Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/HiNj1-iAEEhm7Mx1QAce5LsRrrY.roa
File: HiNj1-iAEEhm7Mx1QAce5LsRrrY.roa (raw, json)
Hash identifier: jSIj/thoBtFxQ7MP67GGfo6LIv/iX0wxmyFnfbm6AA8=
Subject key identifier: 1E:23:63:D7:E8:80:10:48:66:EC:CC:75:40:07:1E:E4:BB:11:AE:B6
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 42CF
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/HiNj1-iAEEhm7Mx1QAce5LsRrrY.roa
Signing time: Tue 08 Feb 2022 00:30:04 +0000
ROA not before: Tue 08 Feb 2022 00:30:04 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17103 (0x42cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 8 00:30:04 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=1E2363D7E880104866ECCC7540071EE4BB11AEB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:47:8a:67:cb:f9:78:b3:34:36:43:0e:1b:ea:
69:c2:5b:3e:12:c8:77:6f:82:32:47:60:24:07:ec:
17:85:c3:8b:11:7b:27:43:ae:ce:b9:ba:7c:3c:12:
a6:ff:99:ba:03:88:4e:55:ff:c0:23:74:7a:f8:c1:
d8:7b:6c:06:12:85:29:ba:8e:89:a4:84:3f:2c:d3:
8c:44:25:e1:aa:e8:a4:62:71:c7:62:44:98:3b:77:
40:dd:3b:7f:04:79:02:35:2d:9c:92:fe:dd:ab:8b:
f1:eb:0f:98:45:a8:9c:f1:c4:ef:94:2e:47:d6:d4:
5b:17:9d:88:c9:cd:94:5b:46:56:f3:fa:13:70:ff:
48:73:64:60:09:36:ef:4f:61:b2:11:09:59:18:a0:
37:7c:e1:95:05:86:7d:7e:ee:fc:9e:4d:94:a8:93:
e7:6b:18:74:9f:71:6a:d7:d8:43:bb:9d:86:6d:04:
56:43:14:19:8b:73:49:49:b6:ad:1d:a7:b3:ba:35:
38:3f:76:0c:6d:41:42:18:48:6e:3f:9a:87:9c:47:
1e:55:f9:05:47:71:e9:ce:7b:f6:9b:a4:b9:bc:08:
45:b2:22:0e:d7:62:36:8c:37:20:3d:4b:3f:fb:48:
94:17:f4:da:8d:df:a0:ba:1e:44:20:99:74:23:4e:
35:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:23:63:D7:E8:80:10:48:66:EC:CC:75:40:07:1E:E4:BB:11:AE:B6
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/HiNj1-iAEEhm7Mx1QAce5LsRrrY.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
53:cd:c3:41:7c:d4:be:cc:44:24:61:55:97:f9:8a:82:c5:f6:
4f:03:9e:c7:d9:09:a5:8d:03:12:ca:5c:51:95:51:13:3f:9f:
cb:58:fb:e8:59:75:ce:9c:e5:33:21:c7:50:0b:e4:c3:cc:61:
29:43:8d:6c:bf:3a:b1:e8:9b:a3:85:68:fa:2b:b4:e6:9c:90:
a1:5d:84:bc:0c:16:d0:fa:f9:60:de:e8:b8:3d:43:87:25:13:
c3:e8:56:a4:13:93:19:b5:cc:ed:97:2a:06:69:f5:0a:1b:02:
86:ce:a2:bb:e3:63:82:c3:e1:2a:a7:4d:61:31:db:56:b5:0c:
f1:29:0b:a0:67:7e:73:52:99:63:81:c7:e6:4c:7c:bb:02:e7:
e3:e9:dd:13:b7:65:64:71:13:d9:52:f1:5e:8c:4e:11:8d:58:
a1:b8:d2:48:f8:21:a8:86:56:25:12:7c:61:09:98:06:1c:35:
38:cf:73:0c:a3:4f:32:90:45:41:8c:d3:50:7e:9a:3a:43:d8:
0c:bf:76:03:65:b0:b4:0f:78:d7:9b:39:f2:76:e4:1b:93:8a:
9b:a2:c1:20:46:23:18:c7:ae:a3:61:9d:fa:c4:30:07:20:af:
24:45:d7:a2:dd:b8:b7:cb:0e:01:c1:f5:74:53:b5:c6:ba:b9:
15:2d:23:b7
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICQs8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAyMDgw
MDMwMDRaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKDFFMjM2M0Q3RTg4MDEw
NDg2NkVDQ0M3NTQwMDcxRUU0QkIxMUFFQjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAR4pny/l4szQ2Qw4b6mnCWz4SyHdvgjJHYCQH7BeFw4sReydD
rs65unw8Eqb/mboDiE5V/8AjdHr4wdh7bAYShSm6jomkhD8s04xEJeGq6KRiccdi
RJg7d0DdO38EeQI1LZyS/t2ri/HrD5hFqJzxxO+ULkfW1FsXnYjJzZRbRlbz+hNw
/0hzZGAJNu9PYbIRCVkYoDd84ZUFhn1+7vyeTZSok+drGHSfcWrX2EO7nYZtBFZD
FBmLc0lJtq0dp7O6NTg/dgxtQUIYSG4/moecRx5V+QVHcenOe/abpLm8CEWyIg7X
YjaMNyA9Sz/7SJQX9NqN36C6HkQgmXQjTjXtAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUHiNj1+iAEEhm7Mx1QAce5LsRrrYwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9IaU5qMS1pQUVFaG03TXgxUUFjZTVMc1Jyclkucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHA8wDQYJKoZIhvcNAQELBQADggEB
AFPNw0F81L7MRCRhVZf5ioLF9k8DnsfZCaWNAxLKXFGVURM/n8tY++hZdc6c5TMh
x1AL5MPMYSlDjWy/OrHom6OFaPortOackKFdhLwMFtD6+WDe6Lg9Q4clE8PoVqQT
kxm1zO2XKgZp9QobAobOorvjY4LD4SqnTWEx21a1DPEpC6BnfnNSmWOBx+ZMfLsC
5+Pp3RO3ZWRxE9lS8V6MThGNWKG40kj4IaiGViUSfGEJmAYcNTjPcwyjTzKQRUGM
01B+mjpD2Ay/dgNlsLQPeNebOfJ25BuTipuiwSBGIxjHrqNhnfrEMAcgryRF16Ld
uLfLDgHB9XRTtca6uRUtI7c=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org