Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/AE8YXwzbT5Taoof5q5k8da12Dso.roa
File: AE8YXwzbT5Taoof5q5k8da12Dso.roa (raw, json)
Hash identifier: f+wxdjBgv+SFTzvN+an4Q0T5jaV9qn0LgzHjH9Aq8EM=
Subject key identifier: 00:4F:18:5F:0C:DB:4F:94:DA:A2:87:F9:AB:99:3C:75:AD:76:0E:CA
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 46FF
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/AE8YXwzbT5Taoof5q5k8da12Dso.roa
Signing time: Tue 26 Apr 2022 00:30:06 +0000
ROA not before: Tue 26 Apr 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18175 (0x46ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 26 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=004F185F0CDB4F94DAA287F9AB993C75AD760ECA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:70:41:94:4f:b5:ba:e0:36:e6:8c:62:26:43:
5f:ea:f8:ec:8a:23:fb:93:44:d9:22:4f:31:4e:f6:
b3:30:3a:f6:92:c7:5d:52:e9:f7:f4:ab:f4:1a:bd:
f9:02:5e:99:59:9d:2f:2a:da:68:99:39:04:e7:db:
41:b4:8c:be:9d:ca:34:ca:1b:c6:b1:09:b1:7b:83:
29:29:7f:7d:24:57:8f:bf:7a:7b:89:c6:34:d5:4e:
91:24:41:a3:08:36:cb:5f:5e:0a:89:6f:7e:3d:82:
ce:7c:e5:1d:4f:ca:33:05:49:d3:2d:3b:42:91:7e:
c7:c9:ca:99:d2:c0:ab:b4:8d:e7:44:7f:73:17:f3:
ee:0a:86:cc:72:51:50:dc:b0:45:66:12:bb:03:e5:
2f:34:0b:91:d3:27:2e:97:51:65:00:1d:bc:93:19:
e5:1a:c0:3b:6f:ed:1d:9c:91:05:d9:93:ed:0b:8e:
43:db:c0:6c:e7:0f:ff:f9:59:83:34:e6:8c:1d:44:
af:d2:40:78:f6:ec:be:8a:8a:60:9f:46:c2:c1:f6:
50:49:3f:60:bc:4c:59:ea:be:ed:dd:76:53:64:31:
23:ea:00:e8:34:94:ac:a4:44:3b:f7:ef:b8:b5:d9:
37:5d:4c:39:70:8b:cf:88:53:a9:5a:df:df:56:5c:
05:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4F:18:5F:0C:DB:4F:94:DA:A2:87:F9:AB:99:3C:75:AD:76:0E:CA
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/AE8YXwzbT5Taoof5q5k8da12Dso.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:ea:3c:21:9d:e5:a8:d3:2c:9f:94:45:55:f7:59:31:58:79:
0d:17:5d:c3:d5:ca:5a:2c:ac:85:bd:3c:0f:6a:97:df:cb:b4:
9a:d6:10:b3:53:82:ce:b3:6c:8a:49:71:b5:c4:20:90:e5:a6:
a6:2d:fb:79:b7:9e:72:88:ae:39:4a:79:ba:42:f1:e7:72:f8:
05:3c:1f:40:c0:33:64:af:50:88:16:05:cf:79:ca:28:68:5f:
0d:97:fe:a6:fa:ba:18:7c:13:55:5b:5d:87:49:68:6d:e2:4e:
2f:1e:39:1c:3a:06:66:01:ca:46:d6:14:8e:dc:4c:1e:d7:2a:
72:4f:85:29:53:f0:41:5b:11:1f:c8:e9:41:39:d0:63:1f:5b:
c6:dd:3a:c2:64:0d:df:a8:cf:0f:fd:a6:fb:96:d1:2f:c2:a9:
a7:cd:a7:c3:2e:75:51:aa:54:96:a6:db:ed:c4:23:1a:94:97:
17:cd:7a:76:98:e7:d0:6f:7d:a8:f9:cb:db:6b:e7:33:ba:51:
bb:57:dc:b1:d6:3c:ca:08:27:47:95:37:14:5d:19:91:25:94:
e0:55:3d:25:cb:17:3a:f2:83:aa:48:d4:5b:bf:95:56:91:48:
0c:5f:3e:bb:52:0f:64:ef:16:77:17:7e:fb:23:df:cd:3c:ef:
b2:ae:c5:8d
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRv8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA0MjYw
MDMwMDZaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDAwNEYxODVGMENEQjRG
OTREQUEyODdGOUFCOTkzQzc1QUQ3NjBFQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6cEGUT7W64DbmjGImQ1/q+OyKI/uTRNkiTzFO9rMwOvaSx11S
6ff0q/QavfkCXplZnS8q2miZOQTn20G0jL6dyjTKG8axCbF7gykpf30kV4+/enuJ
xjTVTpEkQaMINstfXgqJb349gs585R1PyjMFSdMtO0KRfsfJypnSwKu0jedEf3MX
8+4KhsxyUVDcsEVmErsD5S80C5HTJy6XUWUAHbyTGeUawDtv7R2ckQXZk+0LjkPb
wGznD//5WYM05owdRK/SQHj27L6KimCfRsLB9lBJP2C8TFnqvu3ddlNkMSPqAOg0
lKykRDv377i12TddTDlwi8+IU6la399WXAX3AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUAE8YXwzbT5Taoof5q5k8da12DsowHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9BRThZWHd6YlQ1VGFvb2Y1cTVrOGRhMTJEc28ucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHA8wDQYJKoZIhvcNAQELBQADggEB
AI7qPCGd5ajTLJ+URVX3WTFYeQ0XXcPVylosrIW9PA9ql9/LtJrWELNTgs6zbIpJ
cbXEIJDlpqYt+3m3nnKIrjlKebpC8edy+AU8H0DAM2SvUIgWBc95yihoXw2X/qb6
uhh8E1VbXYdJaG3iTi8eORw6BmYBykbWFI7cTB7XKnJPhSlT8EFbER/I6UE50GMf
W8bdOsJkDd+ozw/9pvuW0S/CqafNp8MudVGqVJam2+3EIxqUlxfNenaY59Bvfaj5
y9tr5zO6UbtX3LHWPMoIJ0eVNxRdGZEllOBVPSXLFzryg6pI1Fu/lVaRSAxfPrtS
D2TvFncXfvsj380877KuxY0=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org