Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/RJUXzOTgItSvRgDakBYjNyCAsFY.roa
File: RJUXzOTgItSvRgDakBYjNyCAsFY.roa (raw, json)
Hash identifier: x3NI0hjJqCEpw3MZiokY+NZUlPRsFt9rIRRcJ5vVHL8=
Subject key identifier: 44:95:17:CC:E4:E0:22:D4:AF:46:00:DA:90:16:23:37:20:80:B0:56
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 425F
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/RJUXzOTgItSvRgDakBYjNyCAsFY.roa
Signing time: Mon 31 Jan 2022 00:45:06 +0000
ROA not before: Mon 31 Jan 2022 00:45:06 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16991 (0x425f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jan 31 00:45:06 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=449517CCE4E022D4AF4600DA901623372080B056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:28:b1:d0:b1:06:60:13:28:11:c9:70:06:1d:
03:5a:40:07:0d:08:84:f5:a6:67:b7:42:9a:c8:ea:
9a:cf:1e:23:e3:75:38:ee:d8:c9:e9:8a:a5:c3:4d:
ec:43:d0:af:76:c2:0e:15:1b:e4:1f:6b:69:d3:c1:
dd:7b:94:6b:0d:07:6c:be:d0:6f:2b:69:2d:fc:b8:
32:1a:bf:a8:69:06:b0:6a:88:41:32:14:ad:4f:38:
7b:18:9e:85:b6:f5:d3:3f:56:f7:06:15:6d:15:f0:
34:aa:f9:2c:e4:01:90:c9:a9:50:97:15:a6:20:42:
84:62:c2:36:93:ab:29:33:d4:94:70:e1:3c:2b:e7:
43:14:f1:5f:f5:c6:fe:32:46:f3:ca:9c:68:35:19:
d0:cd:53:d2:5f:89:ea:9c:48:03:21:85:41:53:d8:
53:fb:6d:36:c1:aa:fa:82:8b:ef:77:37:fd:a7:cb:
1c:ba:6f:0d:b3:12:2f:fc:6d:02:bf:08:ea:f2:88:
a7:cc:d4:d1:49:f5:85:ae:4f:84:88:fc:71:63:99:
95:d2:85:9e:d9:8b:67:c0:8b:a8:18:17:f7:4d:4d:
44:c6:da:03:fb:74:48:43:be:49:4b:1d:76:a4:c7:
c7:83:b7:e0:2d:9b:e0:38:4d:ed:51:b2:c4:0d:de:
4c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:95:17:CC:E4:E0:22:D4:AF:46:00:DA:90:16:23:37:20:80:B0:56
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/RJUXzOTgItSvRgDakBYjNyCAsFY.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
07:71:85:9f:5a:66:99:3a:a9:81:a4:8d:4f:9b:6e:18:d3:ec:
1b:2b:03:d6:20:31:46:6e:57:c6:eb:62:45:16:95:d4:1d:6d:
76:29:28:1d:8f:96:a4:b0:54:b5:4a:5e:1a:cb:ca:7a:27:2b:
7b:3b:02:c1:12:61:ad:16:9f:89:6b:c7:d2:f6:19:f2:89:bd:
8b:d7:c9:51:26:ab:14:5b:f4:47:7a:52:54:70:99:14:6d:ef:
51:07:36:c2:4e:d4:85:9b:92:40:43:80:f3:ad:4c:22:51:d1:
f8:6d:87:2b:b9:00:63:58:98:8e:11:d0:c0:50:d3:e5:09:cf:
bb:16:f3:1b:40:27:a4:b3:b8:c2:0a:5e:40:e8:63:bc:2f:ce:
ba:ee:92:5c:11:e5:f8:53:0e:fb:a0:a2:b0:48:1d:96:52:a9:
68:cc:23:03:aa:4a:7d:20:0e:76:7d:21:58:1e:08:de:6d:79:
e9:2b:02:a6:3d:e4:fd:62:9f:7c:ee:3b:41:f6:e2:28:74:43:
43:6b:1b:8f:86:12:9a:a4:6d:d6:54:27:25:fb:51:bd:68:28:
db:2f:5b:77:55:e0:08:8d:77:12:fd:23:9a:7f:2c:3a:5f:f7:
ec:91:6b:a0:16:ee:43:b8:33:4f:63:89:b0:3a:67:71:b0:19:
66:b8:0e:76
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICQl8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAxMzEw
MDQ1MDZaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKDQ0OTUxN0NDRTRFMDIy
RDRBRjQ2MDBEQTkwMTYyMzM3MjA4MEIwNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMKLHQsQZgEygRyXAGHQNaQAcNCIT1pme3QprI6prPHiPjdTju
2MnpiqXDTexD0K92wg4VG+Qfa2nTwd17lGsNB2y+0G8raS38uDIav6hpBrBqiEEy
FK1POHsYnoW29dM/VvcGFW0V8DSq+SzkAZDJqVCXFaYgQoRiwjaTqykz1JRw4Twr
50MU8V/1xv4yRvPKnGg1GdDNU9JfieqcSAMhhUFT2FP7bTbBqvqCi+93N/2nyxy6
bw2zEi/8bQK/COryiKfM1NFJ9YWuT4SI/HFjmZXShZ7Zi2fAi6gYF/dNTUTG2gP7
dEhDvklLHXakx8eDt+Atm+A4Te1RssQN3kwTAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQURJUXzOTgItSvRgDakBYjNyCAsFYwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9SSlVYek9UZ0l0U3ZSZ0Rha0JZak55Q0FzRlkucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHA8wDQYJKoZIhvcNAQELBQADggEB
AAdxhZ9aZpk6qYGkjU+bbhjT7BsrA9YgMUZuV8brYkUWldQdbXYpKB2PlqSwVLVK
XhrLynonK3s7AsESYa0Wn4lrx9L2GfKJvYvXyVEmqxRb9Ed6UlRwmRRt71EHNsJO
1IWbkkBDgPOtTCJR0fhthyu5AGNYmI4R0MBQ0+UJz7sW8xtAJ6SzuMIKXkDoY7wv
zrruklwR5fhTDvugorBIHZZSqWjMIwOqSn0gDnZ9IVgeCN5teekrAqY95P1in3zu
O0H24ih0Q0NrG4+GEpqkbdZUJyX7Ub1oKNsvW3dV4AiNdxL9I5p/LDpf9+yRa6AW
7kO4M09jibA6Z3GwGWa4DnY=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org