Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/c-aYBcVv5hP_oix-1jE1aJMrXK0.roa
File: c-aYBcVv5hP_oix-1jE1aJMrXK0.roa (raw, json)
Hash identifier: k6laeKH65LT4KriCQZKGFrXpLeSJOFCDxrhktJMG8i4=
Subject key identifier: 73:E6:98:05:C5:6F:E6:13:FF:A2:2C:7E:D6:31:35:68:93:2B:5C:AD
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4264
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/c-aYBcVv5hP_oix-1jE1aJMrXK0.roa
Signing time: Mon 31 Jan 2022 00:45:09 +0000
ROA not before: Mon 31 Jan 2022 00:45:09 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16996 (0x4264)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jan 31 00:45:09 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=73E69805C56FE613FFA22C7ED6313568932B5CAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9c:3a:f4:2c:a5:2d:c3:91:91:45:3c:99:08:
ea:f7:34:80:04:3d:54:84:41:a2:ff:0c:63:78:f8:
94:8f:73:5d:1f:5a:0c:22:d9:de:2b:d7:60:c9:cd:
4b:19:a2:44:c7:d6:3c:d2:4d:93:3a:d3:79:a9:cd:
be:bd:2d:72:5e:b7:9e:82:0b:a1:e4:25:86:29:2e:
64:c4:eb:18:07:b4:ae:2a:12:4b:e9:03:c8:77:cc:
44:44:0c:d5:a5:85:a9:33:85:07:8d:bd:e3:82:35:
36:c4:be:15:c4:0a:c0:50:a5:bb:11:ba:3b:ce:1d:
2d:f0:02:0d:00:d2:39:2b:f0:30:57:56:52:6f:f2:
41:16:bc:be:7f:a4:a5:ca:cd:0b:cc:d1:51:b4:cf:
23:dc:78:2f:4c:76:3e:b9:50:0a:1e:4f:1d:9d:f8:
3f:14:f6:8f:f7:93:00:af:c5:0c:6a:ee:b8:ec:08:
a8:c1:e0:9c:13:16:c3:e0:d8:1d:ae:35:df:ae:9b:
99:88:6f:50:99:2b:8e:35:a6:b8:a6:7e:6f:66:07:
8d:4a:9e:80:14:5d:ff:1c:56:08:c7:18:92:80:73:
dd:df:82:51:1d:63:c8:97:90:15:60:f1:4f:09:03:
a0:31:2c:1a:c3:20:62:25:bd:38:60:d2:18:84:1d:
f4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E6:98:05:C5:6F:E6:13:FF:A2:2C:7E:D6:31:35:68:93:2B:5C:AD
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/c-aYBcVv5hP_oix-1jE1aJMrXK0.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
04:81:98:23:2c:f3:c9:84:d6:92:9e:a2:34:1a:fc:be:62:e6:
df:63:cc:3e:70:86:5e:8d:5f:f3:8e:99:59:a1:19:3e:99:2b:
1c:50:b4:bb:a9:7a:0c:49:fc:b1:ac:0a:69:d1:cb:5c:b9:6a:
d7:a3:bf:e2:cd:e6:af:6b:f6:9a:fe:05:49:dc:29:fe:69:08:
a8:f5:76:9e:05:59:04:fb:20:f4:2f:6a:21:5b:47:85:13:c3:
06:54:91:0d:76:3a:f3:f1:de:5a:b3:1d:19:6b:28:ee:2d:9e:
28:56:37:3d:75:39:18:3d:a3:7a:a6:56:95:ad:29:62:fb:51:
80:63:dc:f6:92:e0:82:c7:ce:1e:a9:ae:aa:31:7b:da:28:b3:
cb:a9:94:96:e4:65:80:d8:65:d2:b3:4b:3c:9e:a4:7a:a4:13:
3b:fe:cc:56:3f:c2:85:1b:ab:ee:9f:28:d3:10:7c:e6:07:75:
9f:3d:bf:fa:a4:34:fc:98:a6:10:1b:00:93:67:23:4c:bd:3d:
58:a8:cc:7e:7c:5d:7d:7c:47:6b:63:c8:a9:1d:1a:f9:57:b6:
23:4a:9c:84:07:9e:e1:49:58:d1:de:9f:20:78:31:e3:fe:4e:
bc:c2:75:1d:c0:7e:28:33:ac:66:b0:17:31:ac:e5:7f:a9:5d:
05:07:05:18
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICQmQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAxMzEw
MDQ1MDlaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKDczRTY5ODA1QzU2RkU2
MTNGRkEyMkM3RUQ2MzEzNTY4OTMyQjVDQUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5nDr0LKUtw5GRRTyZCOr3NIAEPVSEQaL/DGN4+JSPc10fWgwi
2d4r12DJzUsZokTH1jzSTZM603mpzb69LXJet56CC6HkJYYpLmTE6xgHtK4qEkvp
A8h3zEREDNWlhakzhQeNveOCNTbEvhXECsBQpbsRujvOHS3wAg0A0jkr8DBXVlJv
8kEWvL5/pKXKzQvM0VG0zyPceC9Mdj65UAoeTx2d+D8U9o/3kwCvxQxq7rjsCKjB
4JwTFsPg2B2uNd+um5mIb1CZK441primfm9mB41KnoAUXf8cVgjHGJKAc93fglEd
Y8iXkBVg8U8JA6AxLBrDIGIlvThg0hiEHfTnAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUc+aYBcVv5hP/oix+1jE1aJMrXK0wHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9jLWFZQmNWdjVoUF9vaXgtMWpFMWFKTXJYSzAucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL0wDQYJKoZIhvcNAQELBQADggEB
AASBmCMs88mE1pKeojQa/L5i5t9jzD5whl6NX/OOmVmhGT6ZKxxQtLupegxJ/LGs
CmnRy1y5atejv+LN5q9r9pr+BUncKf5pCKj1dp4FWQT7IPQvaiFbR4UTwwZUkQ12
OvPx3lqzHRlrKO4tnihWNz11ORg9o3qmVpWtKWL7UYBj3PaS4ILHzh6prqoxe9oo
s8uplJbkZYDYZdKzSzyepHqkEzv+zFY/woUbq+6fKNMQfOYHdZ89v/qkNPyYphAb
AJNnI0y9PViozH58XX18R2tjyKkdGvlXtiNKnIQHnuFJWNHenyB4MeP+TrzCdR3A
figzrGawFzGs5X+pXQUHBRg=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org