Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/7_2IlSMgTm9vmP1f1VPlW2uSs48.roa
File: 7_2IlSMgTm9vmP1f1VPlW2uSs48.roa (raw, json)
Hash identifier: a6D6IlB6a2EiCMKznhYEhC4uAo81D9xiBm/Yq4eSuLk=
Subject key identifier: EF:FD:88:95:23:20:4E:6F:6F:98:FD:5F:D5:53:E5:5B:6B:92:B3:8F
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4536
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/7_2IlSMgTm9vmP1f1VPlW2uSs48.roa
Signing time: Thu 24 Mar 2022 00:30:07 +0000
ROA not before: Thu 24 Mar 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17718 (0x4536)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 24 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=EFFD889523204E6F6F98FD5FD553E55B6B92B38F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:34:15:2c:1c:18:ca:6b:eb:63:e5:9a:07:d3:
85:92:da:9c:80:2f:47:89:24:f5:68:8b:93:1b:b8:
83:fd:50:c9:07:18:7f:a3:6f:a0:e9:3e:fd:07:2d:
0d:33:fd:fb:b4:c7:7e:38:5f:84:34:8a:3d:43:c8:
d5:a9:4b:42:0c:92:71:ba:b4:0e:e6:b4:92:12:e5:
35:66:c5:c1:99:82:27:97:57:28:8e:d9:f7:d2:5c:
5d:50:6f:1c:47:a2:30:d9:e4:fb:a9:64:e5:3c:a1:
c2:74:87:db:05:10:4a:cb:04:d8:1c:b7:9d:44:57:
f0:5b:5e:49:c5:a8:4b:21:1d:a6:f2:f7:8e:50:8b:
df:05:dd:8e:3f:88:77:85:16:89:c1:fb:2a:35:38:
73:18:b1:13:2b:60:5d:11:ac:10:94:7d:5b:c0:06:
88:c8:eb:35:87:ab:56:18:d2:9d:cf:04:32:11:8c:
33:51:07:c4:29:cb:a1:b2:c9:a2:86:ea:85:6a:56:
cc:0a:fd:88:9f:a8:41:43:24:e2:74:cd:a6:f9:ca:
1c:d7:c4:cf:78:54:3c:86:ae:b5:bb:a6:75:93:7c:
d5:3e:99:33:f5:4a:26:58:0d:dd:d6:8c:b7:55:30:
d7:e3:58:42:00:1b:a6:69:0b:1a:b6:0c:08:f7:2a:
ed:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FD:88:95:23:20:4E:6F:6F:98:FD:5F:D5:53:E5:5B:6B:92:B3:8F
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/7_2IlSMgTm9vmP1f1VPlW2uSs48.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
81:53:2b:88:e3:8b:2b:a8:91:da:b3:05:b4:27:a8:73:c5:cc:
6d:58:4c:60:da:e4:60:7e:b8:4a:10:98:73:98:f6:af:c8:31:
e4:f5:d6:8f:f9:47:8c:c7:13:23:70:02:e5:74:70:4f:10:ec:
fe:00:39:56:6d:47:b5:49:0e:4b:a6:6f:4b:7f:f2:b2:ab:b9:
f3:b5:72:8a:6e:45:3b:e2:26:33:e9:ad:94:b3:e4:f5:33:b9:
77:21:25:89:76:83:8d:97:0c:b5:96:e8:5e:76:82:a9:ac:09:
07:d4:fb:40:d6:42:02:53:96:42:d3:38:49:7d:3e:63:09:11:
87:29:99:01:d1:81:3e:e8:ad:e3:ea:38:44:09:ef:22:65:9d:
52:e8:dc:06:d6:33:b4:c5:ba:93:3e:b8:55:a3:23:46:d5:3e:
2e:4c:49:f0:10:ae:77:82:17:9e:be:cc:5c:ff:8e:79:10:54:
9d:df:8d:31:a7:9a:83:17:d5:a1:bb:61:d5:1f:8b:a0:c8:9f:
ca:3e:53:61:06:5f:98:29:b3:a9:67:14:49:b6:8e:cd:e1:71:
4a:87:b8:ed:9e:96:47:ec:86:81:28:03:fa:dc:e9:fd:23:9a:
64:68:7a:d9:d5:63:a5:ef:e2:d7:cb:57:5e:e6:7e:40:5a:99:
1e:44:fb:9b
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRTYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAzMjQw
MDMwMDdaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKEVGRkQ4ODk1MjMyMDRF
NkY2Rjk4RkQ1RkQ1NTNFNTVCNkI5MkIzOEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD0NBUsHBjKa+tj5ZoH04WS2pyAL0eJJPVoi5MbuIP9UMkHGH+j
b6DpPv0HLQ0z/fu0x344X4Q0ij1DyNWpS0IMknG6tA7mtJIS5TVmxcGZgieXVyiO
2ffSXF1QbxxHojDZ5PupZOU8ocJ0h9sFEErLBNgct51EV/BbXknFqEshHaby945Q
i98F3Y4/iHeFFonB+yo1OHMYsRMrYF0RrBCUfVvABojI6zWHq1YY0p3PBDIRjDNR
B8Qpy6GyyaKG6oVqVswK/YifqEFDJOJ0zab5yhzXxM94VDyGrrW7pnWTfNU+mTP1
SiZYDd3WjLdVMNfjWEIAG6ZpCxq2DAj3Ku0FAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU7/2IlSMgTm9vmP1f1VPlW2uSs48wHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS83XzJJbFNNZ1RtOXZtUDFmMVZQbFcydVNzNDgucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAswDQYJKoZIhvcNAQELBQADggEB
AIFTK4jjiyuokdqzBbQnqHPFzG1YTGDa5GB+uEoQmHOY9q/IMeT11o/5R4zHEyNw
AuV0cE8Q7P4AOVZtR7VJDkumb0t/8rKrufO1copuRTviJjPprZSz5PUzuXchJYl2
g42XDLWW6F52gqmsCQfU+0DWQgJTlkLTOEl9PmMJEYcpmQHRgT7orePqOEQJ7yJl
nVLo3AbWM7TFupM+uFWjI0bVPi5MSfAQrneCF56+zFz/jnkQVJ3fjTGnmoMX1aG7
YdUfi6DIn8o+U2EGX5gps6lnFEm2js3hcUqHuO2elkfshoEoA/rc6f0jmmRoetnV
Y6Xv4tfLV17mfkBamR5E+5s=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org