Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/EwzyyoWmzJ3qfJC5M509UxT8C34.roa
File: EwzyyoWmzJ3qfJC5M509UxT8C34.roa (raw, json)
Hash identifier: J8Icbx5wkU6+uQYfV0vBqhYfqH4n3myqIa9JVNBFX0k=
Subject key identifier: 13:0C:F2:CA:85:A6:CC:9D:EA:7C:90:B9:33:9D:3D:53:14:FC:0B:7E
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4766
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/EwzyyoWmzJ3qfJC5M509UxT8C34.roa
Signing time: Tue 03 May 2022 00:30:09 +0000
ROA not before: Tue 03 May 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18278 (0x4766)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 3 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=130CF2CA85A6CC9DEA7C90B9339D3D5314FC0B7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:76:f3:f2:5e:c3:96:b6:69:04:3b:95:a6:5b:
bd:bf:de:93:6c:d1:1b:cc:a9:0b:72:b0:fe:44:10:
96:6b:ba:a9:c9:ff:eb:9d:3c:b9:4e:2f:b6:8c:d0:
95:16:87:3e:a9:b6:cd:94:e7:e8:7e:f6:cc:ba:e6:
19:3b:64:c5:f6:50:5c:f3:00:43:7e:1e:31:c9:40:
0b:8c:25:03:f0:c1:a7:ef:06:0d:1d:3f:b0:fa:4c:
35:f2:22:0a:56:02:c0:b0:dc:a9:b3:ed:00:28:91:
d2:57:a1:53:2b:0f:51:cf:41:2a:39:66:05:54:0e:
cf:ca:76:76:4e:2c:9b:6b:46:b5:d9:36:e1:3b:32:
48:2c:be:3a:aa:db:c2:a9:b9:70:7b:16:ed:51:7f:
62:c4:ca:76:e7:b0:3c:ed:39:5c:ef:95:71:9a:e5:
ff:92:40:13:64:b0:3a:50:d3:77:c9:4d:fe:e6:ce:
d7:27:ad:90:c7:c3:c0:40:a6:85:fa:e0:c5:4a:b8:
4f:aa:37:58:f3:4f:b8:33:e6:ae:97:2b:b4:f6:2e:
10:2f:24:34:ca:14:91:af:6c:55:53:9d:cc:7b:03:
f7:0b:29:59:4a:1f:a9:db:1f:08:c1:0f:18:9a:c8:
3c:64:d8:39:42:c2:62:2c:26:75:05:df:d8:c6:bf:
70:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:0C:F2:CA:85:A6:CC:9D:EA:7C:90:B9:33:9D:3D:53:14:FC:0B:7E
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/EwzyyoWmzJ3qfJC5M509UxT8C34.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:67:35:96:31:98:dc:d3:4e:7b:bc:d1:1a:78:a9:2d:a5:bc:
4a:e6:c0:42:24:64:e9:72:12:9d:ee:a0:05:c8:f1:1b:28:dd:
83:d4:bd:37:7b:49:d2:72:72:57:c6:0d:69:eb:bc:05:87:27:
7e:be:e3:53:7c:06:bd:88:a9:9c:1d:88:96:29:76:e0:36:a2:
1e:83:f7:32:da:d7:4f:14:e5:5a:23:03:c3:6b:e6:fa:2f:dd:
96:53:29:e1:db:a5:88:4b:1d:50:d5:0b:c9:1e:86:72:43:da:
15:5b:5b:16:db:6c:f7:c9:54:06:35:cc:68:c2:1c:8b:75:5f:
79:d5:c0:27:25:f0:b3:3f:73:80:95:d8:0b:38:9a:27:ec:75:
24:ce:6f:ee:2f:98:c0:93:e0:a3:7d:f1:53:5d:e5:31:cc:1e:
e9:05:a3:68:f5:d5:ef:71:02:74:54:08:92:40:01:47:a2:05:
2c:f7:60:03:9c:38:95:7b:ab:10:98:84:c0:81:52:6c:ca:88:
34:3f:c7:23:14:9d:6e:fb:f2:e0:dc:fc:1e:2b:9a:0d:e5:34:
b0:79:0f:be:76:05:f1:a8:9c:5e:c1:80:0f:67:9d:cd:bb:6f:
35:49:dc:4d:48:e6:05:cc:b1:d5:e0:bc:2b:0f:03:b4:97:88:
01:54:f7:0b
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICR2YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA1MDMw
MDMwMDlaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDEzMENGMkNBODVBNkND
OURFQTdDOTBCOTMzOUQzRDUzMTRGQzBCN0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHdvPyXsOWtmkEO5WmW72/3pNs0RvMqQtysP5EEJZruqnJ/+ud
PLlOL7aM0JUWhz6pts2U5+h+9sy65hk7ZMX2UFzzAEN+HjHJQAuMJQPwwafvBg0d
P7D6TDXyIgpWAsCw3Kmz7QAokdJXoVMrD1HPQSo5ZgVUDs/KdnZOLJtrRrXZNuE7
Mkgsvjqq28KpuXB7Fu1Rf2LEynbnsDztOVzvlXGa5f+SQBNksDpQ03fJTf7mztcn
rZDHw8BApoX64MVKuE+qN1jzT7gz5q6XK7T2LhAvJDTKFJGvbFVTncx7A/cLKVlK
H6nbHwjBDxiayDxk2DlCwmIsJnUF39jGv3CxAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUEwzyyoWmzJ3qfJC5M509UxT8C34wHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9Fd3p5eW9XbXpKM3FmSkM1TTUwOVV4VDhDMzQucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL0wDQYJKoZIhvcNAQELBQADggEB
AFpnNZYxmNzTTnu80Rp4qS2lvErmwEIkZOlyEp3uoAXI8Rso3YPUvTd7SdJyclfG
DWnrvAWHJ36+41N8Br2IqZwdiJYpduA2oh6D9zLa108U5VojA8Nr5vov3ZZTKeHb
pYhLHVDVC8kehnJD2hVbWxbbbPfJVAY1zGjCHIt1X3nVwCcl8LM/c4CV2As4mifs
dSTOb+4vmMCT4KN98VNd5THMHukFo2j11e9xAnRUCJJAAUeiBSz3YAOcOJV7qxCY
hMCBUmzKiDQ/xyMUnW778uDc/B4rmg3lNLB5D752BfGonF7BgA9nnc27bzVJ3E1I
5gXMsdXgvCsPA7SXiAFU9ws=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org