Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/G7juDHPal-Rv9zVWzesTQx0w-xM.roa
File: G7juDHPal-Rv9zVWzesTQx0w-xM.roa (raw, json)
Hash identifier: vexg6nlQEUs43lGf0Brlu4FA/Ipf2Hq41hcMq8y9s3o=
Subject key identifier: 1B:B8:EE:0C:73:DA:97:E4:6F:F7:35:56:CD:EB:13:43:1D:30:FB:13
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4615
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/G7juDHPal-Rv9zVWzesTQx0w-xM.roa
Signing time: Sat 09 Apr 2022 00:30:11 +0000
ROA not before: Sat 09 Apr 2022 00:30:11 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17941 (0x4615)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 9 00:30:11 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=1BB8EE0C73DA97E46FF73556CDEB13431D30FB13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d9:37:61:33:bf:4f:2c:06:ac:b2:f4:fa:37:
85:69:17:1a:4a:2e:de:f4:b4:3f:2e:ce:a7:cc:2a:
f2:33:c4:95:3e:16:25:e3:66:c0:64:72:a8:cc:a3:
3d:62:68:0f:a6:e9:0e:a0:2e:27:b8:79:53:17:67:
28:85:84:28:26:5c:fa:63:08:f0:35:c2:b9:f9:4e:
1e:bf:88:12:dc:cd:f0:a7:f8:c9:32:6b:5f:e1:99:
3c:0c:91:1e:5c:f3:2f:73:d5:a4:39:44:15:a8:47:
49:86:11:8e:7c:d9:2f:de:cd:c5:11:4b:ca:26:fa:
2f:f3:0a:0b:84:c5:74:34:11:c1:0b:db:91:c3:41:
0b:c4:50:ec:ed:c7:0a:f2:a5:1c:66:f2:26:61:45:
7d:76:53:96:b6:8a:79:99:ef:67:d4:34:78:fb:fb:
82:5d:e3:42:66:34:08:e5:ff:a2:30:c1:09:58:2c:
dd:ce:f8:dc:e6:bb:56:8f:43:ee:e0:1d:7e:86:7d:
9b:d9:0f:c7:8f:f9:ec:dd:53:59:b4:53:fa:93:1b:
94:d8:86:1d:41:89:ef:7f:63:7d:57:84:cd:07:a8:
65:ef:d9:db:24:65:d6:b3:eb:6a:e4:c9:d4:95:00:
4c:27:e6:02:8a:60:63:96:22:65:ee:a7:8a:f1:59:
a2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B8:EE:0C:73:DA:97:E4:6F:F7:35:56:CD:EB:13:43:1D:30:FB:13
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/G7juDHPal-Rv9zVWzesTQx0w-xM.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
78:93:5d:72:5d:58:be:81:ce:d7:8f:6e:11:ba:06:07:94:10:
5c:58:e5:35:ca:c9:eb:a6:26:2c:45:cf:bc:32:70:29:de:de:
b9:ac:fb:4d:64:bf:07:7f:40:93:dd:bd:a2:05:c2:f9:e4:87:
eb:2e:4f:a7:4e:31:39:b1:7d:d9:91:3b:88:45:b3:d6:80:42:
12:d9:6e:ff:3e:59:8e:f7:1d:34:36:75:5e:7e:b7:67:16:ad:
af:de:fd:3e:cb:40:48:f6:5d:5e:39:35:62:16:4b:ce:63:38:
3f:04:6a:32:76:10:b0:65:78:af:93:62:96:a6:94:88:c7:7e:
41:14:8f:fb:a6:bc:8d:64:07:28:85:1d:f4:1e:85:c1:92:ea:
23:5f:e0:06:35:a2:a0:16:47:46:e3:ab:51:f7:f5:3e:33:02:
d4:a2:b0:11:b8:7c:d1:cd:1f:9e:84:d4:13:cc:e8:1a:df:02:
40:70:7b:b8:07:5b:32:86:e9:85:cd:47:84:f0:c3:60:12:64:
f3:d2:6f:1a:16:b7:71:55:55:2a:30:95:a3:0a:46:f0:8d:75:
33:ce:ae:2d:21:c3:cd:5e:0d:0f:52:40:51:98:6f:50:16:35:
4f:0c:88:ac:23:89:0b:1a:da:c2:66:5e:a0:20:f4:4b:21:65:
ba:0b:77:4b
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRhUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA0MDkw
MDMwMTFaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDFCQjhFRTBDNzNEQTk3
RTQ2RkY3MzU1NkNERUIxMzQzMUQzMEZCMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCc2TdhM79PLAassvT6N4VpFxpKLt70tD8uzqfMKvIzxJU+FiXj
ZsBkcqjMoz1iaA+m6Q6gLie4eVMXZyiFhCgmXPpjCPA1wrn5Th6/iBLczfCn+Mky
a1/hmTwMkR5c8y9z1aQ5RBWoR0mGEY582S/ezcURS8om+i/zCguExXQ0EcEL25HD
QQvEUOztxwrypRxm8iZhRX12U5a2inmZ72fUNHj7+4Jd40JmNAjl/6IwwQlYLN3O
+Nzmu1aPQ+7gHX6GfZvZD8eP+ezdU1m0U/qTG5TYhh1Bie9/Y31XhM0HqGXv2dsk
Zdaz62rkydSVAEwn5gKKYGOWImXup4rxWaKJAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUG7juDHPal+Rv9zVWzesTQx0w+xMwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9HN2p1REhQYWwtUnY5elZXemVzVFF4MHcteE0ucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAMwDQYJKoZIhvcNAQELBQADggEB
AHiTXXJdWL6BztePbhG6BgeUEFxY5TXKyeumJixFz7wycCne3rms+01kvwd/QJPd
vaIFwvnkh+suT6dOMTmxfdmRO4hFs9aAQhLZbv8+WY73HTQ2dV5+t2cWra/e/T7L
QEj2XV45NWIWS85jOD8EajJ2ELBleK+TYpamlIjHfkEUj/umvI1kByiFHfQehcGS
6iNf4AY1oqAWR0bjq1H39T4zAtSisBG4fNHNH56E1BPM6BrfAkBwe7gHWzKG6YXN
R4Tww2ASZPPSbxoWt3FVVSowlaMKRvCNdTPOri0hw81eDQ9SQFGYb1AWNU8MiKwj
iQsa2sJmXqAg9EshZboLd0s=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org