Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/f_yPDvdgDNkrZDERdw0OzyPz-I8.roa
File: f_yPDvdgDNkrZDERdw0OzyPz-I8.roa (raw, json)
Hash identifier: QcNAzq5gJMzlQieEKv/qZldTjKkJcn1ir2ZKfRYisRc=
Subject key identifier: 7F:FC:8F:0E:F7:60:0C:D9:2B:64:31:11:77:0D:0E:CF:23:F3:F8:8F
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4385
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/f_yPDvdgDNkrZDERdw0OzyPz-I8.roa
Signing time: Mon 21 Feb 2022 00:30:06 +0000
ROA not before: Mon 21 Feb 2022 00:30:06 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17285 (0x4385)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 21 00:30:06 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=7FFC8F0EF7600CD92B643111770D0ECF23F3F88F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3d:fe:f6:85:96:45:4c:8d:ae:13:4a:fe:63:
02:59:ad:d3:62:38:e7:ef:8d:e8:52:b9:a0:85:18:
c3:ce:78:25:9e:fb:e3:cc:70:27:19:1b:b6:a0:96:
fc:0a:1c:f4:cd:19:7b:56:5c:63:30:2e:f5:37:65:
dc:a8:2c:5c:ef:02:2c:ac:8c:e9:35:c1:79:24:cb:
71:47:fc:85:e2:cc:10:8d:b8:0b:a0:dd:33:7b:bf:
02:a2:1f:d7:19:b4:4b:75:eb:a4:b9:81:a3:4d:e6:
4f:cc:b1:8a:2d:68:5f:40:fd:cc:90:db:6e:03:08:
9f:3f:66:e5:19:52:99:db:34:60:4c:15:12:39:2e:
3d:6e:b6:6d:31:70:14:72:7a:18:1c:7a:e8:71:0d:
e9:10:b7:7f:bb:be:dd:37:1c:96:d2:76:14:e2:cd:
bf:46:14:2c:a1:7c:43:ae:13:bc:f4:f6:2b:12:43:
6a:e5:0d:ba:6e:e8:fc:14:99:31:1e:04:c4:60:00:
b3:d3:21:b7:9c:8f:fe:40:1d:14:e4:75:de:34:89:
8a:08:9d:13:34:5a:f0:3b:6f:36:d2:7c:06:c5:00:
47:4e:f2:6d:5d:8a:1c:12:bf:b0:c7:ea:06:14:35:
12:92:1d:31:fa:53:1e:bf:32:ad:03:97:b7:9a:9e:
67:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FC:8F:0E:F7:60:0C:D9:2B:64:31:11:77:0D:0E:CF:23:F3:F8:8F
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/f_yPDvdgDNkrZDERdw0OzyPz-I8.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
79:4f:4e:b6:64:87:d4:39:20:dc:1c:ff:12:23:e0:4f:64:f9:
be:3e:ea:ab:51:0f:fa:2b:a1:45:aa:8f:72:eb:03:75:fb:88:
9a:22:c2:17:97:2b:6a:65:ca:50:1e:e8:06:18:a8:cf:89:7c:
29:10:cf:ba:76:b3:fb:27:cb:88:40:fc:ab:f5:b4:f7:46:72:
c8:fd:2d:c8:b7:23:25:9c:1a:38:e3:03:b6:d1:ed:01:01:e9:
6f:db:98:3d:9a:e3:d1:c1:ed:6f:53:d5:a8:50:48:be:f4:66:
2b:7c:f9:d1:6f:4a:1e:1b:c8:64:d2:12:b7:77:a4:d3:24:c2:
2b:99:39:d2:2c:e4:fa:d3:51:40:88:75:7b:0f:2f:14:03:1e:
5f:86:8d:53:1d:2d:b3:af:6b:17:e1:04:dd:2f:2d:89:18:eb:
7c:cd:05:27:ea:d6:24:0a:39:78:39:b0:39:9c:a5:fd:06:f1:
3e:cb:ff:67:d8:4b:f4:ca:0a:a3:25:ba:84:73:a1:be:b0:bd:
69:26:51:c1:e7:32:05:69:6f:0a:ba:f3:ee:9f:9a:4e:ab:2f:
2c:d4:50:06:0a:9a:f7:86:b2:a0:2b:69:db:24:2a:44:62:d7:
c7:f6:43:64:6a:ba:42:fd:5f:68:87:e9:89:b0:bc:5d:60:46:
7d:a5:14:88
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICQ4UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAyMjEw
MDMwMDZaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKDdGRkM4RjBFRjc2MDBD
RDkyQjY0MzExMTc3MEQwRUNGMjNGM0Y4OEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCgPf72hZZFTI2uE0r+YwJZrdNiOOfvjehSuaCFGMPOeCWe++PM
cCcZG7aglvwKHPTNGXtWXGMwLvU3ZdyoLFzvAiysjOk1wXkky3FH/IXizBCNuAug
3TN7vwKiH9cZtEt166S5gaNN5k/MsYotaF9A/cyQ224DCJ8/ZuUZUpnbNGBMFRI5
Lj1utm0xcBRyehgceuhxDekQt3+7vt03HJbSdhTizb9GFCyhfEOuE7z09isSQ2rl
Dbpu6PwUmTEeBMRgALPTIbecj/5AHRTkdd40iYoInRM0WvA7bzbSfAbFAEdO8m1d
ihwSv7DH6gYUNRKSHTH6Ux6/Mq0Dl7eanmcJAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUf/yPDvdgDNkrZDERdw0OzyPz+I8wHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9mX3lQRHZkZ0ROa3JaREVSZHcwT3p5UHotSTgucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL8wDQYJKoZIhvcNAQELBQADggEB
AHlPTrZkh9Q5INwc/xIj4E9k+b4+6qtRD/oroUWqj3LrA3X7iJoiwheXK2plylAe
6AYYqM+JfCkQz7p2s/sny4hA/Kv1tPdGcsj9Lci3IyWcGjjjA7bR7QEB6W/bmD2a
49HB7W9T1ahQSL70Zit8+dFvSh4byGTSErd3pNMkwiuZOdIs5PrTUUCIdXsPLxQD
Hl+GjVMdLbOvaxfhBN0vLYkY63zNBSfq1iQKOXg5sDmcpf0G8T7L/2fYS/TKCqMl
uoRzob6wvWkmUcHnMgVpbwq68+6fmk6rLyzUUAYKmveGsqAradskKkRi18f2Q2Rq
ukL9X2iH6YmwvF1gRn2lFIg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org