Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/ndQvKefZWacGjyJUTLdafFfFuss.roa
File: ndQvKefZWacGjyJUTLdafFfFuss.roa (raw, json)
Hash identifier: qTvzzROqRaNMelMRuAFa6ZxHgAVklaF1a5ag33GNF4Y=
Subject key identifier: 9D:D4:2F:29:E7:D9:59:A7:06:8F:22:54:4C:B7:5A:7C:57:C5:BA:CB
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4437
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ndQvKefZWacGjyJUTLdafFfFuss.roa
Signing time: Sun 06 Mar 2022 00:30:08 +0000
ROA not before: Sun 06 Mar 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 45.132.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17463 (0x4437)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 6 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=9DD42F29E7D959A7068F22544CB75A7C57C5BACB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:67:e9:30:59:6d:f6:b6:8b:b7:ca:65:38:ec:
5e:be:39:ad:97:ef:de:a4:6e:2a:2c:52:8e:b7:3e:
d8:bf:d3:ab:6c:6c:36:af:f8:ff:39:86:8a:ea:98:
ce:31:b8:96:7f:6b:72:48:88:b6:e4:81:e0:7e:97:
92:5a:ee:78:fd:ca:bc:a9:d1:48:03:7d:dd:8e:63:
47:18:43:06:6d:e5:34:18:bc:11:6b:51:84:66:47:
13:22:6d:c9:c9:37:c2:34:91:27:f4:b5:8d:5c:83:
de:30:ef:e2:b0:22:a9:35:32:5d:5d:e6:cd:63:d8:
90:68:fc:08:90:e8:f5:01:2c:de:b3:15:8b:36:4e:
30:a2:48:67:50:27:9f:5f:9b:11:d9:f2:1a:bf:cf:
54:e1:2f:f6:0b:f9:63:e0:5a:40:99:20:3b:51:93:
7d:b8:e2:93:cb:b6:4e:60:a5:75:24:6b:76:07:26:
64:23:24:21:53:01:94:77:de:59:c6:3a:fc:3a:fc:
1f:f3:39:03:67:a3:94:c2:af:8f:c0:d0:2e:a4:56:
68:06:db:0e:26:b6:78:16:2f:85:0e:44:07:b2:db:
24:cf:45:a7:35:35:75:26:06:bb:90:8f:de:e2:85:
da:47:1d:7e:d8:00:b0:fa:0d:bb:42:a6:54:53:85:
68:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D4:2F:29:E7:D9:59:A7:06:8F:22:54:4C:B7:5A:7C:57:C5:BA:CB
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ndQvKefZWacGjyJUTLdafFfFuss.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.191.0/24
Signature Algorithm: sha256WithRSAEncryption
05:d1:47:bc:d5:c5:bb:63:c1:a4:9a:30:a5:0b:24:05:fa:39:
cd:76:05:b7:8c:9d:66:41:70:bb:f8:f5:3b:b7:4b:8e:2d:97:
c9:e9:8d:77:ed:45:23:64:64:7a:a9:f7:a4:d8:df:fd:bf:fc:
eb:17:80:d5:68:86:8f:fe:59:64:d3:02:0b:6a:d2:cd:50:e0:
e0:ec:e3:0f:00:be:b2:eb:d1:85:c1:ff:d9:51:c6:b5:ba:89:
ec:4a:4d:0f:78:fc:42:99:19:2b:95:5b:dd:f3:ba:40:c8:7d:
8b:89:bd:30:16:30:ed:10:3b:f3:58:e0:a6:6c:2e:94:4c:93:
e8:81:0e:17:2e:58:7b:73:90:31:0d:94:e9:84:87:91:f1:ae:
e6:88:f0:69:ba:8c:b1:2f:9c:fe:ec:fb:61:a6:d2:8d:5c:f2:
3d:a1:77:3b:6f:2c:8c:d8:9d:cb:15:ad:b2:3a:35:2c:6f:18:
88:aa:dc:5e:95:1c:8a:0e:be:d7:30:22:aa:b1:e3:c1:4c:35:
5b:c7:44:77:dc:54:82:c7:5b:91:38:0c:cc:79:21:9d:3c:1f:
4e:31:f4:22:4f:22:32:6a:72:be:2c:dc:f1:8c:68:94:28:0e:
8b:87:5b:8c:43:0b:d0:7d:4c:41:93:b8:62:94:00:36:29:c0:
93:18:54:e3
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRDcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAzMDYw
MDMwMDhaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKDlERDQyRjI5RTdEOTU5
QTcwNjhGMjI1NDRDQjc1QTdDNTdDNUJBQ0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXZ+kwWW32tou3ymU47F6+Oa2X796kbiosUo63Pti/06tsbDav
+P85horqmM4xuJZ/a3JIiLbkgeB+l5Ja7nj9yryp0UgDfd2OY0cYQwZt5TQYvBFr
UYRmRxMibcnJN8I0kSf0tY1cg94w7+KwIqk1Ml1d5s1j2JBo/AiQ6PUBLN6zFYs2
TjCiSGdQJ59fmxHZ8hq/z1ThL/YL+WPgWkCZIDtRk3244pPLtk5gpXUka3YHJmQj
JCFTAZR33lnGOvw6/B/zOQNno5TCr4/A0C6kVmgG2w4mtngWL4UORAey2yTPRac1
NXUmBruQj97ihdpHHX7YALD6DbtCplRThWj1AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUndQvKefZWacGjyJUTLdafFfFusswHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9uZFF2S2VmWldhY0dqeUpVVExkYWZGZkZ1c3Mucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL8wDQYJKoZIhvcNAQELBQADggEB
AAXRR7zVxbtjwaSaMKULJAX6Oc12BbeMnWZBcLv49Tu3S44tl8npjXftRSNkZHqp
96TY3/2//OsXgNVoho/+WWTTAgtq0s1Q4ODs4w8AvrLr0YXB/9lRxrW6iexKTQ94
/EKZGSuVW93zukDIfYuJvTAWMO0QO/NY4KZsLpRMk+iBDhcuWHtzkDENlOmEh5Hx
ruaI8Gm6jLEvnP7s+2Gm0o1c8j2hdztvLIzYncsVrbI6NSxvGIiq3F6VHIoOvtcw
Iqqx48FMNVvHRHfcVILHW5E4DMx5IZ08H04x9CJPIjJqcr4s3PGMaJQoDouHW4xD
C9B9TEGTuGKUADYpwJMYVOM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org