Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/EYiEzoiHftCWX5eBMUfZG2fqSpA.roa
File: EYiEzoiHftCWX5eBMUfZG2fqSpA.roa (raw, json)
Hash identifier: j+GiU28z3SkNzvLSySJP25aFubwwn/nenfiQk8elAR0=
Subject key identifier: 11:88:84:CE:88:87:7E:D0:96:5F:97:81:31:47:D9:1B:67:EA:4A:90
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 48C0
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/EYiEzoiHftCWX5eBMUfZG2fqSpA.roa
Signing time: Sat 28 May 2022 00:30:06 +0000
ROA not before: Sat 28 May 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18624 (0x48c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 28 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=118884CE88877ED0965F97813147D91B67EA4A90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f4:fc:82:c2:2b:58:85:e3:29:bb:6b:6a:31:
86:6f:be:04:33:75:6a:78:ce:c1:83:90:5b:57:42:
66:9c:d4:c5:22:88:a8:2c:01:99:a1:90:67:bb:36:
13:27:b2:bf:21:dd:21:a0:d9:11:11:85:99:2f:52:
35:00:54:0a:11:65:31:b7:f0:03:59:20:bd:f8:52:
ac:5a:5e:72:42:0a:92:35:8c:e4:c3:08:6a:8a:e2:
72:73:6e:f7:87:6c:f5:0b:ec:3a:6e:14:90:05:45:
f8:90:1d:85:53:47:ae:64:c9:15:8e:1e:04:cd:21:
7f:1b:3e:58:35:07:6b:77:2c:b6:29:df:56:9f:87:
47:3f:60:10:0c:0f:2a:f7:39:46:8f:b6:66:52:76:
c6:cc:fe:10:80:3a:dd:81:32:31:b6:ae:82:02:22:
4b:aa:aa:a7:e1:76:5a:a7:15:ca:ad:dc:9e:b5:e6:
9f:73:b6:0e:1c:e6:01:41:8c:46:79:fc:1a:03:0f:
91:af:76:2c:4d:58:49:96:20:fe:5e:50:c7:6b:d8:
ee:d3:43:96:ba:6e:b0:a9:d4:fc:3e:cf:96:b2:e0:
4c:04:e9:a0:a8:5e:e6:5a:e9:97:54:e1:ef:bf:29:
da:66:a3:3c:08:16:c8:aa:54:62:b1:7d:1a:95:62:
93:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:88:84:CE:88:87:7E:D0:96:5F:97:81:31:47:D9:1B:67:EA:4A:90
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/EYiEzoiHftCWX5eBMUfZG2fqSpA.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
80:04:b0:cf:77:e0:33:03:08:92:5e:b6:c4:76:75:e4:78:1d:
89:f8:38:24:91:c0:65:ff:e4:d7:1f:dc:d3:ce:83:6b:52:ea:
03:a2:92:d4:30:6c:63:c2:49:b9:14:a7:2b:49:5e:7d:9f:b9:
aa:b8:6c:b6:84:74:43:ad:49:7f:07:1a:21:03:4b:a6:40:d4:
71:5e:4e:d6:40:d6:64:e0:4a:72:7b:81:d3:c7:fb:b5:13:0f:
99:3b:57:dd:c5:3b:ba:91:d2:31:d5:a3:af:9c:fa:83:a8:32:
eb:07:7c:81:e2:ab:88:5b:9f:f1:5c:3c:0d:f9:ae:60:03:30:
7b:ec:ad:fe:fe:62:78:97:7b:7d:e1:54:93:a9:1e:54:7e:78:
71:c3:a4:f6:a1:8c:e5:36:b2:58:e9:1d:f1:91:50:8e:f5:31:
57:45:69:6d:ef:0a:36:ce:16:71:bb:74:e8:31:1f:81:11:3f:
d7:6d:ba:f2:ee:8a:09:19:50:68:a9:47:e8:df:71:33:0f:02:
4c:41:e7:21:e5:83:c8:d5:5e:19:63:06:f2:df:9b:90:d0:3c:
79:c3:a3:53:51:15:7d:ed:8a:0c:32:bf:27:6f:48:e8:d1:0a:
27:f5:99:83:7d:7f:8f:db:f8:a9:a6:7c:21:f9:20:bb:fe:05:
f0:23:35:f8
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICSMAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA1Mjgw
MDMwMDZaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDExODg4NENFODg4NzdF
RDA5NjVGOTc4MTMxNDdEOTFCNjdFQTRBOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC19PyCwitYheMpu2tqMYZvvgQzdWp4zsGDkFtXQmac1MUiiKgs
AZmhkGe7NhMnsr8h3SGg2RERhZkvUjUAVAoRZTG38ANZIL34UqxaXnJCCpI1jOTD
CGqK4nJzbveHbPUL7DpuFJAFRfiQHYVTR65kyRWOHgTNIX8bPlg1B2t3LLYp31af
h0c/YBAMDyr3OUaPtmZSdsbM/hCAOt2BMjG2roICIkuqqqfhdlqnFcqt3J615p9z
tg4c5gFBjEZ5/BoDD5GvdixNWEmWIP5eUMdr2O7TQ5a6brCp1Pw+z5ay4EwE6aCo
XuZa6ZdU4e+/KdpmozwIFsiqVGKxfRqVYpOtAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUEYiEzoiHftCWX5eBMUfZG2fqSpAwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9FWWlFem9pSGZ0Q1dYNWVCTVVmWkcyZnFTcEEucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL8wDQYJKoZIhvcNAQELBQADggEB
AIAEsM934DMDCJJetsR2deR4HYn4OCSRwGX/5Ncf3NPOg2tS6gOiktQwbGPCSbkU
pytJXn2fuaq4bLaEdEOtSX8HGiEDS6ZA1HFeTtZA1mTgSnJ7gdPH+7UTD5k7V93F
O7qR0jHVo6+c+oOoMusHfIHiq4hbn/FcPA35rmADMHvsrf7+YniXe33hVJOpHlR+
eHHDpPahjOU2sljpHfGRUI71MVdFaW3vCjbOFnG7dOgxH4ERP9dtuvLuigkZUGip
R+jfcTMPAkxB5yHlg8jVXhljBvLfm5DQPHnDo1NRFX3tigwyvydvSOjRCif1mYN9
f4/b+KmmfCH5ILv+BfAjNfg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org