Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/CxuOKOUQMJTRvY04Zj7ccsFGg8E.roa
File: CxuOKOUQMJTRvY04Zj7ccsFGg8E.roa (raw, json)
Hash identifier: Grh6P/Hhs8JcvPVUtbXJSL9y950aDwZrCNUA6eodqeg=
Subject key identifier: 0B:1B:8E:28:E5:10:30:94:D1:BD:8D:38:66:3E:DC:72:C1:46:83:C1
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 48FF
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/CxuOKOUQMJTRvY04Zj7ccsFGg8E.roa
Signing time: Wed 01 Jun 2022 00:30:06 +0000
ROA not before: Wed 01 Jun 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18687 (0x48ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 1 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=0B1B8E28E5103094D1BD8D38663EDC72C14683C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b4:26:52:88:1e:28:9e:92:7d:b3:8c:6c:9e:
ba:a1:f4:41:5f:4f:82:c0:79:de:16:2d:ac:81:bf:
3c:3f:34:af:f0:a1:f6:d5:8a:35:ff:19:fb:d7:43:
4b:2f:0a:ed:d9:73:11:f1:78:4d:6e:74:f9:22:ff:
63:40:fb:f2:ce:6f:a4:4c:d4:21:82:a8:59:d5:5e:
2d:5e:5d:55:77:e7:6b:84:80:0d:23:ef:60:11:0d:
b7:af:88:a2:b3:3f:8b:c3:fb:10:73:9a:a1:e6:7a:
5a:42:5f:d2:a8:de:06:d0:a1:44:96:d1:d3:b3:0e:
6f:55:31:c5:0a:e6:aa:a2:44:01:ab:48:9a:41:96:
77:37:ef:ba:50:82:a7:41:e7:ee:59:15:dc:51:bd:
92:2d:d0:99:01:45:34:9a:03:70:4e:42:a4:73:1b:
ed:b5:0a:42:7a:a7:95:cf:5a:ca:ce:16:2f:15:4c:
f1:62:36:2c:c7:90:65:db:1b:24:db:d5:bc:71:7c:
58:b1:3e:67:97:17:24:b8:6a:84:f4:2a:9e:8f:d3:
b2:58:4f:3c:68:7d:35:4f:9f:96:49:a3:15:3b:f2:
e6:ef:c5:99:52:4a:94:6f:55:fe:2f:8d:59:bc:1d:
aa:b7:9c:2e:4b:8d:79:18:d8:5a:33:06:16:cc:36:
90:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1B:8E:28:E5:10:30:94:D1:BD:8D:38:66:3E:DC:72:C1:46:83:C1
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/CxuOKOUQMJTRvY04Zj7ccsFGg8E.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.6.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:22:9c:2b:05:17:2c:91:5d:d2:85:be:f3:7f:49:2f:ed:bc:
54:60:19:35:73:f6:6b:ff:ac:4e:ad:71:8b:ea:bb:f7:42:f7:
db:da:cf:bd:95:3e:f2:cb:33:b5:96:08:a3:4f:16:9a:c7:56:
c0:e9:24:11:72:47:85:7c:10:a8:d5:3e:69:5f:87:24:3a:6f:
77:d2:3d:a3:00:90:e5:c7:5f:db:52:9b:61:26:54:26:3d:8e:
7b:30:95:35:e7:ac:05:c8:a6:04:b2:5d:a4:31:44:d5:93:79:
1a:81:17:1f:c2:26:a0:f8:f0:1c:a2:5d:16:88:28:83:59:ad:
d2:f6:b8:4b:91:fc:fe:3b:35:50:e0:bd:ae:bf:db:63:d3:ec:
13:aa:14:37:84:9b:40:46:96:93:65:69:b9:06:6c:78:82:a9:
73:ea:43:59:6b:88:93:4a:da:32:fa:9f:e2:d4:79:07:75:3f:
38:b6:3f:30:77:9c:9f:fd:a8:61:3c:70:64:7e:34:a9:27:68:
d6:99:6d:ad:67:bc:36:b1:e5:71:07:0c:32:33:b6:12:c4:2e:
86:fe:fd:69:19:89:22:bc:47:c2:f9:ca:be:dc:21:00:38:38:
f1:cd:bb:47:60:be:17:69:fe:2a:5f:8d:5a:c0:78:7f:cd:a9:
f1:62:8e:c2
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICSP8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA2MDEw
MDMwMDZaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDBCMUI4RTI4RTUxMDMw
OTREMUJEOEQzODY2M0VEQzcyQzE0NjgzQzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCXtCZSiB4onpJ9s4xsnrqh9EFfT4LAed4WLayBvzw/NK/wofbV
ijX/GfvXQ0svCu3ZcxHxeE1udPki/2NA+/LOb6RM1CGCqFnVXi1eXVV352uEgA0j
72ARDbeviKKzP4vD+xBzmqHmelpCX9Ko3gbQoUSW0dOzDm9VMcUK5qqiRAGrSJpB
lnc377pQgqdB5+5ZFdxRvZIt0JkBRTSaA3BOQqRzG+21CkJ6p5XPWsrOFi8VTPFi
NizHkGXbGyTb1bxxfFixPmeXFyS4aoT0Kp6P07JYTzxofTVPn5ZJoxU78ubvxZlS
SpRvVf4vjVm8Haq3nC5LjXkY2FozBhbMNpB1AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUCxuOKOUQMJTRvY04Zj7ccsFGg8EwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9DeHVPS09VUU1KVFJ2WTA0Wmo3Y2NzRkdnOEUucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAYwDQYJKoZIhvcNAQELBQADggEB
ADsinCsFFyyRXdKFvvN/SS/tvFRgGTVz9mv/rE6tcYvqu/dC99vaz72VPvLLM7WW
CKNPFprHVsDpJBFyR4V8EKjVPmlfhyQ6b3fSPaMAkOXHX9tSm2EmVCY9jnswlTXn
rAXIpgSyXaQxRNWTeRqBFx/CJqD48ByiXRaIKINZrdL2uEuR/P47NVDgva6/22PT
7BOqFDeEm0BGlpNlabkGbHiCqXPqQ1lriJNK2jL6n+LUeQd1Pzi2PzB3nJ/9qGE8
cGR+NKknaNaZba1nvDax5XEHDDIzthLELob+/WkZiSK8R8L5yr7cIQA4OPHNu0dg
vhdp/ipfjVrAeH/NqfFijsI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org