Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/UQtbuKC60Mkyr1c_7z6RN56OOdU.roa
File: UQtbuKC60Mkyr1c_7z6RN56OOdU.roa (raw, json)
Hash identifier: hGFiZivZrGeYjH4NQz2sN4mLiX+7nhs6nmUzvlUT/6c=
Subject key identifier: 51:0B:5B:B8:A0:BA:D0:C9:32:AF:57:3F:EF:3E:91:37:9E:8E:39:D5
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 43C8
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/UQtbuKC60Mkyr1c_7z6RN56OOdU.roa
Signing time: Sat 26 Feb 2022 00:30:08 +0000
ROA not before: Sat 26 Feb 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17352 (0x43c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 26 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=510B5BB8A0BAD0C932AF573FEF3E91379E8E39D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:91:bf:0a:10:3a:fb:f7:2f:97:b0:f9:97:b8:
1a:2d:8e:9e:4c:92:97:6a:fe:03:d1:32:69:f6:da:
ee:ac:f4:01:5a:f8:35:52:0c:27:a6:de:50:83:c6:
6d:cf:25:01:65:fd:7b:fc:8f:28:3c:d1:07:6f:90:
10:8d:4f:b3:ea:17:e0:f8:84:10:e0:21:8c:18:87:
38:2f:e7:dc:db:f8:7f:4e:ed:84:98:b1:57:c3:3c:
b8:00:6c:65:50:d3:4e:5f:1b:1e:8c:e8:2d:32:1f:
c4:bd:bd:95:ed:c3:af:60:f9:ee:fd:6a:47:12:c1:
4b:c1:82:10:c6:ca:24:a5:b3:e4:6d:51:61:4b:92:
51:db:92:e6:90:89:46:ae:53:c1:21:b6:3f:af:d8:
e0:61:87:83:22:8f:51:98:26:ed:1c:21:d1:11:d3:
48:6d:5f:ae:3b:a9:3e:68:04:a0:f6:fd:63:cd:00:
33:41:b7:d2:cf:17:15:29:ff:85:52:0c:63:e3:a6:
3a:8e:a1:60:31:ac:e5:bb:2b:c7:f4:5d:33:e5:ac:
5d:4e:89:bc:c0:fa:cb:01:48:8a:e2:d5:6a:51:ba:
16:77:44:9b:67:5b:00:ca:48:28:2d:e1:c5:97:47:
a2:a2:6d:5a:aa:88:fc:da:4c:c0:67:80:5c:87:7a:
b1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:0B:5B:B8:A0:BA:D0:C9:32:AF:57:3F:EF:3E:91:37:9E:8E:39:D5
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/UQtbuKC60Mkyr1c_7z6RN56OOdU.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
13:8f:8f:a8:c3:ed:94:eb:ab:8a:8e:e8:a1:81:68:7c:db:36:
70:08:a0:76:96:b3:ed:22:42:76:5e:c8:00:a0:11:1f:45:a1:
2d:d5:e5:44:66:96:06:84:c3:ca:d4:b7:6a:29:4c:1c:18:d5:
8f:09:5a:c8:37:61:48:34:9e:05:9f:09:74:50:0d:a7:ed:4d:
17:0d:08:cd:40:e8:0e:bf:ea:60:30:8b:64:e1:ee:4b:3b:01:
a1:64:ea:27:e7:7e:35:a8:ad:1e:05:73:28:7e:4b:f4:c9:9e:
1c:81:91:27:83:18:7a:46:b1:2b:83:c0:8c:0c:04:b7:27:b4:
07:64:4b:e1:ec:27:95:ef:25:69:6a:49:e9:19:47:24:47:60:
54:20:1b:96:df:25:a9:88:d4:b1:bd:c8:75:bb:55:e6:f0:c1:
2a:81:a7:4b:1d:22:28:fd:4e:c8:a5:8b:52:e3:51:55:b5:07:
33:d2:99:46:b9:a7:8d:d9:15:9a:2d:86:40:5d:d9:59:5f:f7:
18:5a:b9:ac:1a:eb:d8:da:79:9b:8c:3a:88:7b:78:2a:d1:fc:
54:96:3a:20:23:5b:64:b0:1a:7b:e9:9e:70:9e:f8:f7:c8:7a:
78:c7:54:3b:b5:38:11:e4:82:78:31:db:64:63:51:19:78:e1:
84:e0:35:40
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICQ8gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAyMjYw
MDMwMDhaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKDUxMEI1QkI4QTBCQUQw
QzkzMkFGNTczRkVGM0U5MTM3OUU4RTM5RDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1kb8KEDr79y+XsPmXuBotjp5Mkpdq/gPRMmn22u6s9AFa+DVS
DCem3lCDxm3PJQFl/Xv8jyg80QdvkBCNT7PqF+D4hBDgIYwYhzgv59zb+H9O7YSY
sVfDPLgAbGVQ005fGx6M6C0yH8S9vZXtw69g+e79akcSwUvBghDGyiSls+RtUWFL
klHbkuaQiUauU8Ehtj+v2OBhh4Mij1GYJu0cIdER00htX647qT5oBKD2/WPNADNB
t9LPFxUp/4VSDGPjpjqOoWAxrOW7K8f0XTPlrF1OibzA+ssBSIri1WpRuhZ3RJtn
WwDKSCgt4cWXR6KibVqqiPzaTMBngFyHerE/AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUUQtbuKC60Mkyr1c/7z6RN56OOdUwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9VUXRidUtDNjBNa3lyMWNfN3o2Uk41Nk9PZFUucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL8wDQYJKoZIhvcNAQELBQADggEB
ABOPj6jD7ZTrq4qO6KGBaHzbNnAIoHaWs+0iQnZeyACgER9FoS3V5URmlgaEw8rU
t2opTBwY1Y8JWsg3YUg0ngWfCXRQDaftTRcNCM1A6A6/6mAwi2Th7ks7AaFk6ifn
fjWorR4Fcyh+S/TJnhyBkSeDGHpGsSuDwIwMBLcntAdkS+HsJ5XvJWlqSekZRyRH
YFQgG5bfJamI1LG9yHW7VebwwSqBp0sdIij9Tsili1LjUVW1BzPSmUa5p43ZFZot
hkBd2Vlf9xhauawa69jaeZuMOoh7eCrR/FSWOiAjW2SwGnvpnnCe+PfIenjHVDu1
OBHkgngx22RjURl44YTgNUA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org