Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/AlQaDXRb-00wjatnorzzZ5SBN9Y.roa
File: AlQaDXRb-00wjatnorzzZ5SBN9Y.roa (raw, json)
Hash identifier: 7JQ5n9iJD9ZaCDEYzO5CQUYqfc1NEfnsQtZA4MOs18s=
Subject key identifier: 02:54:1A:0D:74:5B:FB:4D:30:8D:AB:67:A2:BC:F3:67:94:81:37:D6
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4997
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/AlQaDXRb-00wjatnorzzZ5SBN9Y.roa
Signing time: Thu 09 Jun 2022 00:30:09 +0000
ROA not before: Thu 09 Jun 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18839 (0x4997)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 9 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=02541A0D745BFB4D308DAB67A2BCF367948137D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:69:87:b5:57:10:32:8f:71:7d:be:6a:60:99:
b4:2e:9e:fa:71:50:92:c5:4f:f1:1c:95:81:50:bf:
bc:01:ed:65:6f:61:0b:67:6b:e9:a9:bf:55:2a:67:
e7:7e:b6:0b:8f:5f:a2:5e:f7:92:c1:1a:52:9f:e7:
ad:1b:fe:00:3d:bb:0d:47:3b:37:c2:3a:be:da:f1:
05:b0:71:d4:76:e8:ae:70:5e:72:b5:f8:a3:ae:8d:
73:bd:5d:97:85:4f:0a:08:90:18:89:2c:c2:97:7a:
2e:cf:f8:37:ef:b1:0e:9b:cd:a5:f5:fb:a9:de:22:
35:14:8c:c4:28:70:a6:38:46:5c:2a:37:6d:ef:e0:
7e:f6:9e:4a:66:85:7c:5b:93:da:55:2a:78:dd:39:
81:64:33:a1:e9:6d:fe:74:62:48:f9:fa:ee:d7:16:
e6:7d:6e:b6:74:57:bd:81:b2:26:d7:cc:d2:1c:09:
34:4f:74:69:df:bf:7a:6e:66:76:10:b9:25:e6:02:
d5:06:6e:00:d3:bf:de:39:58:12:a8:79:a5:c9:6d:
6c:92:cb:14:d2:e8:81:ae:73:7a:93:9d:f7:ef:15:
cc:6d:0c:36:cb:3f:37:5d:08:9c:1a:33:20:f8:06:
51:0f:1e:cf:66:d2:21:8a:93:d7:bd:ac:4a:81:af:
c7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:54:1A:0D:74:5B:FB:4D:30:8D:AB:67:A2:BC:F3:67:94:81:37:D6
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/AlQaDXRb-00wjatnorzzZ5SBN9Y.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
68:8a:1d:95:e4:67:b1:ba:42:25:cb:88:af:1a:65:b3:a1:f0:
63:6b:1c:97:7e:fa:08:11:1a:e7:67:5a:14:ca:12:c1:fb:c5:
8b:49:c7:c8:ea:73:42:6b:a8:0c:03:1f:01:8e:52:eb:69:8c:
0e:65:db:b7:2d:cc:d3:a3:cf:b3:96:f9:31:66:a3:bb:55:7c:
06:cf:a8:2d:53:7b:f6:11:2c:c4:18:9e:94:aa:ef:3c:e6:92:
3c:52:6d:82:2e:b0:ac:c9:ad:97:38:00:65:5f:9d:ee:65:68:
f0:54:e4:b4:0c:47:18:5a:44:ce:e9:24:36:f7:5f:37:f6:01:
17:aa:9b:54:d4:6c:7e:84:75:f5:f0:5b:84:87:54:76:a5:f6:
24:09:72:53:58:d1:80:f1:f0:f1:86:f6:ec:93:c3:a2:bb:1e:
21:13:b9:dd:1e:c8:5a:74:9e:ea:87:5e:f6:55:8b:0a:2d:bb:
5b:43:2d:a4:d1:5c:7b:e9:96:3d:0c:e4:34:1d:eb:7d:85:81:
6a:1b:fb:11:89:15:59:3a:84:e1:4c:33:a2:bb:2f:30:75:fc:
4c:dc:04:21:38:3f:18:67:17:46:76:9e:3e:57:05:44:6f:d4:
aa:77:84:ac:ad:5c:80:7b:a4:99:c7:00:d8:e7:7a:90:33:69:
69:6f:0c:88
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICSZcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA2MDkw
MDMwMDlaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDAyNTQxQTBENzQ1QkZC
NEQzMDhEQUI2N0EyQkNGMzY3OTQ4MTM3RDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDpaYe1VxAyj3F9vmpgmbQunvpxUJLFT/EclYFQv7wB7WVvYQtn
a+mpv1UqZ+d+tguPX6Je95LBGlKf560b/gA9uw1HOzfCOr7a8QWwcdR26K5wXnK1
+KOujXO9XZeFTwoIkBiJLMKXei7P+DfvsQ6bzaX1+6neIjUUjMQocKY4RlwqN23v
4H72nkpmhXxbk9pVKnjdOYFkM6Hpbf50Ykj5+u7XFuZ9brZ0V72BsibXzNIcCTRP
dGnfv3puZnYQuSXmAtUGbgDTv945WBKoeaXJbWySyxTS6IGuc3qTnffvFcxtDDbL
PzddCJwaMyD4BlEPHs9m0iGKk9e9rEqBr8dhAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUAlQaDXRb+00wjatnorzzZ5SBN9YwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9BbFFhRFhSYi0wMHdqYXRub3J6elo1U0JOOVkucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHA0wDQYJKoZIhvcNAQELBQADggEB
AGiKHZXkZ7G6QiXLiK8aZbOh8GNrHJd++ggRGudnWhTKEsH7xYtJx8jqc0JrqAwD
HwGOUutpjA5l27ctzNOjz7OW+TFmo7tVfAbPqC1Te/YRLMQYnpSq7zzmkjxSbYIu
sKzJrZc4AGVfne5laPBU5LQMRxhaRM7pJDb3Xzf2AReqm1TUbH6EdfXwW4SHVHal
9iQJclNY0YDx8PGG9uyTw6K7HiETud0eyFp0nuqHXvZViwotu1tDLaTRXHvplj0M
5DQd632FgWob+xGJFVk6hOFMM6K7LzB1/EzcBCE4PxhnF0Z2nj5XBURv1Kp3hKyt
XIB7pJnHANjnepAzaWlvDIg=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org