Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/EfQOGaDEHMfbqFhZhjc5Rtg_ACo.roa
File: EfQOGaDEHMfbqFhZhjc5Rtg_ACo.roa (raw, json)
Hash identifier: uU8PVhxDHKcZSuT6y+GlK6PrYqKAmlIFr38z9nV1UeI=
Subject key identifier: 11:F4:0E:19:A0:C4:1C:C7:DB:A8:58:59:86:37:39:46:D8:3F:00:2A
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 47A9
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/EfQOGaDEHMfbqFhZhjc5Rtg_ACo.roa
Signing time: Sun 08 May 2022 00:30:07 +0000
ROA not before: Sun 08 May 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18345 (0x47a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 8 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=11F40E19A0C41CC7DBA8585986373946D83F002A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:98:aa:6a:f0:5f:2e:74:92:6c:91:40:27:01:
a0:83:55:9b:06:7c:15:9a:7d:e3:cc:70:c4:45:ce:
29:04:64:62:40:b1:59:73:af:64:fa:a9:8a:b3:c7:
94:cb:87:b2:b0:42:ee:55:ab:6e:b3:22:44:4b:fb:
4a:37:0f:ae:51:6c:bb:d0:16:b2:72:b2:2b:28:6a:
45:d9:0f:98:cb:9f:35:c8:0d:e6:fe:32:30:5a:0b:
1a:e0:a9:1c:db:62:77:ee:02:4c:d8:ef:cc:02:9a:
98:02:d4:05:75:9c:b8:87:32:c8:88:d8:57:e9:fe:
8d:35:d6:2d:39:8f:16:dc:ab:48:eb:db:25:b2:10:
bc:e9:57:10:77:f7:34:a2:79:75:e9:5b:e7:54:1b:
92:ad:bb:81:9b:39:7d:ed:4a:32:03:d8:46:b6:ae:
0c:14:6e:89:b4:ed:1e:8b:ec:2c:f3:48:6f:4b:fc:
c8:61:33:6c:ea:10:16:63:d5:83:2b:b7:2e:85:b5:
0f:8a:86:d8:80:e1:f6:c7:95:a0:af:96:61:94:d5:
a5:6b:f5:58:33:59:5f:d1:31:de:15:20:7c:79:bf:
2b:27:72:3b:bb:70:08:f6:15:b0:d4:51:90:db:2c:
d3:48:be:b6:9f:5a:aa:b3:f6:5f:3e:52:c7:11:2e:
7f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F4:0E:19:A0:C4:1C:C7:DB:A8:58:59:86:37:39:46:D8:3F:00:2A
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/EfQOGaDEHMfbqFhZhjc5Rtg_ACo.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:e8:6f:4e:d8:e0:e9:54:4c:65:47:a2:9e:d0:45:be:1f:f0:
ca:2c:5c:33:7e:42:5c:5b:43:ab:88:61:2e:cd:1f:e2:00:67:
13:34:3b:ca:04:32:3d:c3:a2:bc:95:36:77:b2:7e:eb:37:3b:
7e:7c:8e:18:ec:b8:aa:6f:b0:6d:ef:bf:ce:7c:04:06:f7:66:
fe:97:db:22:77:e5:11:bc:31:4f:09:1d:2a:8b:cb:37:f7:88:
37:f6:74:db:a5:f0:97:6e:df:c3:fd:68:3e:f7:a0:3a:23:45:
e3:7a:ab:7c:01:33:bd:35:a6:77:54:0c:38:f2:d7:44:78:45:
f6:65:9c:3e:e9:a2:00:4d:4a:34:ad:27:e3:3f:fc:f7:63:5b:
b5:96:ec:15:ba:8d:8d:23:39:bb:56:21:9a:0b:cb:6d:a8:6b:
8d:14:cd:81:f8:3a:4b:aa:23:be:1f:92:22:35:0d:f1:63:89:
ad:89:a3:da:17:2e:e2:34:d5:d7:2b:d5:ac:ce:56:9c:d5:21:
0a:fc:9a:70:d3:18:b1:bd:78:95:31:4b:df:ea:f2:a1:68:85:
ff:8e:b4:fa:b8:a8:6c:a1:f6:53:eb:43:81:6c:0e:c2:58:df:
c6:d4:0d:0b:f5:d3:9c:6f:c1:fe:a2:e3:2d:d3:1f:ab:43:c5:
85:d6:4b:cd
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICR6kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA1MDgw
MDMwMDdaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDExRjQwRTE5QTBDNDFD
QzdEQkE4NTg1OTg2MzczOTQ2RDgzRjAwMkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqmKpq8F8udJJskUAnAaCDVZsGfBWafePMcMRFzikEZGJAsVlz
r2T6qYqzx5TLh7KwQu5Vq26zIkRL+0o3D65RbLvQFrJysisoakXZD5jLnzXIDeb+
MjBaCxrgqRzbYnfuAkzY78wCmpgC1AV1nLiHMsiI2Ffp/o011i05jxbcq0jr2yWy
ELzpVxB39zSieXXpW+dUG5Ktu4GbOX3tSjID2Ea2rgwUbom07R6L7CzzSG9L/Mhh
M2zqEBZj1YMrty6FtQ+KhtiA4fbHlaCvlmGU1aVr9VgzWV/RMd4VIHx5vysncju7
cAj2FbDUUZDbLNNIvrafWqqz9l8+UscRLn/9AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUEfQOGaDEHMfbqFhZhjc5Rtg/ACowHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9FZlFPR2FERUhNZmJxRmhaaGpjNVJ0Z19BQ28ucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAkwDQYJKoZIhvcNAQELBQADggEB
AJ/ob07Y4OlUTGVHop7QRb4f8MosXDN+QlxbQ6uIYS7NH+IAZxM0O8oEMj3DoryV
Nneyfus3O358jhjsuKpvsG3vv858BAb3Zv6X2yJ35RG8MU8JHSqLyzf3iDf2dNul
8Jdu38P9aD73oDojReN6q3wBM701pndUDDjy10R4RfZlnD7pogBNSjStJ+M//Pdj
W7WW7BW6jY0jObtWIZoLy22oa40UzYH4OkuqI74fkiI1DfFjia2Jo9oXLuI01dcr
1azOVpzVIQr8mnDTGLG9eJUxS9/q8qFohf+OtPq4qGyh9lPrQ4FsDsJY38bUDQv1
05xvwf6i4y3TH6tDxYXWS80=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org