Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/-bqoMYfej-NHDPw1Vtr6zM50jxA.roa
File: -bqoMYfej-NHDPw1Vtr6zM50jxA.roa (raw, json)
Hash identifier: HuLf4G9NZR+jBF8YOS5RWWJC6HipUF+7CjNRHB+O92Q=
Subject key identifier: F9:BA:A8:31:87:DE:8F:E3:47:0C:FC:35:56:DA:FA:CC:CE:74:8F:10
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 435B
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/-bqoMYfej-NHDPw1Vtr6zM50jxA.roa
Signing time: Fri 18 Feb 2022 00:30:07 +0000
ROA not before: Fri 18 Feb 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17243 (0x435b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 18 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=F9BAA83187DE8FE3470CFC3556DAFACCCE748F10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e3:2f:ba:0b:39:d4:fa:3a:b2:d4:3b:f1:8f:
ef:dd:80:ca:5f:43:bc:54:a8:7c:fe:1b:21:c9:ad:
37:12:be:b2:e8:7a:e9:d2:fb:89:b7:6a:3b:f3:95:
65:a1:67:a0:82:67:58:b5:10:7d:35:4e:26:e0:e2:
3c:93:3b:68:b1:e1:eb:d0:d4:6e:fa:eb:94:82:af:
3e:f6:64:a1:d3:90:3e:a3:a3:79:ac:26:a5:dd:8d:
ab:a1:2e:5f:f0:f5:4d:d4:df:7c:ac:e1:70:f3:75:
ea:23:32:da:77:08:b7:07:bc:95:fb:9e:eb:67:70:
a4:05:0a:21:6f:5e:4e:f7:7b:55:83:83:e3:d3:13:
d8:3d:cf:62:48:37:1a:16:01:b7:de:13:3b:96:fc:
15:d0:2d:dc:fd:4f:70:79:fd:40:07:cf:51:0b:36:
12:7f:30:5a:35:06:9a:31:7f:75:c3:11:02:39:d9:
6a:af:61:42:1e:21:66:6f:c5:8f:ee:2a:cb:c9:c4:
2e:83:64:62:00:0b:93:6c:b7:2e:fd:dd:14:22:8b:
10:00:52:bc:4f:53:4e:98:2a:c8:12:1a:6b:2b:bc:
d5:f8:28:6c:fe:95:39:77:4a:20:34:1c:4d:06:28:
a3:d4:8b:e7:cd:a1:0a:2f:61:cd:bb:50:eb:bd:90:
49:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BA:A8:31:87:DE:8F:E3:47:0C:FC:35:56:DA:FA:CC:CE:74:8F:10
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/-bqoMYfej-NHDPw1Vtr6zM50jxA.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
25:55:ff:90:5b:c6:67:9e:b3:ff:43:37:4c:fc:64:33:94:60:
60:39:01:2c:87:1d:ed:3a:e3:35:71:56:57:fb:38:43:29:8f:
d2:b1:15:da:8d:b6:e5:1d:2b:c9:04:77:07:9b:77:1c:28:2a:
37:dc:c4:f3:8b:ee:80:fe:31:35:3d:f6:b9:11:92:08:c2:da:
07:6b:58:5f:06:3e:ff:82:31:b2:e2:d0:53:43:7e:cd:bb:89:
52:fa:d1:a7:cf:e2:b5:6b:1b:82:3a:90:f8:66:6d:7e:5e:f2:
2d:5e:d9:2e:96:6a:b2:e4:d5:6e:3f:b4:da:4c:98:5f:c4:8c:
2b:80:38:4a:5b:60:bb:14:24:24:ad:0e:de:1c:b2:79:29:a8:
37:4f:be:18:bd:96:56:fc:67:0f:8b:9a:af:33:40:24:d6:3b:
02:42:b8:a1:64:ce:1d:5d:ff:5d:37:bb:96:e3:e8:4d:64:3a:
53:64:53:a8:2f:d1:51:c2:cf:6b:80:63:73:ad:89:08:c9:9d:
65:16:27:28:64:a7:c3:e0:a1:bb:ff:59:f3:4a:9c:ee:84:3e:
3a:d6:f1:40:31:d8:79:f1:93:75:92:c9:e7:84:db:2a:4d:3d:
23:79:ca:ed:df:d2:be:ce:93:6e:8d:39:7f:46:3b:23:53:02:
ee:a6:0c:2c
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICQ1swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAyMTgw
MDMwMDdaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKEY5QkFBODMxODdERThG
RTM0NzBDRkMzNTU2REFGQUNDQ0U3NDhGMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC34y+6CznU+jqy1Dvxj+/dgMpfQ7xUqHz+GyHJrTcSvrLoeunS
+4m3ajvzlWWhZ6CCZ1i1EH01Tibg4jyTO2ix4evQ1G7665SCrz72ZKHTkD6jo3ms
JqXdjauhLl/w9U3U33ys4XDzdeojMtp3CLcHvJX7nutncKQFCiFvXk73e1WDg+PT
E9g9z2JINxoWAbfeEzuW/BXQLdz9T3B5/UAHz1ELNhJ/MFo1Bpoxf3XDEQI52Wqv
YUIeIWZvxY/uKsvJxC6DZGIAC5Nsty793RQiixAAUrxPU06YKsgSGmsrvNX4KGz+
lTl3SiA0HE0GKKPUi+fNoQovYc27UOu9kEn7AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU+bqoMYfej+NHDPw1Vtr6zM50jxAwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS8tYnFvTVlmZWotTkhEUHcxVnRyNnpNNTBqeEEucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL8wDQYJKoZIhvcNAQELBQADggEB
ACVV/5Bbxmees/9DN0z8ZDOUYGA5ASyHHe064zVxVlf7OEMpj9KxFdqNtuUdK8kE
dwebdxwoKjfcxPOL7oD+MTU99rkRkgjC2gdrWF8GPv+CMbLi0FNDfs27iVL60afP
4rVrG4I6kPhmbX5e8i1e2S6WarLk1W4/tNpMmF/EjCuAOEpbYLsUJCStDt4csnkp
qDdPvhi9llb8Zw+Lmq8zQCTWOwJCuKFkzh1d/103u5bj6E1kOlNkU6gv0VHCz2uA
Y3OtiQjJnWUWJyhkp8Pgobv/WfNKnO6EPjrW8UAx2Hnxk3WSyeeE2ypNPSN5yu3f
0r7Ok26NOX9GOyNTAu6mDCw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:52 2024 by rpki-client on console-fra.rpki-client.org