Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/8Xu0u_mdE5vZjn6aDES_1YMQ7No.roa
File: 8Xu0u_mdE5vZjn6aDES_1YMQ7No.roa (raw, json)
Hash identifier: RXthvG8vyNGpD1aJJ9N7qdJtrHbr8ipKGClwfDxSCFs=
Subject key identifier: F1:7B:B4:BB:F9:9D:13:9B:D9:8E:7E:9A:0C:44:BF:D5:83:10:EC:DA
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 45B4
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/8Xu0u_mdE5vZjn6aDES_1YMQ7No.roa
Signing time: Sat 02 Apr 2022 00:30:09 +0000
ROA not before: Sat 02 Apr 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17844 (0x45b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 2 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=F17BB4BBF99D139BD98E7E9A0C44BFD58310ECDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5c:03:fc:64:28:7a:4f:ee:a1:96:b3:ff:84:
d6:3b:e9:03:fd:97:f1:81:0b:b0:47:cc:6a:a0:f6:
ce:a8:e3:02:51:9d:d3:36:02:a3:21:d4:4a:89:f1:
2b:d2:fc:d5:ae:50:0c:b5:43:f8:f2:20:47:d1:e9:
a9:b3:12:52:66:56:1f:5d:d3:48:e3:85:05:08:17:
c0:e4:e1:ba:62:80:03:a8:e6:67:29:1f:01:ce:0a:
f7:3d:2d:ad:19:d8:4e:79:87:a5:11:d7:9c:29:2e:
3a:88:f6:fb:8a:e0:da:67:5b:79:d1:de:76:3e:4a:
8d:da:a9:66:df:b7:94:22:09:5e:a2:ea:1e:bf:8a:
6e:cb:41:60:e9:78:67:f8:27:a2:ee:a5:a8:51:95:
8d:82:64:d8:82:82:dd:64:e5:4b:45:9f:47:3f:aa:
34:b5:f0:b8:2f:c2:d4:4f:b5:02:91:8c:90:df:0a:
ad:45:93:77:21:84:dc:e7:73:d8:b6:65:25:c1:38:
12:0b:43:fc:b4:c9:1c:74:d1:d4:e0:ff:24:cb:c6:
66:9b:db:db:fe:42:1d:9b:5a:35:82:21:dd:fa:f6:
72:8a:7d:e4:e5:fd:0e:8c:7d:d0:38:b4:ec:15:62:
9f:29:38:e1:84:13:40:f8:6b:3c:75:4b:02:29:e7:
b6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7B:B4:BB:F9:9D:13:9B:D9:8E:7E:9A:0C:44:BF:D5:83:10:EC:DA
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/8Xu0u_mdE5vZjn6aDES_1YMQ7No.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
32:05:f5:77:7f:85:30:67:80:7e:e0:d2:00:12:07:2d:72:73:
2a:53:15:ea:cf:68:74:60:52:d8:f0:42:76:4b:74:94:03:df:
89:51:fa:a9:82:27:7f:bb:3f:47:9a:12:f7:ed:17:e0:db:71:
6c:f2:fd:b3:15:5d:2c:a5:1f:85:ab:73:20:cc:3f:5f:a6:83:
33:0e:06:e8:a8:a8:d9:16:5b:e9:a4:1c:02:78:a0:73:e7:c1:
e9:19:2e:53:41:a6:15:cc:68:6c:7e:c3:bd:53:f0:5a:d5:fe:
35:09:b7:50:2b:1e:18:33:50:fc:fa:16:e5:26:9f:0c:30:ca:
c5:1b:27:cf:e9:ce:9d:8e:59:14:6f:6c:03:ba:b5:7d:dc:71:
10:ca:a9:bc:89:7e:7b:81:b8:c0:c7:d1:c1:53:c2:2b:63:cd:
93:b2:6f:2f:4d:9b:ea:4c:65:f8:62:38:5d:18:e6:e2:d2:36:
f2:55:00:27:05:28:45:d7:6d:be:57:1a:72:09:0a:35:32:f1:
b0:7a:15:bd:b6:0b:d2:0f:11:9b:4c:c7:c1:dc:ad:65:6d:d2:
53:23:07:f2:8d:7c:aa:ee:9c:68:67:6d:cc:66:62:ea:2f:3e:
43:2f:a6:a4:fa:d4:72:1f:75:d5:09:e7:16:83:c5:e7:30:3b:
d2:86:9e:92
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRbQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA0MDIw
MDMwMDlaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKEYxN0JCNEJCRjk5RDEz
OUJEOThFN0U5QTBDNDRCRkQ1ODMxMEVDREEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNXAP8ZCh6T+6hlrP/hNY76QP9l/GBC7BHzGqg9s6o4wJRndM2
AqMh1EqJ8SvS/NWuUAy1Q/jyIEfR6amzElJmVh9d00jjhQUIF8Dk4bpigAOo5mcp
HwHOCvc9La0Z2E55h6UR15wpLjqI9vuK4NpnW3nR3nY+So3aqWbft5QiCV6i6h6/
im7LQWDpeGf4J6LupahRlY2CZNiCgt1k5UtFn0c/qjS18LgvwtRPtQKRjJDfCq1F
k3chhNznc9i2ZSXBOBILQ/y0yRx00dTg/yTLxmab29v+Qh2bWjWCId369nKKfeTl
/Q6MfdA4tOwVYp8pOOGEE0D4azx1SwIp57Y1AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU8Xu0u/mdE5vZjn6aDES/1YMQ7NowHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS84WHUwdV9tZEU1dlpqbjZhREVTXzFZTVE3Tm8ucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL0wDQYJKoZIhvcNAQELBQADggEB
ADIF9Xd/hTBngH7g0gASBy1ycypTFerPaHRgUtjwQnZLdJQD34lR+qmCJ3+7P0ea
EvftF+DbcWzy/bMVXSylH4WrcyDMP1+mgzMOBuioqNkWW+mkHAJ4oHPnwekZLlNB
phXMaGx+w71T8FrV/jUJt1ArHhgzUPz6FuUmnwwwysUbJ8/pzp2OWRRvbAO6tX3c
cRDKqbyJfnuBuMDH0cFTwitjzZOyby9Nm+pMZfhiOF0Y5uLSNvJVACcFKEXXbb5X
GnIJCjUy8bB6Fb22C9IPEZtMx8HcrWVt0lMjB/KNfKrunGhnbcxmYuovPkMvpqT6
1HIfddUJ5xaDxecwO9KGnpI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org