Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/ewXuhuV5vg0GoZ6VeET1miBaw64.roa
File: ewXuhuV5vg0GoZ6VeET1miBaw64.roa (raw, json)
Hash identifier: 4iwrdCeSNhtYN4g1n6mDvIDENoa9O43ToGEMtj5fnhA=
Subject key identifier: 7B:05:EE:86:E5:79:BE:0D:06:A1:9E:95:78:44:F5:9A:20:5A:C3:AE
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4535
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ewXuhuV5vg0GoZ6VeET1miBaw64.roa
Signing time: Thu 24 Mar 2022 00:30:07 +0000
ROA not before: Thu 24 Mar 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17717 (0x4535)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 24 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=7B05EE86E579BE0D06A19E957844F59A205AC3AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:63:e4:70:72:d9:f0:af:0c:fc:63:70:12:2b:
29:9f:0e:25:ad:3f:c6:1e:45:e0:56:78:7c:1d:37:
82:e0:02:6d:d3:01:91:40:c3:cc:f2:49:86:88:59:
07:5f:67:18:1c:74:94:99:05:0b:32:48:7c:06:b5:
fa:ad:d5:79:8d:da:69:14:68:86:37:35:79:e4:9b:
b8:b6:5a:07:45:49:4b:ae:9b:61:c8:91:91:cf:4f:
f7:0c:b0:a7:9b:5e:f9:8d:ad:7b:b8:ea:cd:3d:41:
06:cc:59:8f:26:3c:21:86:5b:ff:83:9a:8e:08:a1:
ac:5f:81:b0:dc:b3:2c:38:7d:0c:2c:1d:a0:d2:13:
ac:f2:63:58:2b:ad:47:e1:98:ea:a0:2a:27:1c:f4:
fa:7e:f7:5c:49:f4:f7:46:48:9c:61:41:b6:af:37:
d7:4f:b9:09:eb:77:2e:1a:5f:42:7a:cb:e7:0e:12:
91:3a:83:3c:36:7d:f0:70:7a:0a:d0:d9:12:96:67:
a4:20:1c:7b:7c:22:74:c4:47:da:0e:00:70:cb:47:
fb:7b:dc:eb:51:b5:e8:7d:32:13:39:ff:bf:df:b5:
8b:e7:d9:19:fe:18:7a:9d:0c:19:51:ef:e2:48:e9:
00:01:5c:89:ee:3b:a6:21:60:d9:7b:90:4c:a0:05:
0c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:05:EE:86:E5:79:BE:0D:06:A1:9E:95:78:44:F5:9A:20:5A:C3:AE
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ewXuhuV5vg0GoZ6VeET1miBaw64.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
04:fa:ec:d8:4c:da:50:9c:9d:14:40:79:bf:e0:06:c7:35:fb:
3c:95:2b:9a:ec:35:84:3e:c7:b6:d4:89:36:47:e5:b7:8c:41:
46:01:a5:52:06:4c:04:e4:2e:26:eb:1d:2c:21:a2:a7:30:32:
a8:73:5c:cb:53:c1:b5:79:48:b6:22:45:11:b0:0e:3e:44:3c:
5b:38:70:87:fa:cb:b9:b8:cb:be:ab:9f:24:ea:d9:52:39:5d:
6b:77:8c:06:77:76:80:38:ae:19:d8:37:0b:13:43:c7:8a:3f:
20:e0:6b:23:c5:cb:1a:e6:4c:1a:92:d6:d1:4e:16:e2:0f:1c:
83:2f:f1:2f:72:15:b4:48:2b:1b:60:8b:2f:2a:83:f1:55:9c:
a2:f5:ea:ca:f8:f1:d6:fd:9d:63:c1:f9:dd:b0:a9:e3:a4:6f:
73:df:1d:f7:86:33:08:ba:c1:7b:ed:04:94:91:58:e2:83:35:
81:a9:4c:83:ce:99:00:e7:79:a0:12:61:3f:9c:61:74:98:37:
45:09:a6:3a:8f:08:8d:67:6a:75:2f:a1:51:dd:9d:b9:00:8b:
9f:8e:92:ef:ce:03:b2:9a:ac:2a:36:d3:8a:b8:71:1d:50:d6:
11:4b:86:9f:b6:e4:af:ff:50:e2:68:bd:a7:bf:f5:54:04:f9:
ee:97:a4:91
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRTUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAzMjQw
MDMwMDdaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKDdCMDVFRTg2RTU3OUJF
MEQwNkExOUU5NTc4NDRGNTlBMjA1QUMzQUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDgY+Rwctnwrwz8Y3ASKymfDiWtP8YeReBWeHwdN4LgAm3TAZFA
w8zySYaIWQdfZxgcdJSZBQsySHwGtfqt1XmN2mkUaIY3NXnkm7i2WgdFSUuum2HI
kZHPT/cMsKebXvmNrXu46s09QQbMWY8mPCGGW/+Dmo4IoaxfgbDcsyw4fQwsHaDS
E6zyY1grrUfhmOqgKicc9Pp+91xJ9PdGSJxhQbavN9dPuQnrdy4aX0J6y+cOEpE6
gzw2ffBwegrQ2RKWZ6QgHHt8InTER9oOAHDLR/t73OtRteh9MhM5/7/ftYvn2Rn+
GHqdDBlR7+JI6QABXInuO6YhYNl7kEygBQwxAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUewXuhuV5vg0GoZ6VeET1miBaw64wHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9ld1h1aHVWNXZnMEdvWjZWZUVUMW1pQmF3NjQucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL0wDQYJKoZIhvcNAQELBQADggEB
AAT67NhM2lCcnRRAeb/gBsc1+zyVK5rsNYQ+x7bUiTZH5beMQUYBpVIGTATkLibr
HSwhoqcwMqhzXMtTwbV5SLYiRRGwDj5EPFs4cIf6y7m4y76rnyTq2VI5XWt3jAZ3
doA4rhnYNwsTQ8eKPyDgayPFyxrmTBqS1tFOFuIPHIMv8S9yFbRIKxtgiy8qg/FV
nKL16sr48db9nWPB+d2wqeOkb3PfHfeGMwi6wXvtBJSRWOKDNYGpTIPOmQDneaAS
YT+cYXSYN0UJpjqPCI1nanUvoVHdnbkAi5+Oku/OA7KarCo204q4cR1Q1hFLhp+2
5K//UOJovae/9VQE+e6XpJE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org