Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/HjSU-T2AeBNTyaO2d8-7YiODOAE.roa
File: HjSU-T2AeBNTyaO2d8-7YiODOAE.roa (raw, json)
Hash identifier: cULzz0K2pf4d/v3si4iEbSbBNwt+CWa3hElvIqliQeA=
Subject key identifier: 1E:34:94:F9:3D:80:78:13:53:C9:A3:B6:77:CF:BB:62:23:83:38:01
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4596
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/HjSU-T2AeBNTyaO2d8-7YiODOAE.roa
Signing time: Thu 31 Mar 2022 00:30:07 +0000
ROA not before: Thu 31 Mar 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17814 (0x4596)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 31 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=1E3494F93D80781353C9A3B677CFBB6223833801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6f:b9:9a:4b:0f:8f:58:dd:03:1e:1d:5f:c6:
21:b0:90:8b:20:bb:2b:df:02:88:53:4f:03:0e:a3:
b9:1f:a7:39:c0:b1:ef:8a:1e:6b:74:72:7c:76:b8:
ea:80:72:94:55:1e:ad:11:fd:b1:cc:d4:17:17:ac:
6c:50:d6:0a:ef:ce:f8:e3:34:72:8b:13:b6:dc:08:
2d:06:41:69:b5:2f:09:f9:fe:e6:27:71:e0:1d:66:
db:5e:f5:a6:3a:fa:3b:a8:28:cc:31:91:02:c6:d6:
cd:ee:fc:36:ed:ff:4e:d4:87:23:5c:a4:de:38:65:
0f:4d:a2:61:bb:75:fb:11:c0:ec:f0:f8:46:d5:39:
5d:ff:df:35:c1:84:98:f4:99:9c:66:69:77:12:08:
a6:4c:0d:64:66:50:36:e3:17:a4:95:a4:57:16:f6:
2b:ff:ae:98:25:d9:19:9e:cd:7f:f0:4d:86:b4:7d:
da:3b:79:db:8a:db:e4:b6:12:f0:7b:63:21:be:c4:
c1:39:57:8a:e4:f1:21:50:d0:c8:2f:44:3a:43:96:
9a:b7:89:1b:18:a4:cd:2a:53:d7:25:f1:7a:02:13:
9f:63:ca:46:21:a9:e3:43:5b:94:e1:a4:98:53:87:
9b:5e:bd:f4:7c:8d:8c:0d:c2:2b:02:f8:9c:96:db:
e2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:34:94:F9:3D:80:78:13:53:C9:A3:B6:77:CF:BB:62:23:83:38:01
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/HjSU-T2AeBNTyaO2d8-7YiODOAE.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:e6:f9:82:f8:75:69:00:31:a9:94:f8:04:91:a3:5e:e1:72:
cb:73:a6:c6:c9:1b:e2:46:b3:11:1a:fa:37:69:29:7a:1a:fd:
0a:56:2d:d0:0d:67:eb:a1:7b:97:d8:eb:d7:55:e6:a6:4d:4b:
23:76:8b:f7:c7:43:cd:ed:2a:ae:d4:02:20:14:fb:1e:96:58:
af:20:47:ac:82:19:58:eb:e7:af:94:1f:0c:de:d8:94:a0:43:
2b:8d:13:42:1d:23:28:fd:77:ec:5c:c5:64:c6:21:56:a4:8b:
dd:8a:d5:3a:ae:3c:fc:f0:85:35:61:fc:ce:ab:78:d7:c8:33:
68:8f:ff:b9:39:83:5f:f0:a6:7f:27:04:98:39:ab:ad:75:13:
19:0f:a8:bb:1d:68:44:1a:62:c1:25:79:2e:1b:0b:fe:31:cb:
96:d4:1e:76:e6:88:7c:20:f0:8e:75:cb:34:b4:77:35:4a:da:
13:64:0f:d9:3e:1f:17:d2:7b:6a:3e:70:8d:62:2b:01:79:f7:
35:bf:a8:45:40:15:88:da:4e:22:7d:3e:fe:66:7c:ec:d8:fa:
8f:73:07:5b:e4:2c:05:e9:f1:81:3d:13:0f:ac:e9:20:cf:8e:
6a:f3:b9:4e:1c:77:a6:7d:01:85:1a:b2:30:85:1f:6a:0d:8b:
a4:f6:e2:2d
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRZYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAzMzEw
MDMwMDdaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKDFFMzQ5NEY5M0Q4MDc4
MTM1M0M5QTNCNjc3Q0ZCQjYyMjM4MzM4MDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDjb7maSw+PWN0DHh1fxiGwkIsguyvfAohTTwMOo7kfpznAse+K
Hmt0cnx2uOqAcpRVHq0R/bHM1BcXrGxQ1grvzvjjNHKLE7bcCC0GQWm1Lwn5/uYn
ceAdZtte9aY6+juoKMwxkQLG1s3u/Dbt/07UhyNcpN44ZQ9NomG7dfsRwOzw+EbV
OV3/3zXBhJj0mZxmaXcSCKZMDWRmUDbjF6SVpFcW9iv/rpgl2RmezX/wTYa0fdo7
eduK2+S2EvB7YyG+xME5V4rk8SFQ0MgvRDpDlpq3iRsYpM0qU9cl8XoCE59jykYh
qeNDW5ThpJhTh5tevfR8jYwNwisC+JyW2+JpAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUHjSU+T2AeBNTyaO2d8+7YiODOAEwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9IalNVLVQyQWVCTlR5YU8yZDgtN1lpT0RPQUUucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAMwDQYJKoZIhvcNAQELBQADggEB
ALPm+YL4dWkAMamU+ASRo17hcstzpsbJG+JGsxEa+jdpKXoa/QpWLdANZ+uhe5fY
69dV5qZNSyN2i/fHQ83tKq7UAiAU+x6WWK8gR6yCGVjr56+UHwze2JSgQyuNE0Id
Iyj9d+xcxWTGIVaki92K1TquPPzwhTVh/M6reNfIM2iP/7k5g1/wpn8nBJg5q611
ExkPqLsdaEQaYsEleS4bC/4xy5bUHnbmiHwg8I51yzS0dzVK2hNkD9k+HxfSe2o+
cI1iKwF59zW/qEVAFYjaTiJ9Pv5mfOzY+o9zB1vkLAXp8YE9Ew+s6SDPjmrzuU4c
d6Z9AYUasjCFH2oNi6T24i0=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org