftmFz5
vWeHhP/fiNf40W2e+0rbvcS+uJ9c4nDpcYBPvK63DCG4AvzCuUz/pI9RBcz+7THE
QQ0HC3MkCMVpQUvc1jE2dFkpZrDcW/e5K5YaSNmwuyVHFzVQCAHlZqATQOVGwOss
l2ip/BCfWOc5VKlXn0hqsKqhjwp428qJYSKFAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUPBgRLDu3hUCqo00Ii6eOgUoc1hgwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9QQmdSTER1M2hVQ3FvMDBJaTZlT2dVb2MxaGcucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL0wDQYJKoZIhvcNAQELBQADggEB
ALBI4na/tuPURyhUEC0havZpRyo1ymIMLIT9EkeL7cfXGkRz5zFMla4b6ISqPDn6
pDshISr9uRt23j90VnlA7LZE/qCDxUGmWNkLquc8O37HQiL3agp7H5QK7VIvWEE4
n3xdXXePGRftY+qDQgxGoTnHZWeocDnEdlltm4KgElrBrIuN/ZyIJGl1VwdLy9MB
VUNXGxiFoNr89Es2YLahfmWBPxZaoV6YWWt+jIYI9+ivDz3SrvmklXxJrWZiydCP
xwndQCZU2Edlw/jc/vQ1pwpWVbk0cYQOdfsMuOb6nHJajjRrfhfp2iJ9SDjhgCxL
kmqjGE9u/DDkYTgf2z7a//A=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org