Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/-NOMkoEG61eA0Gbic3gpz5zgI6U.roa
File: -NOMkoEG61eA0Gbic3gpz5zgI6U.roa (raw, json)
Hash identifier: six5KBNZpzHs+VMinvhgrqqG3u1/hd9FUsi7MCUXOsg=
Subject key identifier: F8:D3:8C:92:81:06:EB:57:80:D0:66:E2:73:78:29:CF:9C:E0:23:A5
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4578
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/-NOMkoEG61eA0Gbic3gpz5zgI6U.roa
Signing time: Tue 29 Mar 2022 00:30:08 +0000
ROA not before: Tue 29 Mar 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17784 (0x4578)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 29 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=F8D38C928106EB5780D066E2737829CF9CE023A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:07:30:6c:52:d0:17:33:4d:7f:fe:58:9e:70:
b6:89:82:b0:dc:7c:08:82:62:11:8f:8c:d6:5c:f0:
b5:26:d2:fa:c8:ea:63:89:7f:f2:92:d8:0a:66:df:
f8:cc:12:0d:78:d8:0c:fb:ad:ef:db:52:e3:58:f1:
e0:88:85:f6:c0:71:d1:05:91:a9:4b:6c:de:6a:90:
a8:2c:64:64:8c:a7:12:13:e9:f8:1f:a5:fd:36:e4:
60:a9:cb:5b:79:0d:0c:be:fd:2a:02:f7:e2:5d:3d:
b4:3d:b5:17:ee:44:cc:4f:9b:a6:ef:26:87:d0:af:
aa:17:94:72:77:a1:6b:45:22:71:36:a7:59:62:8d:
43:6b:d8:9b:81:78:8f:5a:2e:0a:53:c3:28:c7:a9:
13:71:db:6d:ed:88:12:41:ee:83:c7:26:23:80:02:
47:42:59:dc:ee:f5:ce:50:ee:8a:ee:c4:44:8c:50:
b0:11:3a:a4:99:17:7b:32:2e:45:f4:72:ad:73:eb:
df:72:61:d4:3e:d3:c4:c1:0e:e3:6c:e8:3c:50:69:
36:d2:64:59:60:35:d2:3f:be:b6:af:42:e6:85:41:
c2:f2:38:d4:2f:81:ba:ec:06:56:12:d8:2a:aa:6f:
41:c9:62:7f:97:5b:04:59:fd:4c:92:25:87:54:34:
a0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D3:8C:92:81:06:EB:57:80:D0:66:E2:73:78:29:CF:9C:E0:23:A5
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/-NOMkoEG61eA0Gbic3gpz5zgI6U.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
64:51:9e:d0:68:d4:e6:57:70:36:bf:e4:a7:b4:cd:d6:cb:cb:
27:31:d8:53:85:8f:82:86:7d:cf:31:53:97:41:b0:38:c7:5a:
7f:7b:26:2a:94:89:90:58:8c:74:77:30:f3:80:87:e6:61:5f:
2c:97:11:44:96:f8:a9:60:5c:99:b5:a1:84:5d:01:04:af:5b:
7d:1e:15:13:29:88:6d:2a:9f:d4:3f:d5:d0:20:cf:c6:7c:46:
41:be:9d:7d:0c:b0:83:1d:8b:cc:db:7e:80:6c:4c:12:30:ae:
01:37:a5:3d:a9:c0:37:82:fe:6d:b9:a0:96:c3:9a:7f:70:85:
88:0c:76:8d:01:4d:9a:44:89:3d:20:cc:90:97:b4:80:9e:fd:
e5:2a:b8:99:18:2c:db:f4:a5:46:1f:ab:c3:7b:8d:5c:31:88:
77:f5:d3:d7:02:c7:19:81:2a:61:02:d4:65:5c:56:85:9f:97:
08:a2:d4:08:3b:8b:6a:cb:ef:74:e7:aa:0a:59:b4:eb:1a:67:
c9:44:16:8a:70:ea:56:6b:ee:ec:a6:c2:3b:65:e2:40:e9:2f:
a5:63:5b:be:b3:1a:76:41:9d:71:5f:21:d4:b0:bb:01:a5:88:
f3:2a:69:f7:3f:bc:b5:72:6e:26:34:6d:bd:23:02:94:64:43:
e0:4f:c4:1d
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRXgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAzMjkw
MDMwMDhaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKEY4RDM4QzkyODEwNkVC
NTc4MEQwNjZFMjczNzgyOUNGOUNFMDIzQTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCBzBsUtAXM01//liecLaJgrDcfAiCYhGPjNZc8LUm0vrI6mOJ
f/KS2Apm3/jMEg142Az7re/bUuNY8eCIhfbAcdEFkalLbN5qkKgsZGSMpxIT6fgf
pf025GCpy1t5DQy+/SoC9+JdPbQ9tRfuRMxPm6bvJofQr6oXlHJ3oWtFInE2p1li
jUNr2JuBeI9aLgpTwyjHqRNx223tiBJB7oPHJiOAAkdCWdzu9c5Q7oruxESMULAR
OqSZF3syLkX0cq1z699yYdQ+08TBDuNs6DxQaTbSZFlgNdI/vravQuaFQcLyONQv
gbrsBlYS2Cqqb0HJYn+XWwRZ/UySJYdUNKCxAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU+NOMkoEG61eA0Gbic3gpz5zgI6UwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS8tTk9Na29FRzYxZUEwR2JpYzNncHo1emdJNlUucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAkwDQYJKoZIhvcNAQELBQADggEB
AGRRntBo1OZXcDa/5Ke0zdbLyycx2FOFj4KGfc8xU5dBsDjHWn97JiqUiZBYjHR3
MPOAh+ZhXyyXEUSW+KlgXJm1oYRdAQSvW30eFRMpiG0qn9Q/1dAgz8Z8RkG+nX0M
sIMdi8zbfoBsTBIwrgE3pT2pwDeC/m25oJbDmn9whYgMdo0BTZpEiT0gzJCXtICe
/eUquJkYLNv0pUYfq8N7jVwxiHf109cCxxmBKmEC1GVcVoWflwii1Ag7i2rL73Tn
qgpZtOsaZ8lEFopw6lZr7uymwjtl4kDpL6VjW76zGnZBnXFfIdSwuwGliPMqafc/
vLVybiY0bb0jApRkQ+BPxB0=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org