Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/PIPlul_3VGBkqYL7ZU42kjvX-aw.roa
File: PIPlul_3VGBkqYL7ZU42kjvX-aw.roa (raw, json)
Hash identifier: QqGk4ZGuDn1k4b2kwYcfMBPCCcpjH83iAvy0/JEMWuw=
Subject key identifier: 3C:83:E5:BA:5F:F7:54:60:64:A9:82:FB:65:4E:36:92:3B:D7:F9:AC
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 47B5
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/PIPlul_3VGBkqYL7ZU42kjvX-aw.roa
Signing time: Mon 09 May 2022 00:30:08 +0000
ROA not before: Mon 09 May 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18357 (0x47b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 9 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=3C83E5BA5FF7546064A982FB654E36923BD7F9AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c9:64:57:28:f8:85:56:d8:a5:18:03:6f:c3:
53:bf:35:54:ec:3d:a7:0c:0c:4a:e6:2e:65:15:05:
f3:cd:12:34:2c:06:b1:e5:6a:43:e4:14:e6:01:e5:
9c:14:52:7d:a7:51:3e:ed:e8:3f:65:b2:28:b1:17:
6e:b9:ac:ac:9d:b5:08:e6:59:13:c1:7a:d2:04:c4:
78:57:11:24:d7:3f:20:14:97:6a:86:ae:32:55:3c:
5d:fc:13:ef:01:15:59:7c:2d:57:1e:78:a5:63:f2:
7f:ca:ec:30:5d:c2:e9:50:8c:01:8d:61:4a:34:1b:
23:26:fb:ed:23:ac:6c:b8:67:b9:20:11:9b:68:73:
7f:57:7d:b0:e2:90:05:46:b4:3d:c0:d6:46:e8:db:
69:92:ad:59:02:ff:1e:ab:ed:ec:be:f0:26:20:b4:
4e:ed:43:2c:d9:96:25:ff:2f:d2:8f:b4:16:e7:c3:
9a:da:96:73:da:0c:a1:b8:a6:b5:4e:dc:5d:69:76:
8c:2e:90:87:f1:8b:6b:b5:91:e6:c5:2f:0e:a6:73:
99:a3:c3:19:51:81:74:29:73:fb:ac:1d:dc:6d:09:
6a:b8:ab:56:44:2b:b5:c9:ee:ea:9f:10:0e:41:a8:
68:6b:7a:1b:bc:6a:9f:03:6a:27:8b:7e:28:d7:26:
a0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:83:E5:BA:5F:F7:54:60:64:A9:82:FB:65:4E:36:92:3B:D7:F9:AC
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/PIPlul_3VGBkqYL7ZU42kjvX-aw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:f4:3d:1c:4f:2c:11:47:8c:dd:a6:4b:37:88:cb:74:3b:72:
87:3a:79:7d:eb:c9:54:2e:74:66:b2:77:0c:42:02:ba:3c:96:
4c:7c:7f:e6:0c:30:cf:0d:93:2d:2b:61:48:91:94:a3:ea:8a:
a9:46:f6:a3:e7:37:c0:10:ab:aa:08:e1:41:89:de:e7:fa:5e:
a3:1b:e0:63:3c:10:7c:df:5d:05:8d:e8:fb:e2:a4:55:fd:2c:
be:4b:8b:e2:9c:8c:80:2a:84:93:d6:4c:42:2e:6f:61:6a:74:
61:68:2d:af:31:00:85:74:00:db:51:84:38:4a:9a:f4:87:19:
bb:8a:4d:be:7a:c7:92:8a:ac:0c:29:22:1f:e7:ae:e4:3c:b4:
b5:a3:80:83:4e:87:f0:a1:27:d5:78:f0:2b:c3:b2:0b:70:ff:
41:f8:53:4b:d4:7c:f3:6a:6e:f4:7a:2f:bb:7f:66:26:06:56:
9f:cc:e1:24:07:52:b7:a6:1c:1f:fd:96:bb:0f:a1:07:d7:d7:
c3:ca:ce:b7:ca:d0:92:5c:6e:7e:12:4d:f9:b4:20:d1:f0:67:
7d:f4:84:b2:00:a9:f6:d0:92:ef:87:2e:27:1c:81:7d:38:0b:
45:e0:e1:84:8e:bd:c1:42:07:32:ec:e9:bf:3f:94:26:5b:8d:
99:72:d2:24
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICR7UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA1MDkw
MDMwMDhaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDNDODNFNUJBNUZGNzU0
NjA2NEE5ODJGQjY1NEUzNjkyM0JEN0Y5QUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8yWRXKPiFVtilGANvw1O/NVTsPacMDErmLmUVBfPNEjQsBrHl
akPkFOYB5ZwUUn2nUT7t6D9lsiixF265rKydtQjmWRPBetIExHhXESTXPyAUl2qG
rjJVPF38E+8BFVl8LVceeKVj8n/K7DBdwulQjAGNYUo0GyMm++0jrGy4Z7kgEZto
c39XfbDikAVGtD3A1kbo22mSrVkC/x6r7ey+8CYgtE7tQyzZliX/L9KPtBbnw5ra
lnPaDKG4prVO3F1pdowukIfxi2u1kebFLw6mc5mjwxlRgXQpc/usHdxtCWq4q1ZE
K7XJ7uqfEA5BqGhrehu8ap8DaieLfijXJqCZAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUPIPlul/3VGBkqYL7ZU42kjvX+awwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9QSVBsdWxfM1ZHQmtxWUw3WlU0MmtqdlgtYXcucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHA8wDQYJKoZIhvcNAQELBQADggEB
AEr0PRxPLBFHjN2mSzeIy3Q7coc6eX3ryVQudGaydwxCAro8lkx8f+YMMM8Nky0r
YUiRlKPqiqlG9qPnN8AQq6oI4UGJ3uf6XqMb4GM8EHzfXQWN6PvipFX9LL5Li+Kc
jIAqhJPWTEIub2FqdGFoLa8xAIV0ANtRhDhKmvSHGbuKTb56x5KKrAwpIh/nruQ8
tLWjgINOh/ChJ9V48CvDsgtw/0H4U0vUfPNqbvR6L7t/ZiYGVp/M4SQHUremHB/9
lrsPoQfX18PKzrfK0JJcbn4STfm0INHwZ330hLIAqfbQku+HLiccgX04C0Xg4YSO
vcFCBzLs6b8/lCZbjZly0iQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org