Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/WCwkzNkoGLsm3q5mrxH2sCDaO1U.roa
File: WCwkzNkoGLsm3q5mrxH2sCDaO1U.roa (raw, json)
Hash identifier: GnjiWpx2fgcIxOwCtQc0XDcVRrkBBbQKWoroGaD3Z8c=
Subject key identifier: 58:2C:24:CC:D9:28:18:BB:26:DE:AE:66:AF:11:F6:B0:20:DA:3B:55
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 487E
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WCwkzNkoGLsm3q5mrxH2sCDaO1U.roa
Signing time: Mon 23 May 2022 00:30:07 +0000
ROA not before: Mon 23 May 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18558 (0x487e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 23 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=582C24CCD92818BB26DEAE66AF11F6B020DA3B55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c2:3a:e0:6e:35:81:0e:f9:fa:49:e8:16:f2:
e9:ca:c6:27:84:e9:c2:cb:6b:3a:2e:7d:22:f6:df:
24:80:21:f2:2e:9b:06:65:b9:ce:d5:52:70:d2:28:
a4:bc:be:03:ba:40:3d:4c:e8:bc:27:49:ec:aa:f1:
98:09:aa:2e:f9:ae:1b:e7:24:e3:40:b2:24:9e:cc:
f2:3c:1d:d2:1d:a3:67:45:35:10:0b:82:a8:b1:bc:
3b:0a:57:e1:fb:8a:2e:c0:9e:f3:17:62:e4:ef:b0:
3e:70:48:0a:fc:a3:63:90:77:17:6f:2a:c8:ce:af:
c2:cc:c9:ec:46:93:0d:1c:18:e7:37:a5:08:6a:5d:
aa:20:67:5e:b0:60:b6:c0:99:ec:01:a8:de:00:a7:
56:37:ed:88:e0:67:05:16:73:43:91:34:76:8b:54:
98:e6:f7:76:84:fc:4f:9c:f9:35:e4:fe:a7:52:b7:
0a:7d:32:e3:3d:9f:e6:53:69:1b:3c:54:95:c1:6c:
ac:0c:85:73:ea:2f:90:63:c2:13:80:e8:13:16:e3:
0e:0b:00:7c:6b:e9:2d:fa:3f:c5:b7:51:51:c8:c5:
73:df:7b:ce:db:58:16:16:61:8a:06:bf:26:f8:98:
4e:1e:d5:21:b2:16:90:49:03:2c:06:e9:70:54:70:
f6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2C:24:CC:D9:28:18:BB:26:DE:AE:66:AF:11:F6:B0:20:DA:3B:55
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WCwkzNkoGLsm3q5mrxH2sCDaO1U.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:60:c8:2a:c2:45:01:be:ee:8e:41:31:32:be:12:30:b7:a8:
c2:c2:8a:a8:c7:8f:f2:04:b6:05:08:c1:17:f0:92:8d:5f:95:
54:6b:48:3a:c5:61:d8:4d:e0:58:59:d0:00:3d:11:66:20:e5:
61:3b:3f:40:e8:62:94:41:75:c0:01:ce:40:37:05:43:95:53:
3b:ea:e1:fd:79:17:dd:78:0a:ae:91:8b:04:5c:4c:2a:71:8d:
1e:22:29:7e:c5:a8:d8:45:32:47:d9:31:b7:ad:1e:fb:dd:3a:
6a:44:fc:f3:c3:8e:39:48:e5:b8:b1:12:92:e5:72:8e:95:3a:
e0:d2:5d:0c:18:31:8b:6d:4f:f1:29:97:74:b8:09:8b:c9:37:
e7:88:f8:e8:ef:e7:60:ef:a3:7c:b1:3d:1b:ff:a5:a0:5b:85:
81:67:6c:92:28:96:97:6a:80:c6:3a:7d:e0:ed:55:dd:db:7d:
b0:13:65:32:8b:95:45:38:91:26:ca:86:b9:84:c9:27:10:71:
d1:01:38:15:3f:97:0a:69:0b:d5:0d:15:e2:c1:e8:74:59:a5:
6d:d2:4d:91:ac:d1:31:98:77:94:05:a0:4e:eb:46:b1:5a:e4:
3b:c3:56:7d:f1:06:81:d7:e1:18:d1:6b:1f:b9:0c:1f:4d:16:
ba:68:6c:ef
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICSH4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA1MjMw
MDMwMDdaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDU4MkMyNENDRDkyODE4
QkIyNkRFQUU2NkFGMTFGNkIwMjBEQTNCNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZwjrgbjWBDvn6SegW8unKxieE6cLLazoufSL23ySAIfIumwZl
uc7VUnDSKKS8vgO6QD1M6LwnSeyq8ZgJqi75rhvnJONAsiSezPI8HdIdo2dFNRAL
gqixvDsKV+H7ii7AnvMXYuTvsD5wSAr8o2OQdxdvKsjOr8LMyexGkw0cGOc3pQhq
XaogZ16wYLbAmewBqN4Ap1Y37YjgZwUWc0ORNHaLVJjm93aE/E+c+TXk/qdStwp9
MuM9n+ZTaRs8VJXBbKwMhXPqL5BjwhOA6BMW4w4LAHxr6S36P8W3UVHIxXPfe87b
WBYWYYoGvyb4mE4e1SGyFpBJAywG6XBUcPaLAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUWCwkzNkoGLsm3q5mrxH2sCDaO1UwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9XQ3drek5rb0dMc20zcTVtcnhIMnNDRGFPMVUucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL0wDQYJKoZIhvcNAQELBQADggEB
AL9gyCrCRQG+7o5BMTK+EjC3qMLCiqjHj/IEtgUIwRfwko1flVRrSDrFYdhN4FhZ
0AA9EWYg5WE7P0DoYpRBdcABzkA3BUOVUzvq4f15F914Cq6RiwRcTCpxjR4iKX7F
qNhFMkfZMbetHvvdOmpE/PPDjjlI5bixEpLlco6VOuDSXQwYMYttT/Epl3S4CYvJ
N+eI+Ojv52Dvo3yxPRv/paBbhYFnbJIolpdqgMY6feDtVd3bfbATZTKLlUU4kSbK
hrmEyScQcdEBOBU/lwppC9UNFeLB6HRZpW3STZGs0TGYd5QFoE7rRrFa5DvDVn3x
BoHX4RjRax+5DB9NFrpobO8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org