Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/XDOxNAm-dzwsuT0KOd_nVlYXBo8.roa
File: XDOxNAm-dzwsuT0KOd_nVlYXBo8.roa (raw, json)
Hash identifier: dDYteWybmUw9VyN6GE7AO1G7oGoMNsA/2XRrjCXVReU=
Subject key identifier: 5C:33:B1:34:09:BE:77:3C:2C:B9:3D:0A:39:DF:E7:56:56:17:06:8F
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4344
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/XDOxNAm-dzwsuT0KOd_nVlYXBo8.roa
Signing time: Wed 16 Feb 2022 00:30:08 +0000
ROA not before: Wed 16 Feb 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17220 (0x4344)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 16 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=5C33B13409BE773C2CB93D0A39DFE7565617068F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fe:89:38:2b:24:de:9b:82:04:55:df:4c:fc:
65:1f:65:13:28:8e:e5:f6:61:80:2c:db:4f:ab:e0:
66:c8:04:6b:71:2f:5d:72:f8:bc:77:34:25:f8:24:
51:a9:0e:06:63:c4:8c:20:a2:91:28:b8:15:0e:9f:
81:68:6e:04:25:f7:6c:39:6d:f5:54:fc:8b:c8:cc:
49:00:d0:fa:9b:69:3f:9f:8a:76:f9:30:60:a2:a7:
f0:82:5e:51:bb:04:91:e7:9e:2a:b6:5e:4f:a3:a0:
79:58:f7:d2:57:b9:5b:bc:5a:1b:0d:23:6d:27:ba:
e8:1f:88:9b:9f:16:8c:4f:ac:1d:94:18:4f:c4:e9:
37:39:40:33:84:10:f2:41:4b:1d:5c:1c:d6:59:6a:
bf:62:bd:b5:22:ff:47:87:cc:64:cb:8b:fd:a2:a5:
c6:b1:7f:12:2d:ad:83:4d:8b:0d:ec:ac:19:5d:3d:
b0:85:2d:71:d1:f4:cd:3d:c9:ff:a7:64:21:de:ec:
9d:d5:58:c8:b1:66:c0:51:28:35:65:ec:1e:94:de:
ba:4a:7f:a9:29:fe:df:0e:3c:3f:e5:76:41:ca:55:
ba:9e:0c:7c:c3:af:cb:15:6e:e1:e7:78:44:d7:df:
df:95:dd:11:33:cb:14:a2:1f:1b:9e:b2:d0:dc:60:
a0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:33:B1:34:09:BE:77:3C:2C:B9:3D:0A:39:DF:E7:56:56:17:06:8F
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/XDOxNAm-dzwsuT0KOd_nVlYXBo8.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
80:40:22:13:39:a7:44:46:be:bf:8a:98:2e:ed:f3:33:03:ec:
71:e4:e2:13:53:49:e1:36:3d:99:36:9e:49:f9:d9:e8:01:da:
57:72:f4:80:83:f4:cf:a2:a0:54:d3:a4:18:98:5e:fc:55:3a:
f1:a3:01:18:26:1a:75:5c:96:50:90:bc:23:80:c9:14:88:46:
6a:4b:60:72:07:cc:8d:85:c8:40:3a:a6:76:3f:1d:91:b9:86:
60:e8:74:91:bf:7f:b1:ca:35:1f:fe:18:59:9b:92:70:ee:ea:
62:09:31:48:be:d9:43:25:ff:f5:59:13:a9:b5:8c:dd:c3:87:
92:ee:96:79:8f:a8:d5:c2:1a:1c:b4:09:3e:44:5d:d0:d6:2a:
9c:12:c6:2b:88:d0:4c:66:64:5f:c6:91:a2:e8:82:5b:61:b8:
f7:75:fb:fe:21:49:71:57:2a:fa:b7:91:20:eb:8f:93:f5:e5:
14:92:2a:96:df:19:95:d0:a6:9b:f8:26:d5:c1:0e:6a:ae:e4:
c2:8f:f9:00:34:e4:99:95:fb:e3:1c:46:43:29:89:26:dc:0b:
68:b1:22:e8:84:02:99:81:2a:d9:2a:fe:fc:33:3c:fe:a7:34:
e9:23:c2:58:b1:b0:79:a5:6f:03:91:99:7f:07:df:b3:b8:37:
e8:6e:78:ae
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICQ0QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAyMTYw
MDMwMDhaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKDVDMzNCMTM0MDlCRTc3
M0MyQ0I5M0QwQTM5REZFNzU2NTYxNzA2OEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDD/ok4KyTem4IEVd9M/GUfZRMojuX2YYAs20+r4GbIBGtxL11y
+Lx3NCX4JFGpDgZjxIwgopEouBUOn4FobgQl92w5bfVU/IvIzEkA0PqbaT+finb5
MGCip/CCXlG7BJHnniq2Xk+joHlY99JXuVu8WhsNI20nuugfiJufFoxPrB2UGE/E
6Tc5QDOEEPJBSx1cHNZZar9ivbUi/0eHzGTLi/2ipcaxfxItrYNNiw3srBldPbCF
LXHR9M09yf+nZCHe7J3VWMixZsBRKDVl7B6U3rpKf6kp/t8OPD/ldkHKVbqeDHzD
r8sVbuHneETX39+V3REzyxSiHxuestDcYKB7AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUXDOxNAm+dzwsuT0KOd/nVlYXBo8wHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9YRE94TkFtLWR6d3N1VDBLT2RfblZsWVhCbzgucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL0wDQYJKoZIhvcNAQELBQADggEB
AIBAIhM5p0RGvr+KmC7t8zMD7HHk4hNTSeE2PZk2nkn52egB2ldy9ICD9M+ioFTT
pBiYXvxVOvGjARgmGnVcllCQvCOAyRSIRmpLYHIHzI2FyEA6pnY/HZG5hmDodJG/
f7HKNR/+GFmbknDu6mIJMUi+2UMl//VZE6m1jN3Dh5LulnmPqNXCGhy0CT5EXdDW
KpwSxiuI0ExmZF/GkaLoglthuPd1+/4hSXFXKvq3kSDrj5P15RSSKpbfGZXQppv4
JtXBDmqu5MKP+QA05JmV++McRkMpiSbcC2ixIuiEApmBKtkq/vwzPP6nNOkjwlix
sHmlbwORmX8H37O4N+hueK4=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org