Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/64tCMfaoeiB6seOT5I0uS4F0mxM.roa
File: 64tCMfaoeiB6seOT5I0uS4F0mxM.roa (raw, json)
Hash identifier: qRb6rVoUSMCpM4rYYfPnlp2aQJPAFo3nilMPlfUsso4=
Subject key identifier: EB:8B:42:31:F6:A8:7A:20:7A:B1:E3:93:E4:8D:2E:4B:81:74:9B:13
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 44D3
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/64tCMfaoeiB6seOT5I0uS4F0mxM.roa
Signing time: Thu 17 Mar 2022 00:30:12 +0000
ROA not before: Thu 17 Mar 2022 00:30:12 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17619 (0x44d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 17 00:30:12 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=EB8B4231F6A87A207AB1E393E48D2E4B81749B13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:51:08:ca:fc:2c:f4:fa:98:8c:5b:86:87:3b:
7d:e4:4d:fd:b8:bc:33:b3:e4:ec:38:c9:93:c8:e9:
31:6a:8a:e3:f8:b4:bc:a4:29:15:a7:b2:9d:6a:91:
3e:04:fa:8d:f3:84:92:a5:ec:57:85:0d:ec:98:2f:
dd:c3:3f:9e:ab:6d:cd:e9:45:8d:c2:a3:71:ee:94:
50:31:e1:04:2b:ee:75:db:d8:28:8b:7d:23:bc:6e:
58:63:4d:b5:10:75:d6:c3:e7:b5:77:dd:86:1f:7f:
08:60:76:28:42:54:25:e2:56:02:0c:ca:30:8d:d0:
19:a3:86:bf:d8:90:f4:c5:c9:50:43:b9:c6:09:8d:
73:f5:8f:a5:8f:a0:ad:5e:0d:7f:9c:d1:aa:1e:7e:
6e:21:5e:27:0a:a0:bf:75:f3:f6:64:93:b8:78:b0:
ea:08:d8:29:a4:dd:b9:70:b6:48:0b:59:7b:4e:72:
16:f6:1f:93:2f:c0:fc:e3:6b:da:e1:26:72:a7:9e:
0a:96:9e:61:ed:31:ee:10:4a:43:a5:88:60:78:10:
b0:82:b6:2b:e2:e8:93:03:94:95:b5:b1:44:8a:32:
82:da:b7:7d:8b:06:82:7d:ea:43:67:12:99:67:8e:
99:70:9b:dd:8b:5e:92:fe:2d:56:8e:e5:51:c4:41:
35:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:8B:42:31:F6:A8:7A:20:7A:B1:E3:93:E4:8D:2E:4B:81:74:9B:13
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/64tCMfaoeiB6seOT5I0uS4F0mxM.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
27:e2:c6:28:6b:03:e1:48:57:ac:ec:54:14:4b:ca:2e:cd:15:
1e:fd:04:55:9c:26:37:a8:8a:24:89:88:df:29:d5:89:9e:80:
a3:5a:2b:d2:6e:8f:41:35:5b:db:85:bb:ca:3b:fd:e4:d9:89:
34:25:fe:c2:55:d1:9c:be:18:38:9c:a3:4a:bd:59:29:f0:58:
6d:69:83:0a:de:7c:8c:66:09:cd:7f:25:26:8e:82:18:c3:b8:
bf:9e:cb:4b:49:c4:0e:8e:c2:03:7b:d5:c4:35:7b:90:24:28:
96:4d:78:d6:07:8a:8e:04:f0:31:67:d1:18:90:78:52:42:94:
3e:78:5a:09:ce:f1:fa:92:f2:50:c0:10:94:87:ea:a7:27:44:
92:d1:4b:30:f1:6a:eb:47:9d:fd:cc:c9:b0:1e:85:39:4f:1f:
f0:95:f2:59:e1:af:3a:44:6a:67:c9:4b:3a:28:b5:98:5d:e0:
be:27:f6:12:8d:7c:ee:12:51:4a:b9:e6:a5:63:da:30:44:ad:
11:0a:b9:e2:29:9a:06:0f:71:76:00:4a:0b:28:a1:10:99:30:
37:e4:da:be:d2:5e:c8:7d:57:c7:4b:8b:71:86:61:5f:f6:89:
d4:e3:f1:0c:3d:5e:7a:b5:69:e6:4c:ca:1a:6a:1b:82:94:da:
6c:e5:c8:78
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRNMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAzMTcw
MDMwMTJaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKEVCOEI0MjMxRjZBODdB
MjA3QUIxRTM5M0U0OEQyRTRCODE3NDlCMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDWUQjK/Cz0+piMW4aHO33kTf24vDOz5Ow4yZPI6TFqiuP4tLyk
KRWnsp1qkT4E+o3zhJKl7FeFDeyYL93DP56rbc3pRY3Co3HulFAx4QQr7nXb2CiL
fSO8blhjTbUQddbD57V33YYffwhgdihCVCXiVgIMyjCN0Bmjhr/YkPTFyVBDucYJ
jXP1j6WPoK1eDX+c0aoefm4hXicKoL918/Zkk7h4sOoI2Cmk3blwtkgLWXtOchb2
H5MvwPzja9rhJnKnngqWnmHtMe4QSkOliGB4ELCCtivi6JMDlJW1sUSKMoLat32L
BoJ96kNnEplnjplwm92LXpL+LVaO5VHEQTVfAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU64tCMfaoeiB6seOT5I0uS4F0mxMwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS82NHRDTWZhb2VpQjZzZU9UNUkwdVM0RjBteE0ucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAswDQYJKoZIhvcNAQELBQADggEB
ACfixihrA+FIV6zsVBRLyi7NFR79BFWcJjeoiiSJiN8p1YmegKNaK9Juj0E1W9uF
u8o7/eTZiTQl/sJV0Zy+GDico0q9WSnwWG1pgwrefIxmCc1/JSaOghjDuL+ey0tJ
xA6OwgN71cQ1e5AkKJZNeNYHio4E8DFn0RiQeFJClD54WgnO8fqS8lDAEJSH6qcn
RJLRSzDxautHnf3MybAehTlPH/CV8lnhrzpEamfJSzootZhd4L4n9hKNfO4SUUq5
5qVj2jBErREKueIpmgYPcXYASgsooRCZMDfk2r7SXsh9V8dLi3GGYV/2idTj8Qw9
Xnq1aeZMyhpqG4KU2mzlyHg=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org