Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/GDVcGSOKo78FSLJ0wSxC5aAuvY8.roa
File: GDVcGSOKo78FSLJ0wSxC5aAuvY8.roa (raw, json)
Hash identifier: P9vlH9Zr2Kk7mebh0hctJtypF1SpryFK26nxne2V1Tk=
Subject key identifier: 18:35:5C:19:23:8A:A3:BF:05:48:B2:74:C1:2C:42:E5:A0:2E:BD:8F
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 42B9
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/GDVcGSOKo78FSLJ0wSxC5aAuvY8.roa
Signing time: Sun 06 Feb 2022 00:30:07 +0000
ROA not before: Sun 06 Feb 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17081 (0x42b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 6 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=18355C19238AA3BF0548B274C12C42E5A02EBD8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:28:8f:9e:56:1e:dd:7c:23:2c:2b:0a:2c:55:
2c:46:97:65:7b:68:a0:dd:03:cc:1e:82:9a:79:3a:
e1:0b:8b:4b:95:9c:24:dc:9f:4c:bd:db:96:06:36:
19:17:8b:cc:b5:65:14:d3:02:b9:dd:48:f6:01:7c:
dc:30:c7:9f:10:60:dd:9e:01:5b:94:db:d6:96:88:
49:42:61:4f:8c:54:a8:09:c0:59:f4:66:4b:7c:52:
1a:72:ee:ee:a0:94:c0:cc:20:34:0e:8a:c6:b8:26:
ff:fd:a9:f7:73:4c:cf:76:aa:e5:4a:1a:65:fe:0c:
36:2d:c6:b4:80:3d:9b:51:cd:65:76:5a:a6:45:f4:
12:2d:77:86:91:e1:59:c5:c2:ff:2f:23:02:8b:98:
1d:64:e6:6f:09:77:1f:51:d7:91:b5:de:92:53:b0:
be:cf:62:8e:2e:08:d2:ca:fa:ab:a5:ed:cd:3e:c5:
b7:13:4f:4a:4c:c7:18:19:0b:cd:51:c3:36:95:20:
e9:aa:f2:a5:ca:77:78:cb:33:8c:af:a9:89:21:fb:
bd:df:e8:48:d9:ca:1b:90:4d:6f:73:16:3d:5d:bf:
f9:c4:eb:cb:59:cc:55:c8:04:06:b8:4a:4b:1e:86:
0d:16:64:25:da:8d:7b:a7:56:ec:a0:3f:f4:1c:f5:
f7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:35:5C:19:23:8A:A3:BF:05:48:B2:74:C1:2C:42:E5:A0:2E:BD:8F
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/GDVcGSOKo78FSLJ0wSxC5aAuvY8.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
73:15:95:c4:20:60:e6:78:90:e7:de:f0:52:ea:a1:62:3d:18:
3d:22:18:ed:68:33:5c:1c:65:6c:ba:6b:3e:c3:ee:69:61:53:
08:fc:10:58:34:a4:d1:dc:a0:cb:00:ac:fc:cf:55:25:82:a5:
4e:5d:8f:43:7a:07:04:d7:8d:c8:1d:0d:64:5f:f4:3b:96:0c:
6d:7d:b7:51:d0:0a:a9:e7:8b:a7:20:3d:07:f2:82:b5:8f:60:
bc:1c:fa:ad:a8:d1:93:0b:c0:a4:94:41:54:8d:d4:9c:21:5c:
78:91:b7:ac:ed:cd:58:16:c1:2b:ea:e3:b1:8c:6e:07:f3:34:
32:db:90:19:07:50:e9:59:63:9e:14:01:30:af:ee:b7:52:5e:
69:10:40:43:97:0d:0f:a5:a7:fa:5d:f3:e4:cb:43:2f:58:59:
5c:08:1a:b8:86:71:95:8f:64:81:46:86:f0:6e:49:d6:34:70:
ba:3d:83:b6:fa:5c:d3:bf:44:e2:3e:8b:c6:52:45:1b:fc:bd:
f1:0f:ab:b7:51:31:15:7f:87:a2:01:6b:83:db:bb:2a:90:3c:
e3:d6:c3:5b:48:f5:b3:b4:4f:bf:74:eb:3e:a4:a4:64:50:46:
6f:30:9a:62:d1:2f:a9:3a:93:cc:04:eb:bb:2f:fe:49:18:4c:
28:45:22:1a
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICQrkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAyMDYw
MDMwMDdaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKDE4MzU1QzE5MjM4QUEz
QkYwNTQ4QjI3NEMxMkM0MkU1QTAyRUJEOEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDmKI+eVh7dfCMsKwosVSxGl2V7aKDdA8wegpp5OuELi0uVnCTc
n0y925YGNhkXi8y1ZRTTArndSPYBfNwwx58QYN2eAVuU29aWiElCYU+MVKgJwFn0
Zkt8Uhpy7u6glMDMIDQOisa4Jv/9qfdzTM92quVKGmX+DDYtxrSAPZtRzWV2WqZF
9BItd4aR4VnFwv8vIwKLmB1k5m8Jdx9R15G13pJTsL7PYo4uCNLK+qul7c0+xbcT
T0pMxxgZC81RwzaVIOmq8qXKd3jLM4yvqYkh+73f6EjZyhuQTW9zFj1dv/nE68tZ
zFXIBAa4Sksehg0WZCXajXunVuygP/Qc9fe5AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUGDVcGSOKo78FSLJ0wSxC5aAuvY8wHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9HRFZjR1NPS283OEZTTEowd1N4QzVhQXV2WTgucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAswDQYJKoZIhvcNAQELBQADggEB
AHMVlcQgYOZ4kOfe8FLqoWI9GD0iGO1oM1wcZWy6az7D7mlhUwj8EFg0pNHcoMsA
rPzPVSWCpU5dj0N6BwTXjcgdDWRf9DuWDG19t1HQCqnni6cgPQfygrWPYLwc+q2o
0ZMLwKSUQVSN1JwhXHiRt6ztzVgWwSvq47GMbgfzNDLbkBkHUOlZY54UATCv7rdS
XmkQQEOXDQ+lp/pd8+TLQy9YWVwIGriGcZWPZIFGhvBuSdY0cLo9g7b6XNO/ROI+
i8ZSRRv8vfEPq7dRMRV/h6IBa4PbuyqQPOPWw1tI9bO0T7906z6kpGRQRm8wmmLR
L6k6k8wE67sv/kkYTChFIho=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org