Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/4STV-H8d1ZWMqUlKu6kJ47RZPHg.roa
File:                     4STV-H8d1ZWMqUlKu6kJ47RZPHg.roa (raw, json)
Hash identifier:          zlrZD8cgWHkvI9w3oNQyUibOvu+elrZfmPoH5CGbmtE=
Subject key identifier:   E1:24:D5:F8:7F:1D:D5:95:8C:A9:49:4A:BB:A9:09:E3:B4:59:3C:78
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4846
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/4STV-H8d1ZWMqUlKu6kJ47RZPHg.roa
Signing time:             Thu 19 May 2022 00:30:08 +0000
ROA not before:           Thu 19 May 2022 00:30:08 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        45.132.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18502 (0x4846)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: May 19 00:30:08 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=E124D5F87F1DD5958CA9494ABBA909E3B4593C78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5e:da:a7:af:98:49:62:50:06:1a:20:04:98:
                    b8:93:8e:92:3b:7d:4d:a8:0b:77:85:09:2f:2b:94:
                    03:ec:e2:31:b0:61:0a:e6:04:19:b6:25:4b:32:a4:
                    e2:86:5a:84:61:46:44:e6:7d:09:c2:b7:59:83:d6:
                    c2:8b:89:4a:7f:fd:c8:ca:93:06:21:98:5d:6a:39:
                    51:90:aa:fa:0f:f6:3c:a6:d1:22:ea:90:90:7d:4d:
                    b4:02:01:da:98:ce:8f:18:f9:f0:c0:cb:99:5a:f7:
                    8a:56:b9:01:7c:3d:22:1a:aa:61:23:59:94:42:d4:
                    13:5a:65:8b:fa:51:b5:5c:a5:ae:db:c9:cf:67:1f:
                    b4:42:b2:ff:55:1a:3e:f2:e6:ea:70:d2:29:32:a8:
                    71:20:a1:34:77:cf:ab:f7:f0:f6:00:e6:5c:d1:e8:
                    d4:6e:35:7e:1f:87:a0:8a:0b:23:7a:c0:02:e7:c7:
                    c0:a8:07:4b:35:c6:10:04:54:61:f4:5f:24:01:2b:
                    05:07:2b:41:35:ec:07:7e:cd:a9:33:e9:d3:b9:43:
                    e7:18:98:ff:a5:5b:4c:c5:e2:48:05:2b:6f:8c:44:
                    76:86:1f:d3:fa:71:93:54:f0:d2:80:03:5e:34:a4:
                    e3:15:15:9f:12:71:b2:a8:af:2c:d4:17:4b:38:9e:
                    68:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:24:D5:F8:7F:1D:D5:95:8C:A9:49:4A:BB:A9:09:E3:B4:59:3C:78
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/4STV-H8d1ZWMqUlKu6kJ47RZPHg.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:20:67:10:05:a7:0d:ad:e4:12:12:28:1a:90:17:30:9c:0a:
         3c:84:b5:b3:ef:71:bf:8c:08:67:01:33:5d:bf:6d:d9:4f:9c:
         a9:71:7e:87:a6:cc:0b:a5:4b:c5:2b:8d:cc:0c:17:f0:66:2c:
         c0:9b:07:5e:0e:08:4f:13:4d:25:9b:1b:42:25:3b:7a:42:ed:
         78:95:6f:de:36:51:06:03:75:db:7b:d8:55:bb:b9:c3:1f:49:
         c3:e0:9e:68:b6:e1:3b:55:ad:69:9c:7b:78:f5:ce:eb:01:b6:
         9c:a4:b6:21:db:6e:9f:1a:73:85:db:98:fd:9a:74:97:12:b9:
         81:9d:28:54:3a:ca:af:6e:0f:06:fc:f9:8c:22:99:6b:66:ca:
         7f:40:92:7b:d1:49:64:d6:1a:2e:00:6c:f9:0f:88:f4:5a:1b:
         43:d9:0b:9f:5e:9e:be:02:db:4e:ab:95:88:52:d9:80:6b:e1:
         2a:b9:17:01:12:68:53:d4:d8:e6:ee:c1:1b:0d:d2:91:f3:75:
         15:86:ad:ee:5d:08:c6:99:a0:39:37:5d:60:90:fa:5b:39:67:
         6a:69:28:05:cd:10:4f:4a:3f:10:77:84:57:39:21:62:2a:6a:
         b9:b8:1e:4c:4e:18:77:36:fb:c1:c3:33:2c:f0:40:ba:c5:ea:
         1c:43:cb:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:52 2024 by rpki-client on console-fra.rpki-client.org