Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/Z6FCkoxL5J8wEWLWzUSNUNv-g84.roa
File: Z6FCkoxL5J8wEWLWzUSNUNv-g84.roa (raw, json)
Hash identifier: 8BRWrxdAZ4lKyEOx+GRv/zkDzM5/2XS0ioZKzduLSyI=
Subject key identifier: 67:A1:42:92:8C:4B:E4:9F:30:11:62:D6:CD:44:8D:50:DB:FE:83:CE
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4995
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Z6FCkoxL5J8wEWLWzUSNUNv-g84.roa
Signing time: Thu 09 Jun 2022 00:30:08 +0000
ROA not before: Thu 09 Jun 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18837 (0x4995)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 9 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=67A142928C4BE49F301162D6CD448D50DBFE83CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b6:04:cf:b3:58:43:23:e1:a3:c7:01:f2:8b:
aa:63:09:2a:4f:c2:a3:0e:65:7f:d4:30:3d:80:70:
44:d6:98:f0:8b:60:07:00:d7:c9:9c:53:95:73:a1:
79:d2:87:59:05:87:e1:94:a3:ed:cd:ca:9d:c5:fa:
87:d1:ed:a2:55:27:b1:ba:10:bd:30:be:75:f0:46:
5b:89:9e:12:c2:28:8e:af:e5:7f:08:a6:99:66:a5:
a2:02:ba:10:9c:21:24:38:ff:4f:ee:b6:a2:e4:fa:
68:8a:6e:a2:e3:67:d5:40:e0:90:02:00:7f:6a:d7:
f7:6b:e1:f0:b8:c4:99:9b:16:c4:d5:56:0e:08:b2:
6f:38:10:c1:3f:82:01:53:b0:36:4c:a6:e2:06:52:
b6:db:66:3d:a3:61:39:2e:47:04:06:bd:d3:63:17:
fa:53:cf:33:99:5c:8c:ca:df:ce:cb:37:30:08:99:
f4:4c:04:e7:1a:ff:27:c4:f3:0c:a9:e8:fd:2e:a7:
85:70:fa:50:5e:b5:89:3e:5f:cf:b0:52:cf:ef:6e:
2a:15:25:84:81:d0:40:ae:96:06:ac:f3:43:ee:cc:
0e:fd:f6:c2:5c:3d:32:55:ba:66:db:49:80:1c:a1:
be:d8:14:c6:b9:d3:80:6a:9f:39:66:65:3d:c0:98:
7c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A1:42:92:8C:4B:E4:9F:30:11:62:D6:CD:44:8D:50:DB:FE:83:CE
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Z6FCkoxL5J8wEWLWzUSNUNv-g84.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
55:97:df:04:22:2f:d6:db:1c:a5:9d:e5:62:32:5b:37:20:a9:
a2:fe:64:06:f5:f3:e8:52:cc:33:9f:e7:e8:46:74:12:b8:58:
52:bc:2b:cd:ff:6a:11:fb:79:69:f3:61:21:e0:ee:f2:12:c0:
0c:20:0d:a4:ed:c3:a6:c9:94:86:70:96:d6:01:75:18:75:23:
94:f0:f5:4d:c8:90:2a:48:78:ff:82:24:25:88:11:cc:75:61:
23:b0:d3:07:3e:45:14:dd:db:71:22:d4:2d:a1:82:e6:d1:01:
15:59:09:f8:92:38:f7:dd:5d:cc:04:54:c4:27:dd:15:0a:68:
e9:d3:e4:7e:c8:91:2d:c9:e9:4a:63:f5:b4:e2:8d:7f:75:32:
28:6c:c0:b1:f6:69:38:3f:f0:de:8a:a3:e2:49:f0:98:18:7e:
c0:15:d8:07:4a:c9:6e:f0:7d:03:4a:37:b5:5a:46:fc:ce:a0:
26:b3:93:0d:ae:63:82:e9:c1:b9:82:bf:51:7b:5a:9c:fa:6a:
04:45:ac:85:0e:52:46:63:5e:fb:ae:fc:c2:f8:10:07:6f:18:
39:06:fe:fa:db:22:0c:2f:26:22:3c:1e:2d:80:8f:48:f4:d0:
6a:4d:ca:9d:34:7a:27:de:5f:5a:ad:de:ce:e9:1a:b6:8c:40:
fc:11:d3:5f
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICSZUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA2MDkw
MDMwMDhaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDY3QTE0MjkyOEM0QkU0
OUYzMDExNjJENkNENDQ4RDUwREJGRTgzQ0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxtgTPs1hDI+GjxwHyi6pjCSpPwqMOZX/UMD2AcETWmPCLYAcA
18mcU5VzoXnSh1kFh+GUo+3Nyp3F+ofR7aJVJ7G6EL0wvnXwRluJnhLCKI6v5X8I
pplmpaICuhCcISQ4/0/utqLk+miKbqLjZ9VA4JACAH9q1/dr4fC4xJmbFsTVVg4I
sm84EME/ggFTsDZMpuIGUrbbZj2jYTkuRwQGvdNjF/pTzzOZXIzK387LNzAImfRM
BOca/yfE8wyp6P0up4Vw+lBetYk+X8+wUs/vbioVJYSB0ECulgas80PuzA799sJc
PTJVumbbSYAcob7YFMa504BqnzlmZT3AmHy/AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUZ6FCkoxL5J8wEWLWzUSNUNv+g84wHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9aNkZDa294TDVKOHdFV0xXelVTTlVOdi1nODQucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL8wDQYJKoZIhvcNAQELBQADggEB
AFWX3wQiL9bbHKWd5WIyWzcgqaL+ZAb18+hSzDOf5+hGdBK4WFK8K83/ahH7eWnz
YSHg7vISwAwgDaTtw6bJlIZwltYBdRh1I5Tw9U3IkCpIeP+CJCWIEcx1YSOw0wc+
RRTd23Ei1C2hgubRARVZCfiSOPfdXcwEVMQn3RUKaOnT5H7IkS3J6Upj9bTijX91
MihswLH2aTg/8N6Ko+JJ8JgYfsAV2AdKyW7wfQNKN7VaRvzOoCazkw2uY4LpwbmC
v1F7Wpz6agRFrIUOUkZjXvuu/ML4EAdvGDkG/vrbIgwvJiI8Hi2Aj0j00GpNyp00
eifeX1qt3s7pGraMQPwR018=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org