Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/X7PGUPNSUc_ow8GW2jMyMpQQGxo.roa
File: X7PGUPNSUc_ow8GW2jMyMpQQGxo.roa (raw, json)
Hash identifier: 3CObdJ6KhdBJWJvny7Jn9CWw2FndimGkWNLOUR/0KjU=
Subject key identifier: 5F:B3:C6:50:F3:52:51:CF:E8:C3:C1:96:DA:33:32:32:94:10:1B:1A
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4569
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/X7PGUPNSUc_ow8GW2jMyMpQQGxo.roa
Signing time: Mon 28 Mar 2022 00:30:10 +0000
ROA not before: Mon 28 Mar 2022 00:30:10 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17769 (0x4569)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 28 00:30:10 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=5FB3C650F35251CFE8C3C196DA33323294101B1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f8:d4:2c:3b:a7:43:75:97:ed:d5:70:4a:d1:
33:12:29:a1:14:87:bd:1e:8e:b9:89:43:87:ce:14:
16:e5:1c:39:86:8d:cc:d6:f8:df:af:96:09:2b:d8:
da:08:9d:59:93:bf:1f:a5:0e:13:00:01:31:c8:bd:
2e:26:3b:79:06:3b:2e:8c:e6:64:b2:73:0e:06:16:
bd:c1:cc:8c:17:5f:ba:1c:f6:07:c5:36:c2:42:34:
31:5d:ad:de:18:90:98:d9:30:61:c3:00:cc:ef:49:
66:1c:3e:ac:3b:af:b3:86:04:84:36:67:8a:a5:fb:
1c:91:f8:8a:e1:46:f9:64:cb:69:7c:e6:e5:10:08:
d5:31:a9:0d:c8:fc:91:cc:5f:69:9b:1a:78:c9:1e:
55:a8:12:c1:1b:6a:0c:d1:1a:c4:89:80:7e:3b:d0:
2b:6d:e0:c6:83:d6:a6:b8:33:5f:a0:8f:08:6c:d7:
ad:b9:6c:12:1d:78:8b:52:49:ea:1d:0a:c3:b2:8e:
70:9e:a5:48:f3:41:d5:83:3f:3c:92:cf:47:df:1c:
02:5a:bb:2f:2c:7f:79:93:c9:18:a7:a0:47:f3:79:
10:7b:db:9a:e3:d9:af:3a:2d:f1:83:db:f2:e9:68:
d2:70:20:b1:e9:82:43:7a:64:cc:82:d5:52:c9:ab:
36:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B3:C6:50:F3:52:51:CF:E8:C3:C1:96:DA:33:32:32:94:10:1B:1A
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/X7PGUPNSUc_ow8GW2jMyMpQQGxo.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
67:d6:60:d4:a8:2e:fe:f3:dd:48:9a:d6:90:bf:e8:51:c9:d4:
0c:0f:c2:1b:c7:13:aa:c0:8d:7a:15:bf:20:db:55:fa:1f:00:
22:97:7c:2e:4d:03:c3:0c:4a:70:7f:5d:8c:a7:ce:dd:c3:99:
71:7f:83:15:19:20:f0:fa:ed:0d:77:7d:16:e3:17:03:46:d1:
40:73:0a:0b:f3:2d:70:f2:cd:65:5c:7e:a8:a4:9b:a7:09:bc:
53:06:3d:71:03:cc:a7:79:cd:b8:bd:f9:f4:90:5c:2e:bd:66:
e0:9d:00:54:9f:a7:fc:6c:f5:e8:ad:9c:f3:1e:be:36:2f:39:
da:bd:38:c1:b0:21:3e:84:5a:33:26:a2:d7:e1:38:c9:c4:cc:
a8:a4:ea:47:b1:34:c8:49:28:45:9c:c1:9c:27:2a:4e:dc:65:
03:18:6b:8b:f2:f6:ec:55:4f:b7:ce:41:85:04:12:94:b9:34:
e1:ed:6c:df:30:06:b0:1c:15:cd:39:70:dc:fb:8c:c0:a4:4f:
40:33:56:ef:df:45:5a:25:95:f8:a3:bd:c5:31:85:22:7f:51:
1e:41:06:b2:17:ec:cb:31:07:71:55:7f:bd:44:e5:c7:45:bd:
94:74:5a:6b:c4:ae:92:5a:5e:ed:6b:73:e4:f7:2c:19:cb:ba:
10:df:54:1e
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRWkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAzMjgw
MDMwMTBaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKDVGQjNDNjUwRjM1MjUx
Q0ZFOEMzQzE5NkRBMzMzMjMyOTQxMDFCMUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDE+NQsO6dDdZft1XBK0TMSKaEUh70ejrmJQ4fOFBblHDmGjczW
+N+vlgkr2NoInVmTvx+lDhMAATHIvS4mO3kGOy6M5mSycw4GFr3BzIwXX7oc9gfF
NsJCNDFdrd4YkJjZMGHDAMzvSWYcPqw7r7OGBIQ2Z4ql+xyR+IrhRvlky2l85uUQ
CNUxqQ3I/JHMX2mbGnjJHlWoEsEbagzRGsSJgH470Ctt4MaD1qa4M1+gjwhs1625
bBIdeItSSeodCsOyjnCepUjzQdWDPzySz0ffHAJauy8sf3mTyRinoEfzeRB725rj
2a86LfGD2/LpaNJwILHpgkN6ZMyC1VLJqzaxAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUX7PGUPNSUc/ow8GW2jMyMpQQGxowHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9YN1BHVVBOU1VjX293OEdXMmpNeU1wUVFHeG8ucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL8wDQYJKoZIhvcNAQELBQADggEB
AGfWYNSoLv7z3Uia1pC/6FHJ1AwPwhvHE6rAjXoVvyDbVfofACKXfC5NA8MMSnB/
XYynzt3DmXF/gxUZIPD67Q13fRbjFwNG0UBzCgvzLXDyzWVcfqikm6cJvFMGPXED
zKd5zbi9+fSQXC69ZuCdAFSfp/xs9eitnPMevjYvOdq9OMGwIT6EWjMmotfhOMnE
zKik6kexNMhJKEWcwZwnKk7cZQMYa4vy9uxVT7fOQYUEEpS5NOHtbN8wBrAcFc05
cNz7jMCkT0AzVu/fRVollfijvcUxhSJ/UR5BBrIX7MsxB3FVf71E5cdFvZR0WmvE
rpJaXu1rc+T3LBnLuhDfVB4=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org