Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/_P8bP-V4YOKaiL7QmIU_4-KUNXk.roa
File: _P8bP-V4YOKaiL7QmIU_4-KUNXk.roa (raw, json)
Hash identifier: om4DeszCp5oV01GRz2IMKNs5ALA3cBWi+wSotcI0NSg=
Subject key identifier: FC:FF:1B:3F:E5:78:60:E2:9A:88:BE:D0:98:85:3F:E3:E2:94:35:79
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 478C
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/_P8bP-V4YOKaiL7QmIU_4-KUNXk.roa
Signing time: Fri 06 May 2022 00:30:06 +0000
ROA not before: Fri 06 May 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18316 (0x478c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 6 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=FCFF1B3FE57860E29A88BED098853FE3E2943579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f7:62:eb:a6:7d:4f:2c:0f:58:f5:1e:f7:06:
05:f6:3e:f2:5d:a7:35:79:4b:89:15:18:d7:8f:fe:
ad:7e:d7:19:e2:06:88:7c:87:0c:0f:95:82:75:4f:
ce:3d:98:2f:e7:64:4f:0d:1c:55:5d:c2:29:e1:12:
c9:6d:9b:7d:1e:07:3e:36:e0:8f:fa:bc:8e:bc:c9:
54:63:ec:bf:f0:51:d2:0f:79:4e:79:e8:1c:fd:b5:
e5:91:09:e8:83:29:88:49:f4:73:a2:20:1b:a1:fd:
c3:c9:47:e3:0a:87:1d:f6:8f:bf:c4:23:36:a2:b3:
68:2f:10:43:5e:de:0d:dc:22:b1:2a:24:3c:ef:81:
5c:17:46:89:4c:ba:84:59:ce:e7:02:ec:41:1d:91:
1e:0c:37:17:19:31:ee:1b:ac:bb:a8:6c:cf:c4:93:
65:f8:23:e5:35:2c:05:43:68:34:c6:5d:35:b0:c5:
57:0c:ad:7d:04:b8:52:45:c5:24:7c:d3:09:79:08:
08:b0:54:44:a3:82:c1:64:ab:81:9c:92:7a:a3:cb:
27:e9:b5:da:d3:45:fb:f2:75:04:af:5f:02:25:de:
5a:00:ce:c8:8b:7c:57:34:c6:1c:4f:95:43:5e:db:
0f:f6:e2:79:e9:ce:6c:99:3f:67:9c:8a:0b:0e:be:
0f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FF:1B:3F:E5:78:60:E2:9A:88:BE:D0:98:85:3F:E3:E2:94:35:79
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/_P8bP-V4YOKaiL7QmIU_4-KUNXk.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:a5:50:85:50:59:da:dc:95:c9:90:50:6c:f0:b7:49:35:78:
00:de:eb:a3:09:be:68:68:61:f3:fb:80:cb:ff:76:a2:b1:7e:
d7:c3:5a:d9:c2:30:c0:5e:ce:34:b4:b2:99:5b:7a:67:85:b9:
3a:3f:56:92:4e:c2:fb:11:b7:4e:ad:5d:82:54:9a:51:a9:a6:
b7:0f:0b:86:75:b4:3f:d6:19:bc:14:f1:70:5f:8f:e9:46:c7:
5a:af:f8:44:5f:63:e5:e7:c9:04:12:a8:95:39:a9:65:29:8e:
6a:22:3f:7f:21:3c:bf:db:65:3c:21:2d:c6:b9:2d:4a:39:00:
0d:15:85:0d:b9:52:d5:b3:0f:b0:ae:57:05:f1:3a:51:2e:3d:
28:bf:3f:af:1c:3d:f6:e6:2a:ab:77:52:e2:e8:5c:ab:99:b8:
a7:03:4c:40:d8:ed:ee:c3:db:1d:e1:73:c6:7d:63:e6:d1:8d:
99:c8:37:00:68:43:4b:68:84:67:88:95:fa:67:64:2b:a3:31:
53:22:49:a5:dd:50:77:b2:30:b4:19:e2:2d:78:e3:01:44:a1:
d7:79:08:72:46:4c:54:44:2a:b1:f3:e1:1b:ba:74:89:71:fc:
c7:8a:67:df:a2:64:15:35:d8:68:e9:d7:bf:42:b9:9f:50:31:
0f:82:c5:30
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICR4wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA1MDYw
MDMwMDZaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKEZDRkYxQjNGRTU3ODYw
RTI5QTg4QkVEMDk4ODUzRkUzRTI5NDM1NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCR92Lrpn1PLA9Y9R73BgX2PvJdpzV5S4kVGNeP/q1+1xniBoh8
hwwPlYJ1T849mC/nZE8NHFVdwinhEsltm30eBz424I/6vI68yVRj7L/wUdIPeU55
6Bz9teWRCeiDKYhJ9HOiIBuh/cPJR+MKhx32j7/EIzais2gvEENe3g3cIrEqJDzv
gVwXRolMuoRZzucC7EEdkR4MNxcZMe4brLuobM/Ek2X4I+U1LAVDaDTGXTWwxVcM
rX0EuFJFxSR80wl5CAiwVESjgsFkq4GcknqjyyfptdrTRfvydQSvXwIl3loAzsiL
fFc0xhxPlUNe2w/24nnpzmyZP2ecigsOvg8vAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU/P8bP+V4YOKaiL7QmIU/4+KUNXkwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9fUDhiUC1WNFlPS2FpTDdRbUlVXzQtS1VOWGsucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL8wDQYJKoZIhvcNAQELBQADggEB
AHqlUIVQWdrclcmQUGzwt0k1eADe66MJvmhoYfP7gMv/dqKxftfDWtnCMMBezjS0
splbemeFuTo/VpJOwvsRt06tXYJUmlGpprcPC4Z1tD/WGbwU8XBfj+lGx1qv+ERf
Y+XnyQQSqJU5qWUpjmoiP38hPL/bZTwhLca5LUo5AA0VhQ25UtWzD7CuVwXxOlEu
PSi/P68cPfbmKqt3UuLoXKuZuKcDTEDY7e7D2x3hc8Z9Y+bRjZnINwBoQ0tohGeI
lfpnZCujMVMiSaXdUHeyMLQZ4i144wFEodd5CHJGTFREKrHz4Ru6dIlx/MeKZ9+i
ZBU12Gjp179CuZ9QMQ+CxTA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org