Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/i5zWAaxSBZr6CJtVABK0PxpoqOk.roa
File: i5zWAaxSBZr6CJtVABK0PxpoqOk.roa (raw, json)
Hash identifier: gpY6loQb3EuLpkKg6FuXBKVQjZjN7/hf4PeBqAtY7YM=
Subject key identifier: 8B:9C:D6:01:AC:52:05:9A:FA:08:9B:55:00:12:B4:3F:1A:68:A8:E9
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4700
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/i5zWAaxSBZr6CJtVABK0PxpoqOk.roa
Signing time: Tue 26 Apr 2022 00:30:07 +0000
ROA not before: Tue 26 Apr 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18176 (0x4700)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 26 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=8B9CD601AC52059AFA089B550012B43F1A68A8E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2c:27:28:73:d2:86:ac:3a:d2:98:62:6c:2f:
bc:22:d2:03:7e:43:73:7f:97:98:ed:53:5f:fb:fe:
03:e8:45:f0:b5:d9:f2:83:37:a9:47:90:6a:8c:97:
98:20:ef:8b:e8:64:3d:78:0b:73:5f:37:fc:8e:43:
c6:55:2f:eb:7b:be:a2:c8:7b:80:55:4c:47:fc:f3:
12:9e:69:a6:dc:bd:08:db:ab:ee:8b:fc:47:aa:4b:
60:e7:cc:80:a3:18:85:16:18:22:11:89:bd:ba:99:
c9:1f:9e:3c:41:2b:c4:37:7f:e1:52:ec:da:40:08:
10:11:4d:c7:08:dd:f4:73:eb:37:89:df:cf:38:b2:
99:aa:71:b1:60:bd:09:5d:44:78:b4:52:da:13:65:
a8:23:52:95:27:3b:b3:92:43:cb:96:ba:8b:f6:4d:
c7:85:bd:3f:c9:5f:72:57:73:7c:d7:2d:0e:f3:b4:
7d:a4:5a:73:3a:dd:a8:63:79:04:05:8c:a3:2e:78:
8c:e4:89:5f:56:cd:6d:98:a1:04:e7:93:e0:dd:9d:
67:39:af:a1:42:0d:c5:35:bf:df:84:33:32:99:8b:
31:8e:ef:a4:46:0b:d4:b5:fb:da:c5:d3:d4:aa:7b:
24:89:33:d9:67:7f:f2:6a:97:0a:13:5b:30:23:1f:
43:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9C:D6:01:AC:52:05:9A:FA:08:9B:55:00:12:B4:3F:1A:68:A8:E9
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/i5zWAaxSBZr6CJtVABK0PxpoqOk.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
49:d8:15:90:02:91:cc:48:8d:9b:bb:83:5f:ee:0b:a1:8f:74:
de:f2:0a:42:b3:36:72:55:46:2a:f5:cc:27:ec:7d:7a:45:56:
00:11:33:e9:c5:68:ef:ff:d7:8d:2e:ae:a7:45:ea:ad:19:9f:
5c:5f:62:f6:84:22:1e:eb:61:f7:76:c3:66:12:b9:b2:a6:c4:
8a:c5:d1:af:e2:65:64:af:d6:c8:a0:d3:e6:37:73:c8:cc:1f:
1b:8a:15:1d:bc:62:97:85:42:40:40:ae:cc:56:5f:25:e5:39:
ee:09:d5:2c:7a:84:28:54:00:e5:9d:13:1a:9b:7d:3a:13:20:
f3:c0:b8:2d:ca:bc:56:2b:10:cb:39:eb:04:f6:19:66:81:7c:
d2:9b:ed:7c:58:e6:b7:89:d6:ab:44:15:62:82:7c:ee:e9:c8:
07:ee:0f:cb:97:35:43:71:fe:d5:ee:12:5e:60:ea:a3:d5:42:
82:3c:28:0f:49:39:b9:e6:3e:57:98:e0:2d:f5:97:01:19:5d:
fa:55:37:c5:ad:cd:7b:37:61:60:85:ca:6b:f9:48:4d:40:26:
dc:d8:af:33:f8:31:fb:6f:d7:07:2c:59:4e:03:6a:59:c0:22:
9e:07:93:74:b9:37:eb:61:86:f0:13:19:93:55:10:48:aa:6e:
80:50:3d:f6
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRwAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA0MjYw
MDMwMDdaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDhCOUNENjAxQUM1MjA1
OUFGQTA4OUI1NTAwMTJCNDNGMUE2OEE4RTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYLCcoc9KGrDrSmGJsL7wi0gN+Q3N/l5jtU1/7/gPoRfC12fKD
N6lHkGqMl5gg74voZD14C3NfN/yOQ8ZVL+t7vqLIe4BVTEf88xKeaabcvQjbq+6L
/EeqS2DnzICjGIUWGCIRib26mckfnjxBK8Q3f+FS7NpACBARTccI3fRz6zeJ3884
spmqcbFgvQldRHi0UtoTZagjUpUnO7OSQ8uWuov2TceFvT/JX3JXc3zXLQ7ztH2k
WnM63ahjeQQFjKMueIzkiV9WzW2YoQTnk+DdnWc5r6FCDcU1v9+EMzKZizGO76RG
C9S1+9rF09SqeySJM9lnf/JqlwoTWzAjH0MbAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUi5zWAaxSBZr6CJtVABK0PxpoqOkwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9pNXpXQWF4U0JacjZDSnRWQUJLMFB4cG9xT2sucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL8wDQYJKoZIhvcNAQELBQADggEB
AEnYFZACkcxIjZu7g1/uC6GPdN7yCkKzNnJVRir1zCfsfXpFVgARM+nFaO//140u
rqdF6q0Zn1xfYvaEIh7rYfd2w2YSubKmxIrF0a/iZWSv1sig0+Y3c8jMHxuKFR28
YpeFQkBArsxWXyXlOe4J1Sx6hChUAOWdExqbfToTIPPAuC3KvFYrEMs56wT2GWaB
fNKb7XxY5reJ1qtEFWKCfO7pyAfuD8uXNUNx/tXuEl5g6qPVQoI8KA9JObnmPleY
4C31lwEZXfpVN8WtzXs3YWCFymv5SE1AJtzYrzP4Mftv1wcsWU4DalnAIp4Hk3S5
N+thhvATGZNVEEiqboBQPfY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org