Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/t5DEuysSbYIeSW4NrlpPzOFdt3Y.roa
File: t5DEuysSbYIeSW4NrlpPzOFdt3Y.roa (raw, json)
Hash identifier: EhAVYykIPrR/i5IJpuO8sW8HsOLDlCGDQgdxW+xXtaY=
Subject key identifier: B7:90:C4:BB:2B:12:6D:82:1E:49:6E:0D:AE:5A:4F:CC:E1:5D:B7:76
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4862
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/t5DEuysSbYIeSW4NrlpPzOFdt3Y.roa
Signing time: Sat 21 May 2022 00:30:09 +0000
ROA not before: Sat 21 May 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18530 (0x4862)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 21 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=B790C4BB2B126D821E496E0DAE5A4FCCE15DB776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:03:fa:7c:4a:69:ea:93:08:2f:fc:5a:3d:f0:
02:21:97:d1:47:30:db:55:c5:1b:d2:d4:da:6b:81:
0a:aa:c2:fd:79:e5:04:b5:1d:bb:fe:23:bb:3c:82:
27:63:b9:81:9e:ad:63:32:e6:24:3b:ad:e0:e1:a5:
1f:59:f8:96:7a:8b:65:23:22:42:83:18:3a:40:96:
10:96:c0:46:41:fe:f5:55:84:57:b6:d6:b9:a1:ee:
8a:7d:a4:27:60:70:32:9f:ec:9a:44:23:79:bc:d3:
d1:8b:2c:85:50:5f:5e:98:7e:ef:21:22:02:0d:3f:
6e:90:3e:1b:36:69:a3:e4:4b:d8:e5:0e:4d:2d:fa:
e2:1e:fe:82:c8:b8:ec:12:49:35:74:90:bb:f9:a7:
4a:0f:ce:9e:11:f6:3b:5f:b1:a2:57:85:34:b9:80:
67:ca:94:78:96:57:55:08:85:6b:e9:eb:7b:7c:79:
94:6b:67:85:fa:b8:10:e5:6c:35:f0:69:2f:03:fd:
39:d6:cd:7a:02:dd:75:4a:69:e4:45:35:26:37:16:
47:0f:f3:42:44:b5:8f:2f:1d:84:b3:e5:8e:cc:23:
1d:1e:75:82:f1:2e:e6:2e:fe:c5:72:74:f7:c9:da:
d1:05:bf:a8:9e:a7:fc:68:1d:61:f3:e7:3b:b4:83:
10:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:90:C4:BB:2B:12:6D:82:1E:49:6E:0D:AE:5A:4F:CC:E1:5D:B7:76
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/t5DEuysSbYIeSW4NrlpPzOFdt3Y.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
02:75:47:0b:2f:cb:69:c9:de:a6:87:fd:9d:85:84:c2:cd:c3:
08:51:1b:75:13:00:ba:6c:aa:1c:ea:64:59:71:db:6b:8e:03:
69:0d:d5:b8:42:4f:96:9a:fe:48:59:5c:f8:6c:ca:dd:4d:7a:
b9:6f:fb:0a:72:90:17:eb:db:39:c4:8c:26:f7:69:8c:6b:d1:
d2:09:ab:a6:80:c5:b4:7e:0f:a0:0d:3e:d0:ab:c2:e4:e9:36:
e3:83:7e:83:ae:ec:63:93:29:7a:83:42:1b:71:df:e0:e9:62:
a8:41:51:e7:50:64:43:1a:f2:ec:09:32:b2:3f:7f:cf:01:4b:
fe:d7:8a:d9:aa:1c:af:52:47:a7:2c:09:80:0d:cc:36:b3:c6:
cb:67:c8:d5:91:79:a3:91:c3:76:29:9d:d0:cc:ed:b6:54:e1:
43:72:9d:0e:bb:58:94:82:ca:3f:1f:c7:f1:80:18:55:f1:e1:
2f:de:88:c6:d9:37:f5:1f:7a:1c:04:f4:22:33:85:fa:1c:0f:
3f:f2:45:34:ae:1a:ab:a5:6e:48:7e:65:48:e4:60:3f:6d:7f:
df:66:6b:d4:a1:ad:28:92:c1:80:56:40:c8:94:4e:c3:8a:1c:
77:f2:fb:33:39:69:4e:c8:14:70:d0:9e:cf:24:97:c5:cc:c8:
0d:ee:7f:70
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICSGIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA1MjEw
MDMwMDlaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKEI3OTBDNEJCMkIxMjZE
ODIxRTQ5NkUwREFFNUE0RkNDRTE1REI3NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCjA/p8Smnqkwgv/Fo98AIhl9FHMNtVxRvS1NprgQqqwv155QS1
Hbv+I7s8gidjuYGerWMy5iQ7reDhpR9Z+JZ6i2UjIkKDGDpAlhCWwEZB/vVVhFe2
1rmh7op9pCdgcDKf7JpEI3m809GLLIVQX16Yfu8hIgINP26QPhs2aaPkS9jlDk0t
+uIe/oLIuOwSSTV0kLv5p0oPzp4R9jtfsaJXhTS5gGfKlHiWV1UIhWvp63t8eZRr
Z4X6uBDlbDXwaS8D/TnWzXoC3XVKaeRFNSY3FkcP80JEtY8vHYSz5Y7MIx0edYLx
LuYu/sVydPfJ2tEFv6iep/xoHWHz5zu0gxDrAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUt5DEuysSbYIeSW4NrlpPzOFdt3YwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS90NURFdXlzU2JZSWVTVzROcmxwUHpPRmR0M1kucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL0wDQYJKoZIhvcNAQELBQADggEB
AAJ1Rwsvy2nJ3qaH/Z2FhMLNwwhRG3UTALpsqhzqZFlx22uOA2kN1bhCT5aa/khZ
XPhsyt1Nerlv+wpykBfr2znEjCb3aYxr0dIJq6aAxbR+D6ANPtCrwuTpNuODfoOu
7GOTKXqDQhtx3+DpYqhBUedQZEMa8uwJMrI/f88BS/7XitmqHK9SR6csCYANzDaz
xstnyNWReaORw3YpndDM7bZU4UNynQ67WJSCyj8fx/GAGFXx4S/eiMbZN/UfehwE
9CIzhfocDz/yRTSuGqulbkh+ZUjkYD9tf99ma9ShrSiSwYBWQMiUTsOKHHfy+zM5
aU7IFHDQns8kl8XMyA3uf3A=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org