Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/6zuo8sr6E-RASfTgsQVlALzUGnk.roa
File: 6zuo8sr6E-RASfTgsQVlALzUGnk.roa (raw, json)
Hash identifier: Y6F4gRM0Zn5atgmIZbocwwzmyyxdyod7DcTQVU9a1O4=
Subject key identifier: EB:3B:A8:F2:CA:FA:13:E4:40:49:F4:E0:B1:05:65:00:BC:D4:1A:79
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4686
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/6zuo8sr6E-RASfTgsQVlALzUGnk.roa
Signing time: Sun 17 Apr 2022 00:30:10 +0000
ROA not before: Sun 17 Apr 2022 00:30:10 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18054 (0x4686)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 17 00:30:10 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=EB3BA8F2CAFA13E44049F4E0B1056500BCD41A79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:de:f5:59:80:b0:87:fb:36:de:59:6a:61:7d:
4e:0e:45:ec:d7:ae:ed:6c:14:62:a8:5d:30:ff:06:
2f:8d:53:34:8a:0b:54:5e:c4:00:65:74:ea:df:3a:
80:54:9e:8c:db:4d:cf:85:0e:50:8a:b8:e9:de:45:
03:37:7f:18:44:2f:a4:35:69:b6:f0:9a:83:6c:75:
a1:8c:33:ae:35:24:01:9a:64:09:64:ea:12:03:55:
0d:5c:8a:3e:c9:8c:aa:c0:04:f5:3f:b8:49:78:ef:
da:dd:67:78:2a:d8:68:4c:e3:6a:ee:cf:6a:b1:5e:
c1:7d:6b:b3:7a:9c:97:1c:c0:88:a2:13:16:b4:b6:
30:d2:81:40:a3:c4:1d:a2:8b:5b:dc:27:2b:75:df:
18:db:d1:4a:58:4e:48:56:48:ca:18:c8:c0:f8:ff:
ef:fc:a2:d0:f2:12:c3:9b:bd:e2:22:a8:09:95:ce:
ef:34:c3:f5:3a:2a:74:df:7d:e3:05:d2:8d:73:3f:
ba:bc:3c:66:78:92:87:6e:0b:ff:70:1e:ca:be:4f:
ad:5c:02:b4:f1:32:1e:96:c0:32:cf:0e:64:a3:e8:
88:c1:4a:d6:47:47:8e:31:97:9b:5c:7b:d7:43:7f:
d6:ee:ef:7c:5b:dc:0f:dc:9b:20:f6:75:d5:3f:7e:
9c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3B:A8:F2:CA:FA:13:E4:40:49:F4:E0:B1:05:65:00:BC:D4:1A:79
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/6zuo8sr6E-RASfTgsQVlALzUGnk.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
89:26:7b:fe:4f:72:3e:2f:f4:90:c0:da:09:c1:c2:b4:c1:b9:
ff:4d:93:e5:64:b3:16:94:40:51:e6:fd:8d:11:4c:51:ab:8f:
03:db:06:e5:1a:61:9f:7c:12:6c:6e:98:ab:65:08:76:ab:b8:
c7:1c:21:4b:92:48:bb:0d:d2:ff:6a:c9:78:fc:3e:23:ce:66:
08:42:0f:89:a6:66:70:31:44:5c:cc:f1:c1:4a:f1:12:e6:36:
d7:54:ae:ef:98:34:1f:a4:16:0c:31:93:d5:38:88:95:6d:71:
b2:ae:43:4b:98:10:4a:42:17:f2:0f:2b:fc:9a:2b:a0:66:d8:
85:81:91:4b:67:65:be:7e:f4:75:ce:f6:ee:f4:15:ef:4b:3c:
7c:ec:65:56:37:36:f1:4b:0c:3b:88:f3:90:7c:0a:7a:fa:8e:
31:aa:a7:f9:3b:cc:bf:4e:45:d3:10:f5:67:2c:bb:86:95:c1:
39:e5:85:7e:8f:03:e7:00:5c:57:ff:fc:c9:1c:06:2d:2f:cd:
9c:75:d5:47:68:e1:6d:a5:47:45:33:dc:6d:cc:1c:2d:70:34:
de:f5:0d:6d:d3:4c:a6:28:bb:24:c9:d9:7b:fd:21:ee:6a:d5:
10:11:5a:d7:0e:02:75:0c:16:8f:98:5f:a8:df:05:38:20:7f:
c1:e1:68:fc
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRoYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA0MTcw
MDMwMTBaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKEVCM0JBOEYyQ0FGQTEz
RTQ0MDQ5RjRFMEIxMDU2NTAwQkNENDFBNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC93vVZgLCH+zbeWWphfU4ORezXru1sFGKoXTD/Bi+NUzSKC1Re
xABldOrfOoBUnozbTc+FDlCKuOneRQM3fxhEL6Q1abbwmoNsdaGMM641JAGaZAlk
6hIDVQ1cij7JjKrABPU/uEl479rdZ3gq2GhM42ruz2qxXsF9a7N6nJccwIiiExa0
tjDSgUCjxB2ii1vcJyt13xjb0UpYTkhWSMoYyMD4/+/8otDyEsObveIiqAmVzu80
w/U6KnTffeMF0o1zP7q8PGZ4koduC/9wHsq+T61cArTxMh6WwDLPDmSj6IjBStZH
R44xl5tce9dDf9bu73xb3A/cmyD2ddU/fpz9AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU6zuo8sr6E+RASfTgsQVlALzUGnkwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS82enVvOHNyNkUtUkFTZlRnc1FWbEFMelVHbmsucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL0wDQYJKoZIhvcNAQELBQADggEB
AIkme/5Pcj4v9JDA2gnBwrTBuf9Nk+VksxaUQFHm/Y0RTFGrjwPbBuUaYZ98Emxu
mKtlCHaruMccIUuSSLsN0v9qyXj8PiPOZghCD4mmZnAxRFzM8cFK8RLmNtdUru+Y
NB+kFgwxk9U4iJVtcbKuQ0uYEEpCF/IPK/yaK6Bm2IWBkUtnZb5+9HXO9u70Fe9L
PHzsZVY3NvFLDDuI85B8Cnr6jjGqp/k7zL9ORdMQ9Wcsu4aVwTnlhX6PA+cAXFf/
/MkcBi0vzZx11Udo4W2lR0Uz3G3MHC1wNN71DW3TTKYouyTJ2Xv9Ie5q1RARWtcO
AnUMFo+YX6jfBTggf8HhaPw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:52 2024 by rpki-client on console-fra.rpki-client.org