Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/IbwrJe2CJRN1_jvQ5dgqgzrsA6g.roa
File: IbwrJe2CJRN1_jvQ5dgqgzrsA6g.roa (raw, json)
Hash identifier: nsFUEzIKeNJDvCuK3ttwiUFtysj4/GVwFUSYM2m0pxI=
Subject key identifier: 21:BC:2B:25:ED:82:25:13:75:FE:3B:D0:E5:D8:2A:83:3A:EC:03:A8
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 456A
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/IbwrJe2CJRN1_jvQ5dgqgzrsA6g.roa
Signing time: Mon 28 Mar 2022 00:30:11 +0000
ROA not before: Mon 28 Mar 2022 00:30:11 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17770 (0x456a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 28 00:30:11 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=21BC2B25ED82251375FE3BD0E5D82A833AEC03A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:1f:85:9c:bc:88:99:29:eb:8b:fd:fb:9c:62:
0f:a1:96:2b:a0:38:93:97:75:88:8e:af:64:d6:23:
0e:d0:b5:00:ca:58:9b:2a:47:5c:e8:62:60:66:3b:
05:d3:eb:13:ec:78:d5:bf:7f:c3:06:40:1d:de:63:
90:1c:59:0a:bb:80:a7:10:a7:2c:04:e2:79:a0:81:
0b:05:c0:aa:f2:4a:27:ae:d2:0f:6b:da:47:9a:56:
83:5f:09:e6:c5:76:3b:c7:8a:ee:21:b9:51:21:e6:
af:77:18:0b:af:16:81:09:fb:cd:7a:7c:9b:7d:c9:
0e:68:d4:7e:5d:68:b5:54:73:bd:3a:ca:bc:4e:6f:
42:fb:83:4a:5a:a7:32:fd:55:c4:00:79:11:d8:5e:
1e:10:a7:a5:e4:65:f3:50:5f:d1:e4:e9:45:f0:71:
3d:56:95:6f:f1:ad:d9:37:99:05:b9:89:66:e8:a5:
27:1d:a8:54:29:2c:44:fb:ab:c6:1c:32:d7:1c:de:
aa:1f:4d:dc:f0:b8:27:c6:02:50:ed:0d:62:00:9e:
3d:05:ef:ff:1e:5d:17:4e:9e:42:03:fb:ca:73:5e:
06:04:2a:f0:e7:37:12:e6:59:b9:a6:44:53:fa:e8:
e6:67:23:a4:41:b8:c1:b5:99:ad:91:02:2d:b7:18:
50:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BC:2B:25:ED:82:25:13:75:FE:3B:D0:E5:D8:2A:83:3A:EC:03:A8
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/IbwrJe2CJRN1_jvQ5dgqgzrsA6g.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:e0:d3:e9:62:60:45:45:b9:10:ed:5c:54:50:f1:32:f9:53:
59:33:de:4c:59:39:fd:0e:4e:3a:9b:a5:1f:f5:48:0e:9f:43:
bf:05:67:19:d9:11:49:2b:f3:61:1b:d0:b1:c1:3c:da:dd:43:
dc:33:ca:9a:eb:c9:c3:96:7c:95:d3:26:04:bf:39:28:7d:41:
fd:78:cf:75:26:b1:a4:c1:b4:73:6b:a4:34:f8:dc:f5:a0:0f:
76:0b:5c:da:48:8a:47:6c:40:b0:d6:b1:23:6b:9b:d0:15:67:
68:1b:eb:f7:87:a1:bb:6f:1a:03:df:0f:f7:06:e6:5d:85:2d:
6d:f5:d3:73:e7:7a:41:df:9b:12:66:bb:21:3e:dd:e1:9a:c8:
ab:7d:3b:45:4e:4e:a3:b8:b3:17:69:0a:b3:09:5a:da:2e:57:
9b:e7:16:a0:19:90:86:63:d2:0d:15:03:5a:89:dd:ee:3c:df:
3b:dd:9d:18:6d:27:ed:91:87:f1:4e:e5:13:45:18:ab:58:db:
29:c0:1f:0d:04:5f:6a:20:73:c2:08:db:32:57:eb:e3:f0:a7:
5f:b1:a7:cb:68:55:ee:d6:f2:bc:db:d4:b1:45:b9:cb:00:54:
bb:83:45:02:71:0c:7c:de:e0:80:64:0b:cd:d9:ba:97:e7:07:
49:e1:18:81
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRWowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAzMjgw
MDMwMTFaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKDIxQkMyQjI1RUQ4MjI1
MTM3NUZFM0JEMEU1RDgyQTgzM0FFQzAzQTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDwH4WcvIiZKeuL/fucYg+hliugOJOXdYiOr2TWIw7QtQDKWJsq
R1zoYmBmOwXT6xPseNW/f8MGQB3eY5AcWQq7gKcQpywE4nmggQsFwKrySieu0g9r
2keaVoNfCebFdjvHiu4huVEh5q93GAuvFoEJ+816fJt9yQ5o1H5daLVUc706yrxO
b0L7g0papzL9VcQAeRHYXh4Qp6XkZfNQX9Hk6UXwcT1WlW/xrdk3mQW5iWbopScd
qFQpLET7q8YcMtcc3qofTdzwuCfGAlDtDWIAnj0F7/8eXRdOnkID+8pzXgYEKvDn
NxLmWbmmRFP66OZnI6RBuMG1ma2RAi23GFA1AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUIbwrJe2CJRN1/jvQ5dgqgzrsA6gwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9JYndySmUyQ0pSTjFfanZRNWRncWd6cnNBNmcucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAkwDQYJKoZIhvcNAQELBQADggEB
AJ/g0+liYEVFuRDtXFRQ8TL5U1kz3kxZOf0OTjqbpR/1SA6fQ78FZxnZEUkr82Eb
0LHBPNrdQ9wzyprrycOWfJXTJgS/OSh9Qf14z3UmsaTBtHNrpDT43PWgD3YLXNpI
ikdsQLDWsSNrm9AVZ2gb6/eHobtvGgPfD/cG5l2FLW3103PnekHfmxJmuyE+3eGa
yKt9O0VOTqO4sxdpCrMJWtouV5vnFqAZkIZj0g0VA1qJ3e483zvdnRhtJ+2Rh/FO
5RNFGKtY2ynAHw0EX2ogc8II2zJX6+Pwp1+xp8toVe7W8rzb1LFFucsAVLuDRQJx
DHze4IBkC83ZupfnB0nhGIE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org