Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/TJx6tNnu9CysJCOO46zSewXlBYI.roa
File: TJx6tNnu9CysJCOO46zSewXlBYI.roa (raw, json)
Hash identifier: lqxENJcSZ9KvdhOpPPBPGXF4Nc2QBSa1PMBoiy6KIGk=
Subject key identifier: 4C:9C:7A:B4:D9:EE:F4:2C:AC:24:23:8E:E3:AC:D2:7B:05:E5:05:82
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4762
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/TJx6tNnu9CysJCOO46zSewXlBYI.roa
Signing time: Tue 03 May 2022 00:30:07 +0000
ROA not before: Tue 03 May 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18274 (0x4762)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 3 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=4C9C7AB4D9EEF42CAC24238EE3ACD27B05E50582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:90:f2:09:ac:5e:b0:b6:aa:fc:a5:de:96:dc:
a9:32:e3:89:6f:a4:cc:44:e6:bd:c3:56:46:20:82:
50:62:88:c6:b0:d7:48:69:ad:e9:1f:22:52:d8:84:
dc:82:be:80:f2:15:7b:3e:8f:0c:44:1b:a4:49:21:
3d:a9:07:1b:e5:76:b8:1e:77:8c:cd:7a:b7:65:9c:
40:36:48:d8:0c:24:e0:e8:b7:52:6a:f6:b2:b2:81:
21:fc:9b:bc:99:fb:a7:77:eb:aa:68:28:09:72:ea:
77:83:1b:61:5b:e1:37:93:91:4e:f7:f2:25:56:bc:
3c:48:ec:f0:7d:cd:1f:7a:c7:14:d5:81:45:5c:5a:
5a:16:e4:5a:71:3d:2a:53:cf:cb:63:51:d3:49:b4:
33:87:2b:9c:a4:f1:9f:bb:6b:6b:73:d2:09:b8:ad:
af:b8:11:cb:e0:d1:bc:07:26:0b:f1:fc:47:c1:fa:
6f:42:93:7f:d4:16:45:6d:51:9d:cd:97:3d:24:c9:
80:7c:bb:aa:c7:1e:b0:ab:4b:e0:e8:fc:4e:84:be:
cc:28:11:4b:69:49:57:a7:4d:fc:fd:7b:f4:b2:69:
20:cb:d3:ec:56:1e:60:65:8c:5c:e8:dd:53:31:1b:
63:25:9a:aa:5d:a4:6d:52:c4:bc:7b:fc:9c:1c:4d:
2f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9C:7A:B4:D9:EE:F4:2C:AC:24:23:8E:E3:AC:D2:7B:05:E5:05:82
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/TJx6tNnu9CysJCOO46zSewXlBYI.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
26:f7:ec:e8:0f:8f:5b:f4:d5:58:ef:98:f0:b1:af:bd:0f:b2:
b7:9d:98:f3:f6:cc:1f:4e:05:68:49:85:5c:7a:ce:a3:06:e4:
f5:ed:66:d9:1f:62:a9:f4:3d:5d:ff:84:fc:88:18:95:7e:db:
eb:2c:11:50:1b:32:1f:37:6f:5f:c7:5d:b3:16:96:10:6d:9a:
a7:80:b0:73:72:15:be:47:5f:bd:19:3d:00:08:46:54:c9:79:
70:d3:e6:9d:12:4b:2b:6f:de:d1:d7:dd:3a:21:c2:01:ba:e7:
53:ae:e3:fa:81:e7:db:46:b9:e8:ce:fa:6a:af:0a:48:dd:28:
d4:94:b9:a7:9e:19:85:57:0e:7c:9b:35:7d:f7:3c:2f:80:97:
d8:d8:04:09:53:1e:11:e2:d2:74:cd:bb:2c:e9:46:b5:7e:26:
28:48:b4:77:47:8b:3c:28:25:a5:26:c7:a1:f9:e6:c7:95:1d:
2a:8f:7b:6e:90:b1:2b:1e:ae:ff:55:7e:36:f0:a6:78:f6:ec:
9e:cd:37:4d:e5:ca:61:01:70:d0:16:06:63:81:a7:c4:2e:a5:
48:6d:41:25:33:3e:b7:dc:ee:ee:da:99:85:c2:46:4a:28:1a:
c3:40:e6:ce:20:7c:ed:b6:17:55:f9:52:ad:b4:5f:01:b8:ab:
51:4f:04:7d
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICR2IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA1MDMw
MDMwMDdaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDRDOUM3QUI0RDlFRUY0
MkNBQzI0MjM4RUUzQUNEMjdCMDVFNTA1ODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCkkPIJrF6wtqr8pd6W3Kky44lvpMxE5r3DVkYgglBiiMaw10hp
rekfIlLYhNyCvoDyFXs+jwxEG6RJIT2pBxvldrged4zNerdlnEA2SNgMJODot1Jq
9rKygSH8m7yZ+6d366poKAly6neDG2Fb4TeTkU738iVWvDxI7PB9zR96xxTVgUVc
WloW5FpxPSpTz8tjUdNJtDOHK5yk8Z+7a2tz0gm4ra+4Ecvg0bwHJgvx/EfB+m9C
k3/UFkVtUZ3Nlz0kyYB8u6rHHrCrS+Do/E6EvswoEUtpSVenTfz9e/SyaSDL0+xW
HmBljFzo3VMxG2MlmqpdpG1SxLx7/JwcTS9jAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUTJx6tNnu9CysJCOO46zSewXlBYIwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9USng2dE5udTlDeXNKQ09PNDZ6U2V3WGxCWUkucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL8wDQYJKoZIhvcNAQELBQADggEB
ACb37OgPj1v01VjvmPCxr70PsredmPP2zB9OBWhJhVx6zqMG5PXtZtkfYqn0PV3/
hPyIGJV+2+ssEVAbMh83b1/HXbMWlhBtmqeAsHNyFb5HX70ZPQAIRlTJeXDT5p0S
Sytv3tHX3TohwgG651Ou4/qB59tGuejO+mqvCkjdKNSUuaeeGYVXDnybNX33PC+A
l9jYBAlTHhHi0nTNuyzpRrV+JihItHdHizwoJaUmx6H55seVHSqPe26QsSserv9V
fjbwpnj27J7NN03lymEBcNAWBmOBp8QupUhtQSUzPrfc7u7amYXCRkooGsNA5s4g
fO22F1X5Uq20XwG4q1FPBH0=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org