Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/8HmGDp6ZHhnMXSYnr0P92G-peEM.roa
File: 8HmGDp6ZHhnMXSYnr0P92G-peEM.roa (raw, json)
Hash identifier: /dexHdtQS1ZAkC/Ih9ep5wpJ5GI22McmBxtWMSzEXnI=
Subject key identifier: F0:79:86:0E:9E:99:1E:19:CC:5D:26:27:AF:43:FD:D8:6F:A9:78:43
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4825
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/8HmGDp6ZHhnMXSYnr0P92G-peEM.roa
Signing time: Tue 17 May 2022 00:30:06 +0000
ROA not before: Tue 17 May 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18469 (0x4825)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 17 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=F079860E9E991E19CC5D2627AF43FDD86FA97843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:50:76:71:5c:1a:f2:5b:8c:85:14:a0:02:4f:
c0:c2:92:20:a8:a8:23:73:82:5e:12:d7:6a:3f:b2:
22:b6:36:32:41:1a:cc:8c:43:f2:7a:f1:d0:64:78:
5e:c7:27:b0:07:26:0c:95:34:55:1b:fb:42:83:c9:
b1:aa:43:84:eb:6b:bb:61:d8:43:77:df:86:8e:5b:
c9:da:6c:4e:e3:31:0d:3f:19:54:6d:43:d6:dd:fc:
4b:6c:93:f5:0d:b2:e6:82:3e:a7:28:22:5d:ff:16:
dd:be:08:1e:ac:37:47:d8:e9:a6:53:be:41:1d:b9:
1c:a4:1a:ed:88:b2:1f:3b:14:06:37:b0:86:22:cc:
7b:f6:40:c1:e1:4a:d0:19:b8:38:e6:4a:77:9b:34:
83:21:e6:02:9b:2f:cf:cb:66:59:1c:62:9f:1a:3a:
ce:ee:b9:07:81:3a:b8:94:9b:be:9a:78:2f:c8:3c:
ce:ec:58:98:77:21:aa:55:f8:5c:a1:31:4a:2a:50:
b9:f6:79:44:46:e3:7f:8f:cb:d9:ef:5b:6d:07:ac:
6b:c3:97:ba:e7:b0:95:2f:9c:ac:60:80:72:53:40:
e6:1a:5a:7d:43:24:75:99:0c:cd:b1:cc:49:35:c0:
7e:29:2f:5f:d0:c8:5d:82:67:ef:36:91:d1:0d:4e:
0f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:79:86:0E:9E:99:1E:19:CC:5D:26:27:AF:43:FD:D8:6F:A9:78:43
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/8HmGDp6ZHhnMXSYnr0P92G-peEM.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:54:61:4d:fc:fd:f4:36:66:c8:46:f3:fc:09:3c:39:2d:18:
b8:32:da:ff:e2:89:19:fd:73:9f:a8:5b:17:28:32:b8:70:2e:
cd:1f:4a:fd:a8:03:22:2a:db:b7:b4:7d:7d:63:e1:1d:9c:8b:
a5:ef:b9:98:69:52:9e:21:ba:c9:4b:12:49:a5:98:dd:f6:86:
77:d6:ee:6f:75:8e:d5:cf:c5:f1:15:92:ac:77:3d:aa:43:a4:
aa:72:6c:57:44:3e:a3:d4:f5:37:52:c7:95:48:2e:a1:5a:49:
26:e5:19:fe:60:d2:0c:05:11:ed:0b:97:04:9d:81:23:d2:fb:
db:49:15:c5:6f:b9:f4:55:b5:c7:6a:a6:85:c2:7d:7e:3b:66:
ef:44:31:58:39:ad:df:a9:16:f4:ee:08:61:ee:9f:8c:bc:b9:
9b:93:06:76:60:88:ad:72:00:7d:95:88:b5:65:5f:a4:bf:14:
30:7a:b9:26:72:16:3f:6f:c6:fb:30:04:2f:63:49:be:76:88:
f0:0f:97:14:8b:dd:8a:3d:d0:3b:97:fa:c7:5d:fe:55:ba:68:
58:aa:81:3d:07:c0:73:17:eb:6e:e2:dd:96:b7:e8:92:46:55:
88:37:42:9d:f1:8a:31:0c:df:04:7f:47:8c:7b:aa:cc:c7:ac:
fc:6b:ee:78
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICSCUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA1MTcw
MDMwMDZaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKEYwNzk4NjBFOUU5OTFF
MTlDQzVEMjYyN0FGNDNGREQ4NkZBOTc4NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCgUHZxXBryW4yFFKACT8DCkiCoqCNzgl4S12o/siK2NjJBGsyM
Q/J68dBkeF7HJ7AHJgyVNFUb+0KDybGqQ4Tra7th2EN334aOW8nabE7jMQ0/GVRt
Q9bd/Etsk/UNsuaCPqcoIl3/Ft2+CB6sN0fY6aZTvkEduRykGu2Ish87FAY3sIYi
zHv2QMHhStAZuDjmSnebNIMh5gKbL8/LZlkcYp8aOs7uuQeBOriUm76aeC/IPM7s
WJh3IapV+FyhMUoqULn2eURG43+Py9nvW20HrGvDl7rnsJUvnKxggHJTQOYaWn1D
JHWZDM2xzEk1wH4pL1/QyF2CZ+82kdENTg8XAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU8HmGDp6ZHhnMXSYnr0P92G+peEMwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS84SG1HRHA2Wkhobk1YU1lucjBQOTJHLXBlRU0ucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHA8wDQYJKoZIhvcNAQELBQADggEB
AKFUYU38/fQ2ZshG8/wJPDktGLgy2v/iiRn9c5+oWxcoMrhwLs0fSv2oAyIq27e0
fX1j4R2ci6XvuZhpUp4huslLEkmlmN32hnfW7m91jtXPxfEVkqx3PapDpKpybFdE
PqPU9TdSx5VILqFaSSblGf5g0gwFEe0LlwSdgSPS+9tJFcVvufRVtcdqpoXCfX47
Zu9EMVg5rd+pFvTuCGHun4y8uZuTBnZgiK1yAH2ViLVlX6S/FDB6uSZyFj9vxvsw
BC9jSb52iPAPlxSL3Yo90DuX+sdd/lW6aFiqgT0HwHMX627i3Za36JJGVYg3Qp3x
ijEM3wR/R4x7qszHrPxr7ng=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org