Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/t29ghkROzF2zaHKpmUaMEiiJd_8.roa
File: t29ghkROzF2zaHKpmUaMEiiJd_8.roa (raw, json)
Hash identifier: 8GxV778g4ASFYffW3duMIsKscurjLldU64UBLiwtTEM=
Subject key identifier: B7:6F:60:86:44:4E:CC:5D:B3:68:72:A9:99:46:8C:12:28:89:77:FF
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4527
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/t29ghkROzF2zaHKpmUaMEiiJd_8.roa
Signing time: Wed 23 Mar 2022 00:30:08 +0000
ROA not before: Wed 23 Mar 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17703 (0x4527)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 23 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=B76F6086444ECC5DB36872A999468C12288977FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9f:14:56:d0:c0:b6:b1:f1:07:39:66:87:34:
97:ac:fe:50:c1:da:84:b4:63:ca:9c:aa:33:84:85:
d0:8b:78:df:ae:6f:0b:52:37:95:68:3b:19:26:14:
88:83:a5:86:58:64:6c:56:31:a5:39:d8:d8:e9:a4:
c3:3f:1b:5b:d1:bf:67:b4:7f:25:a8:7e:07:e5:9a:
b0:1a:5a:2f:0e:13:a8:2e:04:81:e2:2d:35:8d:51:
47:6c:91:b8:3a:35:8e:75:31:87:af:0b:5a:93:c0:
37:46:b5:4c:41:a8:e6:f5:c5:3a:62:d1:e8:8b:5d:
c1:6c:3e:fb:36:ae:62:d2:20:73:04:d0:28:df:5a:
58:d5:aa:76:b8:05:a8:12:12:36:49:0e:f1:dd:02:
26:1d:ca:3e:23:71:05:92:55:01:3b:17:c0:22:36:
bd:46:b1:02:f4:c3:3e:86:5c:dc:6e:49:0a:26:4e:
18:4a:27:e9:55:33:d6:fa:6a:cf:3f:39:bc:39:7d:
47:66:b3:d9:e8:c6:53:fd:96:5d:8b:c2:fa:88:fc:
f9:87:7e:77:16:b6:cd:77:b2:b5:83:ba:46:67:46:
f5:dc:6d:c7:7b:a2:e8:fc:3a:05:97:f3:e5:56:a0:
91:8b:18:08:84:27:23:df:62:d0:77:43:1c:2d:fe:
19:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6F:60:86:44:4E:CC:5D:B3:68:72:A9:99:46:8C:12:28:89:77:FF
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/t29ghkROzF2zaHKpmUaMEiiJd_8.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:e7:e2:4c:b7:9f:99:61:39:01:f9:a2:52:d0:a0:7e:30:72:
62:c3:74:1d:5b:3c:fc:b7:9a:0f:de:5d:bf:67:b2:ae:4a:fc:
7e:b6:bc:38:66:3c:3a:51:5e:f2:72:66:32:a7:3e:46:9f:4d:
2e:85:53:87:df:69:0e:3e:1b:05:2c:1c:b0:eb:4f:ae:14:ee:
2e:98:63:2d:f6:87:0f:bc:cc:b6:32:09:e1:ae:24:5b:76:fa:
72:76:ed:e3:b3:1b:16:4b:d2:d8:c3:df:e6:87:74:d1:18:d4:
ea:52:84:b4:8b:34:49:00:c7:b9:fa:fa:b8:59:75:b5:d2:eb:
37:01:b0:14:fa:17:e7:1a:38:2c:04:38:a7:8b:5e:55:c7:f5:
66:36:96:d3:c9:eb:c6:88:1a:c0:7c:25:34:16:33:4f:64:49:
df:9f:e5:8d:99:d4:02:5a:6f:be:b5:ce:82:c1:bb:c9:22:79:
3c:b4:dc:a1:fb:c4:1b:7c:e2:97:44:86:b5:85:ca:d2:92:f0:
e5:55:ba:c0:35:22:86:dc:0e:16:f3:ee:fd:13:dc:4f:a9:2b:
c1:09:4b:c0:3a:e6:c7:e4:72:18:45:f6:3f:cb:34:bd:7b:2b:
fb:54:91:de:26:be:a4:c2:3c:fc:db:36:d0:bd:c8:37:92:f5:
f3:6e:7d:4d
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRScwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAzMjMw
MDMwMDhaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKEI3NkY2MDg2NDQ0RUND
NURCMzY4NzJBOTk5NDY4QzEyMjg4OTc3RkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2nxRW0MC2sfEHOWaHNJes/lDB2oS0Y8qcqjOEhdCLeN+ubwtS
N5VoOxkmFIiDpYZYZGxWMaU52NjppMM/G1vRv2e0fyWofgflmrAaWi8OE6guBIHi
LTWNUUdskbg6NY51MYevC1qTwDdGtUxBqOb1xTpi0eiLXcFsPvs2rmLSIHME0Cjf
WljVqna4BagSEjZJDvHdAiYdyj4jcQWSVQE7F8AiNr1GsQL0wz6GXNxuSQomThhK
J+lVM9b6as8/Obw5fUdms9noxlP9ll2LwvqI/PmHfncWts13srWDukZnRvXcbcd7
ouj8OgWX8+VWoJGLGAiEJyPfYtB3Qxwt/hnDAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUt29ghkROzF2zaHKpmUaMEiiJd/8wHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS90MjlnaGtST3pGMnphSEtwbVVhTUVpaUpkXzgucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL0wDQYJKoZIhvcNAQELBQADggEB
AA/n4ky3n5lhOQH5olLQoH4wcmLDdB1bPPy3mg/eXb9nsq5K/H62vDhmPDpRXvJy
ZjKnPkafTS6FU4ffaQ4+GwUsHLDrT64U7i6YYy32hw+8zLYyCeGuJFt2+nJ27eOz
GxZL0tjD3+aHdNEY1OpShLSLNEkAx7n6+rhZdbXS6zcBsBT6F+caOCwEOKeLXlXH
9WY2ltPJ68aIGsB8JTQWM09kSd+f5Y2Z1AJab761zoLBu8kieTy03KH7xBt84pdE
hrWFytKS8OVVusA1IobcDhbz7v0T3E+pK8EJS8A65sfkchhF9j/LNL17K/tUkd4m
vqTCPPzbNtC9yDeS9fNufU0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org