Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/pEDnd_txMdgEdj_6vMF21_zyjEI.roa
File:                     pEDnd_txMdgEdj_6vMF21_zyjEI.roa (raw, json)
Hash identifier:          g0sWdZoJQShaFLgxnIkFvQs3FLIFFmk9/kM3d9rM7lQ=
Subject key identifier:   A4:40:E7:77:FB:71:31:D8:04:76:3F:FA:BC:C1:76:D7:FC:F2:8C:42
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       42EC
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/pEDnd_txMdgEdj_6vMF21_zyjEI.roa
Signing time:             Thu 10 Feb 2022 00:30:08 +0000
ROA not before:           Thu 10 Feb 2022 00:30:08 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     47065
IP address blocks:        45.132.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17132 (0x42ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb 10 00:30:08 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=A440E777FB7131D804763FFABCC176D7FCF28C42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d1:af:17:23:ba:2f:ff:a8:3a:5b:08:d2:15:
                    ed:fa:59:e1:11:c2:17:63:2a:7e:c1:4f:b9:0b:f3:
                    58:fe:f9:db:c4:82:08:93:70:b2:c1:bd:32:5f:93:
                    54:08:6d:83:6d:8c:e7:ad:f8:80:5c:61:22:cb:11:
                    15:74:73:87:26:54:e1:db:22:f1:12:c0:cc:c8:a1:
                    94:25:fa:d2:47:c9:c3:23:6d:7e:dd:6d:97:88:ef:
                    01:31:2b:38:90:4a:b6:cc:f3:5a:db:41:8e:d8:0d:
                    90:38:d7:d2:62:c2:37:ce:32:c4:8e:f0:13:75:c4:
                    ba:cd:3c:20:64:74:bc:9a:39:12:15:58:44:47:82:
                    4b:5d:bf:05:41:a8:f8:9c:41:be:43:1b:fc:2d:27:
                    d9:31:f3:95:b6:3f:bf:75:ed:e1:02:5c:c0:03:05:
                    d2:71:b5:80:50:7a:40:f2:91:a4:3e:0f:4d:4a:4f:
                    d9:8e:b3:dc:0a:f4:99:fa:ef:48:98:3d:f4:14:3f:
                    31:f2:ca:7c:af:0b:ef:fc:52:b6:d9:27:18:1d:db:
                    99:52:03:8a:dc:b3:fd:e9:6f:b6:46:26:05:57:8e:
                    17:ae:16:8c:1f:1f:73:6c:99:5b:d3:f4:70:53:dc:
                    44:07:ce:a1:21:3c:5d:a5:48:1b:fd:0a:1d:f7:d4:
                    ca:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:40:E7:77:FB:71:31:D8:04:76:3F:FA:BC:C1:76:D7:FC:F2:8C:42
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/pEDnd_txMdgEdj_6vMF21_zyjEI.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:93:dc:1d:11:29:f9:1a:73:aa:54:d0:fb:41:79:db:07:af:
         1c:e6:62:42:81:9b:6d:ad:ae:7d:48:c4:37:79:ab:9c:7b:49:
         b7:7f:1d:59:be:09:f2:55:de:da:62:c6:24:dd:c2:bd:e3:70:
         2a:f8:04:f6:48:c8:21:77:d6:33:51:b1:33:19:3e:76:70:5e:
         1a:12:bf:9e:fe:0a:f7:e4:f8:91:ea:08:d6:92:f2:5d:f1:a4:
         a7:0f:5a:d1:a1:7d:b9:38:ca:49:bb:45:07:6c:5f:3e:e1:bb:
         de:ff:9c:57:49:06:c0:fb:c2:2f:52:d5:d6:ed:b2:dd:c1:47:
         4a:36:77:91:ab:f7:fb:de:ef:9d:be:29:1a:8d:0e:48:42:51:
         01:be:0d:ec:56:49:77:20:79:87:e8:1f:5d:47:15:9c:8f:2d:
         cd:27:01:2d:43:00:79:87:f7:a1:61:7c:f7:20:c8:07:cf:ee:
         b5:ae:18:fb:dd:1f:1a:37:cf:bc:99:a1:4c:b3:99:01:f8:a8:
         38:53:f6:bb:ee:f0:1c:08:81:50:d7:93:38:e5:96:d2:cc:85:
         4a:56:af:2d:ff:78:36:8e:7f:69:c1:97:07:d9:af:81:0c:a8:
         36:f4:f1:9c:a2:b6:7d:1a:d6:17:c6:e3:4d:e4:81:05:5d:1a:
         a0:99:8f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org