Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/1wpJjLTsz6LrybwH1zanP0Zlg1Q.roa
File: 1wpJjLTsz6LrybwH1zanP0Zlg1Q.roa (raw, json)
Hash identifier: K+HuDEUY5P5PPLfiDTnKN4PUau6Hu9IIyj/wSdKnInA=
Subject key identifier: D7:0A:49:8C:B4:EC:CF:A2:EB:C9:BC:07:D7:36:A7:3F:46:65:83:54
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 46F5
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/1wpJjLTsz6LrybwH1zanP0Zlg1Q.roa
Signing time: Mon 25 Apr 2022 00:30:08 +0000
ROA not before: Mon 25 Apr 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18165 (0x46f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 25 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=D70A498CB4ECCFA2EBC9BC07D736A73F46658354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9f:6e:6f:f0:a0:5f:17:be:e0:48:a9:5e:06:
0d:93:d0:ef:79:f4:4e:c7:9c:d9:cf:e4:e6:9b:d4:
65:29:f6:8b:9d:46:08:6d:60:e4:8d:b0:e6:97:ca:
19:c3:1c:13:ec:4f:a4:97:fd:9b:e8:70:4d:61:6a:
fe:ae:4c:6a:11:ba:b0:b1:78:48:e6:18:a3:fc:2a:
9a:0b:27:71:76:f0:47:b7:a9:0b:e8:5c:0c:e9:39:
5e:f1:52:23:77:4f:36:e0:6d:30:2f:32:92:b4:be:
80:5d:f1:0d:77:c0:5c:28:e1:a6:d1:6e:ee:25:06:
c4:11:6c:33:cb:57:b0:24:de:20:23:b0:21:3d:65:
5d:ef:c0:c2:50:2f:99:8f:b0:b2:f9:04:e8:ee:fa:
0a:cf:74:f4:2e:6e:12:14:9e:ba:95:46:ff:44:71:
34:9c:5c:cd:2c:6e:c5:cc:ed:57:0d:d7:a7:be:c9:
8f:81:7d:f3:2c:e9:bf:04:78:2b:0d:6a:d0:9f:43:
c5:09:3b:c1:c8:72:70:58:49:4a:1c:70:34:bd:90:
8e:7c:3c:e3:11:9f:71:73:a5:4a:ad:49:1e:c0:0a:
3d:d5:8b:34:bf:4c:d0:a7:d2:f2:7b:21:e8:3f:ed:
90:56:41:4e:ed:7f:54:0a:06:3b:4d:a7:b3:b7:20:
12:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0A:49:8C:B4:EC:CF:A2:EB:C9:BC:07:D7:36:A7:3F:46:65:83:54
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/1wpJjLTsz6LrybwH1zanP0Zlg1Q.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:c1:88:f3:35:dd:af:58:29:ac:7f:4d:89:5a:42:79:46:3b:
ff:b5:ed:84:ca:3c:33:0d:fb:63:11:8f:85:35:49:27:ab:fc:
68:be:2a:26:3a:eb:c7:ed:39:24:aa:05:31:ca:80:d9:4c:89:
80:4e:ae:00:ee:cd:e3:9a:ac:89:c6:88:7e:83:ba:1b:ec:a2:
4a:db:6e:20:80:0b:14:ec:54:d5:de:3b:a3:78:31:01:83:6d:
4b:13:bc:a1:a3:04:56:1c:19:a9:c6:1c:2c:66:0a:8f:21:76:
43:c4:55:1a:bc:22:04:25:6e:81:10:93:51:a4:b6:8b:9c:3d:
3f:4d:c5:16:df:12:de:b8:cc:68:64:b9:b7:ce:64:e9:f4:cb:
7a:fe:43:bf:e0:ed:b9:78:3a:61:77:7a:6a:ef:f9:25:71:60:
19:43:ac:ca:f5:ef:e6:2a:7b:60:1c:ec:f2:cd:c2:ba:80:63:
2e:83:f1:f2:a5:01:5f:77:e6:99:68:b9:c8:22:e9:72:59:9b:
e7:93:49:2d:70:13:e7:20:4b:62:0f:c7:2a:58:76:2a:aa:6e:
04:3c:28:79:6f:44:06:98:00:8b:50:d8:11:c5:27:ee:76:a0:
40:ac:51:75:ab:c1:81:9d:08:fe:d6:42:cf:32:66:04:81:ec:
e7:87:b4:e3
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRvUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA0MjUw
MDMwMDhaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKEQ3MEE0OThDQjRFQ0NG
QTJFQkM5QkMwN0Q3MzZBNzNGNDY2NTgzNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3n25v8KBfF77gSKleBg2T0O959E7HnNnP5Oab1GUp9oudRght
YOSNsOaXyhnDHBPsT6SX/ZvocE1hav6uTGoRurCxeEjmGKP8KpoLJ3F28Ee3qQvo
XAzpOV7xUiN3TzbgbTAvMpK0voBd8Q13wFwo4abRbu4lBsQRbDPLV7Ak3iAjsCE9
ZV3vwMJQL5mPsLL5BOju+grPdPQubhIUnrqVRv9EcTScXM0sbsXM7VcN16e+yY+B
ffMs6b8EeCsNatCfQ8UJO8HIcnBYSUoccDS9kI58POMRn3FzpUqtSR7ACj3VizS/
TNCn0vJ7Ieg/7ZBWQU7tf1QKBjtNp7O3IBLDAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU1wpJjLTsz6LrybwH1zanP0Zlg1QwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS8xd3BKakxUc3o2THJ5YndIMXphblAwWmxnMVEucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAMwDQYJKoZIhvcNAQELBQADggEB
AKPBiPM13a9YKax/TYlaQnlGO/+17YTKPDMN+2MRj4U1SSer/Gi+KiY668ftOSSq
BTHKgNlMiYBOrgDuzeOarInGiH6DuhvsokrbbiCACxTsVNXeO6N4MQGDbUsTvKGj
BFYcGanGHCxmCo8hdkPEVRq8IgQlboEQk1GktoucPT9NxRbfEt64zGhkubfOZOn0
y3r+Q7/g7bl4OmF3emrv+SVxYBlDrMr17+Yqe2Ac7PLNwrqAYy6D8fKlAV935plo
ucgi6XJZm+eTSS1wE+cgS2IPxypYdiqqbgQ8KHlvRAaYAItQ2BHFJ+52oECsUXWr
wYGdCP7WQs8yZgSB7OeHtOM=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org