Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/P1MlcIbclGOVXmOz-ODjm9DZt80.roa
File: P1MlcIbclGOVXmOz-ODjm9DZt80.roa (raw, json)
Hash identifier: H3riPdYPlaG8mlKKyrT546Gnu9xhcuOUDUh9hQuyKKs=
Subject key identifier: 3F:53:25:70:86:DC:94:63:95:5E:63:B3:F8:E0:E3:9B:D0:D9:B7:CD
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 49B1
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/P1MlcIbclGOVXmOz-ODjm9DZt80.roa
Signing time: Sat 11 Jun 2022 00:30:07 +0000
ROA not before: Sat 11 Jun 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18865 (0x49b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 11 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=3F53257086DC9463955E63B3F8E0E39BD0D9B7CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c3:8a:ba:d2:fa:91:67:2d:6a:e4:e2:cd:8b:
11:bf:b5:bc:78:e6:12:1d:e7:68:32:91:4b:ce:66:
2b:9e:75:f5:f4:70:24:d6:c0:99:a1:17:31:47:b3:
5b:52:55:9f:82:76:4a:91:bf:66:af:c9:c3:5a:09:
a1:f8:20:4d:35:3b:1c:64:9f:5b:f6:e9:32:a7:d1:
57:34:bc:77:b3:32:0d:6d:d3:9b:75:bb:07:b2:dd:
ff:28:05:1b:c6:4a:1c:cf:8f:96:16:fc:c1:13:c8:
1d:e3:5d:c5:58:3c:45:14:95:d3:f2:24:a5:68:5b:
58:38:ef:45:8f:03:14:89:71:92:cb:b6:4d:eb:67:
bc:56:7d:0b:27:ba:39:cb:9b:e0:91:a9:62:4e:af:
36:96:56:eb:14:c7:1b:42:4f:bb:68:03:5b:78:27:
c5:6c:41:fe:e9:ba:31:05:4f:47:ac:17:6e:dc:ed:
36:11:bc:d4:fb:ad:a7:bd:34:42:f8:24:c6:f8:4a:
d0:ca:a6:7e:c8:bd:e7:6c:df:c3:52:88:06:6e:d9:
43:cf:82:fd:8d:92:74:a5:8b:47:c9:c2:f9:09:8e:
48:32:a9:bb:0f:5c:9f:ca:cb:de:cc:30:87:24:e6:
26:45:6f:ad:5b:fe:f7:5a:da:80:32:9b:17:62:10:
80:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:53:25:70:86:DC:94:63:95:5E:63:B3:F8:E0:E3:9B:D0:D9:B7:CD
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/P1MlcIbclGOVXmOz-ODjm9DZt80.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
12:dc:14:ae:0a:7c:80:00:29:7e:b9:fc:42:98:5e:a6:43:75:
56:4a:b5:b4:ff:f5:bb:60:24:69:d7:40:98:83:46:3c:15:72:
d3:e8:eb:18:4f:68:48:0d:0c:47:70:d6:54:99:ee:e0:73:c1:
8b:78:33:86:c8:de:28:37:af:5c:fb:ce:2e:34:f3:ef:d6:2e:
26:93:71:f1:93:8a:85:ed:60:25:d6:0d:29:6e:ce:79:0e:bd:
ab:ad:09:49:00:ce:09:34:1b:49:21:2f:ec:c6:a7:d0:3e:7f:
56:9d:a8:48:fd:54:8c:30:bc:67:89:21:c1:a0:1d:81:ff:5f:
4c:2f:bd:e0:95:16:53:8d:07:01:36:e7:1c:35:12:9d:bf:3b:
48:45:01:8a:ec:e3:db:82:69:d5:c4:bf:60:1a:62:8b:42:69:
7c:05:10:c3:dc:c2:98:b3:fa:0b:66:cc:3e:c0:e7:12:35:f7:
e1:4a:73:bc:96:62:74:1b:e7:f0:b8:5d:05:6b:8d:1a:d8:b5:
54:87:7b:cc:fa:cb:1a:8d:58:aa:6d:d6:ef:a1:6b:03:92:7e:
85:86:22:f8:7b:09:53:bf:de:e0:a3:bc:ef:d3:cc:82:44:22:
24:50:4b:a0:8f:3d:06:b0:22:d5:51:a9:0e:e7:36:f4:3d:78:
69:80:c8:b4
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICSbEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA2MTEw
MDMwMDdaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDNGNTMyNTcwODZEQzk0
NjM5NTVFNjNCM0Y4RTBFMzlCRDBEOUI3Q0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0w4q60vqRZy1q5OLNixG/tbx45hId52gykUvOZiuedfX0cCTW
wJmhFzFHs1tSVZ+CdkqRv2avycNaCaH4IE01Oxxkn1v26TKn0Vc0vHezMg1t05t1
uwey3f8oBRvGShzPj5YW/METyB3jXcVYPEUUldPyJKVoW1g470WPAxSJcZLLtk3r
Z7xWfQsnujnLm+CRqWJOrzaWVusUxxtCT7toA1t4J8VsQf7pujEFT0esF27c7TYR
vNT7rae9NEL4JMb4StDKpn7Iveds38NSiAZu2UPPgv2NknSli0fJwvkJjkgyqbsP
XJ/Ky97MMIck5iZFb61b/vda2oAymxdiEICPAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUP1MlcIbclGOVXmOz+ODjm9DZt80wHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9QMU1sY0liY2xHT1ZYbU96LU9Eam05RFp0ODAucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL8wDQYJKoZIhvcNAQELBQADggEB
ABLcFK4KfIAAKX65/EKYXqZDdVZKtbT/9btgJGnXQJiDRjwVctPo6xhPaEgNDEdw
1lSZ7uBzwYt4M4bI3ig3r1z7zi408+/WLiaTcfGTioXtYCXWDSluznkOvautCUkA
zgk0G0khL+zGp9A+f1adqEj9VIwwvGeJIcGgHYH/X0wvveCVFlONBwE25xw1Ep2/
O0hFAYrs49uCadXEv2AaYotCaXwFEMPcwpiz+gtmzD7A5xI19+FKc7yWYnQb5/C4
XQVrjRrYtVSHe8z6yxqNWKpt1u+hawOSfoWGIvh7CVO/3uCjvO/TzIJEIiRQS6CP
PQawItVRqQ7nNvQ9eGmAyLQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org