Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/7tLlyeo7F8BhlZXsWiMtB_uUW9c.roa
File: 7tLlyeo7F8BhlZXsWiMtB_uUW9c.roa (raw, json)
Hash identifier: KrdM4WsydNd3uMdqg4Zsy+Sgs7iCw/jppa34HMEVXKw=
Subject key identifier: EE:D2:E5:C9:EA:3B:17:C0:61:95:95:EC:5A:23:2D:07:FB:94:5B:D7
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 491B
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/7tLlyeo7F8BhlZXsWiMtB_uUW9c.roa
Signing time: Thu 02 Jun 2022 00:30:09 +0000
ROA not before: Thu 02 Jun 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18715 (0x491b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 2 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=EED2E5C9EA3B17C0619595EC5A232D07FB945BD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:da:f5:ad:a8:f3:70:7d:be:05:04:6f:0c:52:
db:b7:55:66:cf:44:af:11:a2:0a:f5:30:35:d7:d7:
61:fa:15:f2:79:c0:7c:78:72:0c:5a:fa:64:3e:93:
48:6b:10:be:f7:48:0f:b7:28:7b:fd:39:76:cc:16:
13:8a:b2:17:6f:04:89:57:49:34:92:1e:82:55:0e:
bb:91:d9:3a:93:80:3f:cf:23:26:41:85:6a:02:c9:
0f:37:7f:c5:e6:87:81:ba:1e:f7:13:40:5d:e8:c2:
e9:38:fd:8f:ae:aa:e1:fa:57:b2:ed:1a:d0:9f:ab:
47:54:18:df:88:cf:28:d8:b7:8f:8c:d0:aa:9d:94:
38:a8:3f:56:9e:a9:36:20:56:e9:c9:7e:8e:6b:2f:
4b:70:d6:27:4a:07:27:d0:60:66:1b:99:e1:b4:a5:
d0:b3:0f:23:60:b4:99:32:fc:ff:19:56:f5:d6:eb:
42:9f:c5:a2:f5:e0:7c:99:34:30:3c:f7:a6:92:1f:
b0:4e:02:bd:a1:41:9e:d1:89:77:ea:2d:de:5e:c1:
a6:8e:73:71:ee:57:a8:0f:ed:39:fb:02:df:75:93:
ec:32:c3:50:25:6b:c8:ab:2b:e5:4f:12:b7:88:b0:
73:03:1f:89:55:74:6d:e8:42:c4:8c:24:dd:6b:ab:
ba:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D2:E5:C9:EA:3B:17:C0:61:95:95:EC:5A:23:2D:07:FB:94:5B:D7
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/7tLlyeo7F8BhlZXsWiMtB_uUW9c.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:54:2d:5f:9e:f3:8f:b5:e6:61:19:0c:8e:52:5a:dc:a8:ff:
8d:17:43:16:69:d2:01:f1:a6:15:d5:28:a2:f3:af:30:39:31:
d4:9d:59:11:ba:a9:5f:4c:fd:6e:f6:b7:48:04:c8:05:21:40:
39:60:c8:3a:2a:ef:97:98:85:a3:f3:cd:0c:32:90:3c:24:a7:
75:b1:ea:aa:27:8c:07:76:6a:ff:98:77:00:9d:cb:cb:76:01:
02:fd:f8:e5:31:49:59:90:76:1f:68:bb:af:eb:dc:04:96:11:
22:33:95:48:c0:8f:9a:dc:cf:5c:66:0f:f2:ae:22:aa:72:3b:
c9:c2:af:c8:b9:40:ec:38:01:a5:3c:d3:9b:42:fe:f9:29:7e:
4d:a8:c4:f9:f8:33:70:b1:12:e3:15:f6:86:53:d2:66:ee:a0:
49:8d:92:fd:26:89:a3:5d:7c:60:f4:c2:dc:6f:53:02:26:31:
8c:25:93:c8:12:2b:c3:ca:6d:58:9a:53:c0:3e:23:81:bf:07:
77:91:6f:56:32:20:26:12:48:8d:b1:9d:e4:7e:27:9e:c1:6f:
ad:5f:cf:35:a2:6d:2f:fa:b3:ce:50:0c:f2:87:52:31:b2:e2:
16:90:d9:3e:54:5c:df:4e:1a:cf:be:73:20:c2:53:51:4d:db:
c9:07:a0:5b
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICSRswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA2MDIw
MDMwMDlaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKEVFRDJFNUM5RUEzQjE3
QzA2MTk1OTVFQzVBMjMyRDA3RkI5NDVCRDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDA2vWtqPNwfb4FBG8MUtu3VWbPRK8Rogr1MDXX12H6FfJ5wHx4
cgxa+mQ+k0hrEL73SA+3KHv9OXbMFhOKshdvBIlXSTSSHoJVDruR2TqTgD/PIyZB
hWoCyQ83f8Xmh4G6HvcTQF3owuk4/Y+uquH6V7LtGtCfq0dUGN+IzyjYt4+M0Kqd
lDioP1aeqTYgVunJfo5rL0tw1idKByfQYGYbmeG0pdCzDyNgtJky/P8ZVvXW60Kf
xaL14HyZNDA896aSH7BOAr2hQZ7RiXfqLd5ewaaOc3HuV6gP7Tn7At91k+wyw1Al
a8irK+VPEreIsHMDH4lVdG3oQsSMJN1rq7pjAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU7tLlyeo7F8BhlZXsWiMtB/uUW9cwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS83dExseWVvN0Y4QmhsWlhzV2lNdEJfdVVXOWMucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAkwDQYJKoZIhvcNAQELBQADggEB
ALdULV+e84+15mEZDI5SWtyo/40XQxZp0gHxphXVKKLzrzA5MdSdWRG6qV9M/W72
t0gEyAUhQDlgyDoq75eYhaPzzQwykDwkp3Wx6qonjAd2av+YdwCdy8t2AQL9+OUx
SVmQdh9ou6/r3ASWESIzlUjAj5rcz1xmD/KuIqpyO8nCr8i5QOw4AaU805tC/vkp
fk2oxPn4M3CxEuMV9oZT0mbuoEmNkv0miaNdfGD0wtxvUwImMYwlk8gSK8PKbVia
U8A+I4G/B3eRb1YyICYSSI2xneR+J57Bb61fzzWibS/6s85QDPKHUjGy4haQ2T5U
XN9OGs++cyDCU1FN28kHoFs=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org