Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/IiIwXYZt5FmQ-TdiD586fr2_fuk.roa
File: IiIwXYZt5FmQ-TdiD586fr2_fuk.roa (raw, json)
Hash identifier: CfbY9UolGV+bZDdBbkRFou38xWfhWlnSiieZIeFr4ds=
Subject key identifier: 22:22:30:5D:86:6D:E4:59:90:F9:37:62:0F:9F:3A:7E:BD:BF:7E:E9
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4630
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/IiIwXYZt5FmQ-TdiD586fr2_fuk.roa
Signing time: Mon 11 Apr 2022 00:30:08 +0000
ROA not before: Mon 11 Apr 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17968 (0x4630)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 11 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=2222305D866DE45990F937620F9F3A7EBDBF7EE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2b:f0:18:21:3a:03:0f:71:c0:33:28:51:61:
78:ae:0e:c8:26:1f:e4:60:b5:71:29:99:c3:56:bc:
fc:49:4b:51:58:46:5a:03:06:a7:85:d3:ce:63:4a:
c3:9e:3a:30:f0:29:bf:ef:43:a9:f9:81:49:1a:3e:
18:5c:16:bf:b9:37:64:1e:2e:ff:ba:1f:fd:6d:5f:
cb:84:85:fb:fc:ff:47:1e:e8:be:c4:a6:c3:71:49:
ee:78:b0:38:35:34:16:df:35:c9:ba:dd:50:6e:d5:
fb:cc:47:ed:c6:d4:d3:56:20:e4:f5:30:77:48:ec:
3d:be:a4:bc:61:7b:df:a4:63:ac:57:2e:45:18:b5:
75:bc:29:82:9b:e9:6b:f0:c4:85:d7:cb:8c:47:e2:
4a:79:02:a7:60:8f:21:d0:f6:b3:ac:a4:01:43:59:
f3:22:de:49:b2:17:36:1e:0c:d5:db:b5:b3:24:36:
94:92:05:5f:cd:e3:22:3d:a4:b1:b2:a5:df:78:c6:
90:95:4f:59:95:fa:4f:0f:77:5f:d7:5f:89:5c:b1:
11:7c:78:c4:8d:eb:ee:fb:ed:3e:f8:3e:71:93:a0:
5e:69:b9:bc:69:de:ec:84:4b:f4:e9:3c:58:91:34:
0b:05:ad:ea:a6:89:01:c1:67:a4:79:ed:25:aa:2e:
46:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:22:30:5D:86:6D:E4:59:90:F9:37:62:0F:9F:3A:7E:BD:BF:7E:E9
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/IiIwXYZt5FmQ-TdiD586fr2_fuk.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
06:1e:26:bf:6a:3a:ca:af:9c:46:b0:ca:b7:36:ec:94:22:cf:
ed:20:46:16:05:6e:37:4c:3a:b5:a0:00:e9:c1:a9:2d:19:39:
0e:ba:38:27:2f:3d:f5:06:0b:79:b9:b3:71:47:34:09:70:c0:
72:78:13:1e:20:20:f7:5e:01:ec:4b:4e:38:c0:e7:b9:30:6b:
96:e7:51:fe:c9:f9:f8:d7:60:7a:4c:58:18:53:3d:25:46:56:
23:82:6c:96:5b:81:b5:e0:2a:b1:33:0c:99:7f:8b:65:e0:76:
bf:eb:96:0d:fe:2e:99:5f:12:7f:26:50:22:fe:9e:c4:7a:27:
31:5d:6f:be:d8:2e:d6:54:97:2a:51:b4:49:0c:f4:60:6b:b2:
71:9a:5f:64:32:c8:d0:c2:2b:e5:6d:12:b8:aa:d6:57:d4:16:
87:82:79:95:09:92:a3:b1:40:01:71:11:6f:1a:35:df:31:c2:
fb:5c:b0:49:06:6f:2d:47:7b:18:da:3c:4e:4e:39:d4:a9:93:
8f:b3:c1:ce:cc:69:2e:1a:ae:59:29:a7:5b:a7:68:a0:90:4c:
49:18:da:03:b5:d7:b1:37:70:cb:36:87:7d:52:b5:c2:c9:8e:
e8:7f:32:44:96:1c:66:59:85:9d:c9:01:63:59:9d:57:af:90:
5c:81:51:09
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRjAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA0MTEw
MDMwMDhaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDIyMjIzMDVEODY2REU0
NTk5MEY5Mzc2MjBGOUYzQTdFQkRCRjdFRTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6K/AYIToDD3HAMyhRYXiuDsgmH+RgtXEpmcNWvPxJS1FYRloD
BqeF085jSsOeOjDwKb/vQ6n5gUkaPhhcFr+5N2QeLv+6H/1tX8uEhfv8/0ce6L7E
psNxSe54sDg1NBbfNcm63VBu1fvMR+3G1NNWIOT1MHdI7D2+pLxhe9+kY6xXLkUY
tXW8KYKb6WvwxIXXy4xH4kp5AqdgjyHQ9rOspAFDWfMi3kmyFzYeDNXbtbMkNpSS
BV/N4yI9pLGypd94xpCVT1mV+k8Pd1/XX4lcsRF8eMSN6+777T74PnGToF5pubxp
3uyES/TpPFiRNAsFreqmiQHBZ6R57SWqLkbnAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUIiIwXYZt5FmQ+TdiD586fr2/fukwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9JaUl3WFladDVGbVEtVGRpRDU4NmZyMl9mdWsucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHA0wDQYJKoZIhvcNAQELBQADggEB
AAYeJr9qOsqvnEawyrc27JQiz+0gRhYFbjdMOrWgAOnBqS0ZOQ66OCcvPfUGC3m5
s3FHNAlwwHJ4Ex4gIPdeAexLTjjA57kwa5bnUf7J+fjXYHpMWBhTPSVGViOCbJZb
gbXgKrEzDJl/i2Xgdr/rlg3+LplfEn8mUCL+nsR6JzFdb77YLtZUlypRtEkM9GBr
snGaX2QyyNDCK+VtEriq1lfUFoeCeZUJkqOxQAFxEW8aNd8xwvtcsEkGby1Hexja
PE5OOdSpk4+zwc7MaS4arlkpp1unaKCQTEkY2gO117E3cMs2h31StcLJjuh/MkSW
HGZZhZ3JAWNZnVevkFyBUQk=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org