Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/txFv3xuhcrycfthh-RoNqERKNcY.roa
File: txFv3xuhcrycfthh-RoNqERKNcY.roa (raw, json)
Hash identifier: LAQER/72sn07bSgQINVrYtPH7MSzMGCNIdfi2oYaW0U=
Subject key identifier: B7:11:6F:DF:1B:A1:72:BC:9C:7E:D8:61:F9:1A:0D:A8:44:4A:35:C6
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4640
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/txFv3xuhcrycfthh-RoNqERKNcY.roa
Signing time: Tue 12 Apr 2022 00:30:12 +0000
ROA not before: Tue 12 Apr 2022 00:30:12 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17984 (0x4640)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 12 00:30:12 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=B7116FDF1BA172BC9C7ED861F91A0DA8444A35C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7f:f3:54:52:3b:3a:dc:a5:df:22:f6:00:2b:
f5:8d:d0:8e:f3:30:f4:e2:34:4a:24:60:fc:2c:b5:
51:3d:2d:79:03:53:a7:2d:fe:3c:cf:2e:21:1d:a7:
13:04:88:28:56:72:8d:36:3d:ea:bc:d5:0b:a1:1e:
6b:8f:26:20:b1:b2:42:d6:d3:cd:af:13:cc:37:40:
6f:8b:86:e2:c0:e9:f9:8b:68:d6:54:ac:4c:19:5a:
9b:2f:b1:da:00:54:fe:87:42:6e:71:c7:9f:fa:f5:
81:b3:7e:96:72:e4:ab:42:0d:5c:b3:cb:d7:cf:94:
b6:b2:23:44:61:53:74:e8:68:db:57:fa:78:ce:b5:
b2:a3:84:44:27:de:9b:30:eb:83:51:bf:98:2b:c1:
c4:df:be:55:d5:d5:35:80:8d:d9:f3:85:ce:56:ef:
44:0d:c2:7f:48:af:98:95:4d:f3:a0:35:4a:40:5a:
ed:57:af:b2:5c:5c:8f:56:4e:17:44:2d:57:03:f3:
ef:70:24:84:64:00:b4:00:13:95:4a:06:39:e4:ba:
e0:cb:1c:53:ff:4b:1c:1d:72:b2:46:c9:07:82:41:
d2:31:34:15:fd:4b:a6:c4:66:96:de:e7:c0:e9:1c:
56:33:5f:34:f2:8e:e1:8c:2c:a8:c3:ab:03:a5:f0:
84:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:11:6F:DF:1B:A1:72:BC:9C:7E:D8:61:F9:1A:0D:A8:44:4A:35:C6
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/txFv3xuhcrycfthh-RoNqERKNcY.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
66:52:1f:0a:55:ec:80:86:80:21:65:3b:50:d0:f3:9f:06:14:
fd:63:52:26:32:e2:0f:68:ce:c0:40:d4:e3:b6:46:6f:e9:fc:
1e:5b:df:d2:53:df:51:e7:14:c8:75:94:6a:b9:01:74:8c:b9:
8d:4b:9e:67:41:3f:91:2c:8e:3a:ae:a1:c4:72:41:76:64:9e:
4a:d3:67:ca:31:2d:82:28:e0:3a:fc:c8:b1:0f:44:90:4a:e2:
89:14:12:51:8c:4e:39:1e:bb:d0:1b:10:00:6d:b0:f4:70:3d:
c9:b0:40:a3:41:23:eb:65:b3:40:c1:c4:95:d2:c4:ac:7c:0c:
98:39:57:5a:56:8d:c2:53:d2:eb:15:25:90:52:7f:b7:6a:7a:
7e:b0:b9:01:1e:69:37:d7:b0:57:cf:82:da:c5:78:7a:2f:5e:
d8:9d:cc:54:6b:00:63:3d:00:38:21:4e:bc:fd:8f:b8:82:9f:
54:95:61:7b:09:00:95:ed:4a:f7:06:da:fe:d1:41:1a:80:6a:
60:b0:56:0e:d8:4a:3c:8e:4a:71:58:49:5d:e9:bf:b7:04:3b:
18:fe:72:60:01:a4:41:c4:0a:1d:5f:e3:7e:9c:c0:fa:b7:52:
c8:ce:77:a6:ee:d5:fe:9c:c1:cd:6b:77:c8:12:24:4d:42:81:
1e:63:c0:46
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRkAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA0MTIw
MDMwMTJaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKEI3MTE2RkRGMUJBMTcy
QkM5QzdFRDg2MUY5MUEwREE4NDQ0QTM1QzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEf/NUUjs63KXfIvYAK/WN0I7zMPTiNEokYPwstVE9LXkDU6ct
/jzPLiEdpxMEiChWco02Peq81QuhHmuPJiCxskLW082vE8w3QG+LhuLA6fmLaNZU
rEwZWpsvsdoAVP6HQm5xx5/69YGzfpZy5KtCDVyzy9fPlLayI0RhU3ToaNtX+njO
tbKjhEQn3psw64NRv5grwcTfvlXV1TWAjdnzhc5W70QNwn9Ir5iVTfOgNUpAWu1X
r7JcXI9WThdELVcD8+9wJIRkALQAE5VKBjnkuuDLHFP/SxwdcrJGyQeCQdIxNBX9
S6bEZpbe58DpHFYzXzTyjuGMLKjDqwOl8ISnAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUtxFv3xuhcrycfthh+RoNqERKNcYwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS90eEZ2M3h1aGNyeWNmdGhoLVJvTnFFUktOY1kucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL0wDQYJKoZIhvcNAQELBQADggEB
AGZSHwpV7ICGgCFlO1DQ858GFP1jUiYy4g9ozsBA1OO2Rm/p/B5b39JT31HnFMh1
lGq5AXSMuY1LnmdBP5EsjjquocRyQXZknkrTZ8oxLYIo4Dr8yLEPRJBK4okUElGM
Tjkeu9AbEABtsPRwPcmwQKNBI+tls0DBxJXSxKx8DJg5V1pWjcJT0usVJZBSf7dq
en6wuQEeaTfXsFfPgtrFeHovXtidzFRrAGM9ADghTrz9j7iCn1SVYXsJAJXtSvcG
2v7RQRqAamCwVg7YSjyOSnFYSV3pv7cEOxj+cmABpEHECh1f436cwPq3UsjOd6bu
1f6cwc1rd8gSJE1CgR5jwEY=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org