Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/ev-McEI50B0azMeIIGJArCqaZuw.roa
File: ev-McEI50B0azMeIIGJArCqaZuw.roa (raw, json)
Hash identifier: 1tXA6s/lpbqlER9GYc4P1Regn9tr8mmN6zc8w2OnURI=
Subject key identifier: 7A:FF:8C:70:42:39:D0:1D:1A:CC:C7:88:20:62:40:AC:2A:9A:66:EC
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 42FE
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ev-McEI50B0azMeIIGJArCqaZuw.roa
Signing time: Fri 11 Feb 2022 00:30:08 +0000
ROA not before: Fri 11 Feb 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17150 (0x42fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 11 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=7AFF8C704239D01D1ACCC788206240AC2A9A66EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3c:e2:c6:2c:87:83:01:13:79:21:27:27:97:
59:bc:54:8a:0b:a6:21:7f:b4:77:ea:92:df:d9:91:
81:80:43:0f:6b:54:56:c0:dd:45:95:e5:13:29:80:
e8:f7:7c:09:99:c4:4d:f9:ea:70:d2:79:3c:a3:8c:
57:65:7d:76:f1:27:96:4c:1f:e6:34:d4:20:35:f9:
cf:0d:f3:a2:4f:f1:4b:a9:15:c0:4b:17:06:16:49:
e6:b5:80:f8:74:e1:76:82:04:43:c2:57:ed:08:84:
50:9d:29:9f:a4:2a:01:78:5d:51:72:bf:75:d7:1d:
41:8b:d4:61:d5:94:eb:0d:fa:33:02:a3:2c:f6:61:
12:86:5f:a2:4c:f8:c8:9f:89:b7:04:1d:a3:11:dd:
01:0f:4e:3d:5c:bd:e5:fb:ce:4e:15:54:63:c8:a8:
ce:5f:de:a4:43:0e:98:7f:ec:9e:11:7c:0b:9c:db:
5b:cf:36:f1:4c:4b:0f:61:6a:2a:ae:5f:9a:4f:9f:
93:24:e8:90:2b:61:0d:e5:79:1f:43:1b:f2:08:f4:
06:e3:6a:66:46:9e:9a:1e:4b:7e:12:25:36:04:55:
ee:5f:3f:ba:5f:d7:7a:f0:1f:60:76:ed:df:ea:9b:
d4:ff:6c:65:88:fe:97:12:45:24:ec:fb:98:85:a7:
7d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FF:8C:70:42:39:D0:1D:1A:CC:C7:88:20:62:40:AC:2A:9A:66:EC
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ev-McEI50B0azMeIIGJArCqaZuw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:49:27:e3:38:59:82:2f:cb:16:a1:5d:76:eb:2b:bd:29:af:
bd:13:1d:f5:bd:9b:e2:90:11:b9:ce:81:e1:3e:4b:6b:01:98:
fa:fe:eb:c8:ac:71:76:c0:68:86:19:50:d5:f6:f1:08:55:f1:
0c:35:ae:39:fb:0b:42:6c:1b:c2:e1:b0:fc:5d:50:64:ba:43:
15:dc:8e:ff:2f:8d:79:eb:a0:f4:0c:ac:8e:d4:ba:dd:69:42:
18:78:cd:37:65:6e:80:84:ff:92:b2:9a:85:e2:26:60:22:32:
fc:a0:e2:f4:19:b5:b1:e6:41:c4:85:ab:80:64:07:0b:ba:05:
df:e5:08:3d:4a:ac:5b:e4:ec:39:44:7c:7d:b0:62:6c:e4:45:
4a:95:3f:db:4c:d1:b6:be:ab:b6:61:44:65:c9:7a:64:47:09:
82:bd:64:61:90:2d:e5:b3:4b:7e:35:d0:1a:c2:74:de:78:52:
2a:07:6d:92:00:ce:55:6b:e6:5e:6c:b6:db:60:54:aa:34:0c:
9a:b2:23:8c:66:17:d0:e0:b7:4e:52:35:d1:f7:5a:3f:ef:ba:
3a:aa:a5:93:6d:cc:d9:70:e6:ca:34:32:6e:c8:ec:d3:ce:7b:
9b:b4:4b:31:4c:e0:81:dc:59:89:fb:e6:ea:05:95:14:2a:f4:
72:b2:74:f2
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICQv4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAyMTEw
MDMwMDhaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKDdBRkY4QzcwNDIzOUQw
MUQxQUNDQzc4ODIwNjI0MEFDMkE5QTY2RUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFPOLGLIeDARN5IScnl1m8VIoLpiF/tHfqkt/ZkYGAQw9rVFbA
3UWV5RMpgOj3fAmZxE356nDSeTyjjFdlfXbxJ5ZMH+Y01CA1+c8N86JP8UupFcBL
FwYWSea1gPh04XaCBEPCV+0IhFCdKZ+kKgF4XVFyv3XXHUGL1GHVlOsN+jMCoyz2
YRKGX6JM+MifibcEHaMR3QEPTj1cveX7zk4VVGPIqM5f3qRDDph/7J4RfAuc21vP
NvFMSw9haiquX5pPn5Mk6JArYQ3leR9DG/II9AbjamZGnpoeS34SJTYEVe5fP7pf
13rwH2B27d/qm9T/bGWI/pcSRSTs+5iFp32JAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUev+McEI50B0azMeIIGJArCqaZuwwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9ldi1NY0VJNTBCMGF6TWVJSUdKQXJDcWFadXcucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL0wDQYJKoZIhvcNAQELBQADggEB
AMFJJ+M4WYIvyxahXXbrK70pr70THfW9m+KQEbnOgeE+S2sBmPr+68iscXbAaIYZ
UNX28QhV8Qw1rjn7C0JsG8LhsPxdUGS6QxXcjv8vjXnroPQMrI7Uut1pQhh4zTdl
boCE/5KymoXiJmAiMvyg4vQZtbHmQcSFq4BkBwu6Bd/lCD1KrFvk7DlEfH2wYmzk
RUqVP9tM0ba+q7ZhRGXJemRHCYK9ZGGQLeWzS3410BrCdN54UioHbZIAzlVr5l5s
tttgVKo0DJqyI4xmF9Dgt05SNdH3Wj/vujqqpZNtzNlw5so0Mm7I7NPOe5u0SzFM
4IHcWYn75uoFlRQq9HKydPI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org