Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/VAUEwUXi64rcVYECJicSrh1omHU.roa
File: VAUEwUXi64rcVYECJicSrh1omHU.roa (raw, json)
Hash identifier: ruWN0lPuxvMHh78uvIhDQ5vqyvpI/cTqrXFxRR5piUU=
Subject key identifier: 54:05:04:C1:45:E2:EB:8A:DC:55:81:02:26:27:12:AE:1D:68:98:75
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4496
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/VAUEwUXi64rcVYECJicSrh1omHU.roa
Signing time: Sun 13 Mar 2022 00:30:07 +0000
ROA not before: Sun 13 Mar 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17558 (0x4496)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 13 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=540504C145E2EB8ADC558102262712AE1D689875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:53:f5:fb:60:f0:88:d7:81:c8:31:50:c7:b3:
78:b7:ba:32:9f:32:55:e9:c5:4f:f8:62:36:a9:76:
8b:d0:3f:4b:8c:a1:88:39:91:ae:cd:d8:f4:b9:38:
08:24:12:75:5d:8d:c3:c5:be:f5:a5:70:de:9a:ff:
0b:42:03:b4:fa:55:90:e1:b5:b5:3d:f6:69:ef:b1:
77:2a:f6:57:23:07:64:fd:da:fe:66:7d:51:ea:e6:
1e:23:35:a4:e5:f2:4f:fd:a6:d4:53:42:e2:f5:f6:
5d:cf:21:a7:7e:12:b2:79:52:dc:6b:e3:f5:fa:4b:
d4:9c:1f:37:55:a5:86:aa:9d:41:d5:9c:9f:d2:48:
b4:c8:48:cc:e8:e5:14:2c:4c:05:57:91:e2:e0:e3:
48:8f:72:52:ec:65:e7:f8:ab:2c:ed:e9:78:c9:aa:
fd:93:eb:c4:e3:5c:ce:76:98:53:fe:11:76:89:2d:
d5:c8:e4:50:97:23:12:30:ad:c3:32:fc:35:cb:c6:
f0:ac:1e:b9:49:2b:e5:68:f4:ba:69:80:72:b3:28:
c7:29:8d:a6:f7:69:5d:37:1d:10:47:e8:9d:c8:5d:
37:25:18:eb:8c:f9:4c:84:ed:dc:b7:fd:26:c8:db:
ff:9d:dd:3c:b4:09:a0:87:9b:7c:a2:07:5e:46:dc:
63:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:05:04:C1:45:E2:EB:8A:DC:55:81:02:26:27:12:AE:1D:68:98:75
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/VAUEwUXi64rcVYECJicSrh1omHU.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:69:67:ce:4c:41:f6:56:c7:e0:42:c1:24:43:83:c7:58:34:
73:27:ff:a7:82:ae:5d:a7:97:8a:b7:8b:86:fb:f2:fb:c2:08:
19:61:32:5c:c8:45:0c:67:3d:e5:ca:95:9b:f8:8b:d7:29:3b:
c1:e2:09:31:1f:31:a2:c3:b9:9d:29:39:12:c0:53:55:fe:27:
dd:62:80:90:ea:0d:c5:f9:a2:30:27:6c:a1:16:1a:fb:1e:26:
25:ed:bf:a2:f4:e7:09:5f:57:74:19:7b:94:37:75:1f:a6:bd:
5c:d6:e6:96:c1:a2:c1:20:54:d1:fa:78:61:48:29:41:71:8a:
9a:73:fd:ea:6a:41:db:ba:cc:cb:db:b6:51:37:44:f8:d6:19:
99:31:ab:1c:51:5c:fd:9c:63:b9:8c:d7:d0:3a:53:e4:a1:de:
b0:7c:fd:03:17:8d:fc:2d:3f:29:0f:2e:e0:85:57:cc:ba:42:
b4:69:c2:d4:15:e7:db:9e:5a:01:fb:f7:d4:8c:87:0c:01:38:
49:01:7e:e0:c5:3f:06:55:3e:e3:22:7e:f2:2f:e0:fc:c6:05:
7d:16:33:2e:9c:b9:d1:d8:75:a0:30:8f:8e:11:71:de:22:4d:
8b:fb:09:16:54:4a:b4:bd:a2:38:52:8e:db:57:4d:94:b5:2f:
ea:31:30:56
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRJYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAzMTMw
MDMwMDdaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKDU0MDUwNEMxNDVFMkVC
OEFEQzU1ODEwMjI2MjcxMkFFMUQ2ODk4NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJU/X7YPCI14HIMVDHs3i3ujKfMlXpxU/4YjapdovQP0uMoYg5
ka7N2PS5OAgkEnVdjcPFvvWlcN6a/wtCA7T6VZDhtbU99mnvsXcq9lcjB2T92v5m
fVHq5h4jNaTl8k/9ptRTQuL19l3PIad+ErJ5Utxr4/X6S9ScHzdVpYaqnUHVnJ/S
SLTISMzo5RQsTAVXkeLg40iPclLsZef4qyzt6XjJqv2T68TjXM52mFP+EXaJLdXI
5FCXIxIwrcMy/DXLxvCsHrlJK+Vo9LppgHKzKMcpjab3aV03HRBH6J3IXTclGOuM
+UyE7dy3/SbI2/+d3Ty0CaCHm3yiB15G3GPnAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUVAUEwUXi64rcVYECJicSrh1omHUwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9WQVVFd1VYaTY0cmNWWUVDSmljU3JoMW9tSFUucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL8wDQYJKoZIhvcNAQELBQADggEB
AItpZ85MQfZWx+BCwSRDg8dYNHMn/6eCrl2nl4q3i4b78vvCCBlhMlzIRQxnPeXK
lZv4i9cpO8HiCTEfMaLDuZ0pORLAU1X+J91igJDqDcX5ojAnbKEWGvseJiXtv6L0
5wlfV3QZe5Q3dR+mvVzW5pbBosEgVNH6eGFIKUFxippz/epqQdu6zMvbtlE3RPjW
GZkxqxxRXP2cY7mM19A6U+Sh3rB8/QMXjfwtPykPLuCFV8y6QrRpwtQV59ueWgH7
99SMhwwBOEkBfuDFPwZVPuMifvIv4PzGBX0WMy6cudHYdaAwj44Rcd4iTYv7CRZU
SrS9ojhSjttXTZS1L+oxMFY=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org