Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/S2wMOK4ByslsGTTNcoTEP4VqvgI.roa
File: S2wMOK4ByslsGTTNcoTEP4VqvgI.roa (raw, json)
Hash identifier: 2moe6aEj9YgeIhdTIkC/vHYJz1OFqwQVLyBk5JHKmIs=
Subject key identifier: 4B:6C:0C:38:AE:01:CA:C9:6C:19:34:CD:72:84:C4:3F:85:6A:BE:02
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 48DE
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/S2wMOK4ByslsGTTNcoTEP4VqvgI.roa
Signing time: Mon 30 May 2022 00:30:07 +0000
ROA not before: Mon 30 May 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18654 (0x48de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 30 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=4B6C0C38AE01CAC96C1934CD7284C43F856ABE02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:68:c8:6d:e4:37:e7:24:3c:b8:62:71:42:c6:
5a:a3:bc:ae:09:fc:d7:4b:60:19:d3:7e:68:8c:07:
71:e5:4e:33:e1:46:8d:76:3a:c0:ac:12:87:9a:ea:
60:5d:01:de:07:9f:14:3c:08:12:1f:97:d8:5e:91:
96:7a:75:dc:03:c9:6f:21:5b:1b:df:d0:3e:bb:bc:
6f:f1:b8:ff:4b:94:68:e0:96:af:1b:ed:3a:2f:02:
b6:ff:ab:e1:a4:79:b7:3c:5c:f0:1b:8a:ad:55:bb:
b9:f8:c7:f6:28:2f:0c:7d:f9:19:1a:de:5f:f4:32:
29:0d:e1:51:73:f3:be:51:f1:58:4c:97:10:80:68:
1e:99:af:a5:7e:ab:0a:21:3d:3d:a8:b7:d6:c7:22:
d3:60:b9:b5:c2:d1:bf:51:32:54:4e:91:cf:cf:66:
32:64:1b:78:2c:14:bb:90:39:32:8b:ff:60:97:54:
ce:87:88:2c:90:c1:06:46:1c:2e:b7:3f:3a:d9:c9:
32:5d:a7:58:6b:33:66:34:75:6d:89:9d:b1:2e:43:
41:d8:b5:2b:55:ed:d9:a4:1d:33:6d:93:72:1b:4d:
47:22:44:a9:4a:bf:0d:0e:6e:8f:08:d4:b6:3a:06:
a8:83:42:55:c1:f7:1e:2c:78:f1:bc:14:34:05:3d:
fa:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6C:0C:38:AE:01:CA:C9:6C:19:34:CD:72:84:C4:3F:85:6A:BE:02
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/S2wMOK4ByslsGTTNcoTEP4VqvgI.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
17:39:27:03:78:7f:cb:ca:03:4e:f7:e5:99:81:a1:44:b4:54:
7f:e6:e2:6e:bb:0a:44:f2:80:a6:13:96:ef:1f:8d:a3:73:47:
05:41:4b:4c:10:ea:8a:3b:fb:02:b5:b6:50:78:19:fe:c8:bb:
d2:3c:2f:64:e6:11:ba:58:d6:3b:9b:b6:cd:45:93:be:51:f4:
59:93:35:2c:e8:62:8e:b9:dd:9a:50:30:2b:a7:ad:5e:3c:32:
8b:91:20:f9:94:0d:13:c5:86:80:44:d4:28:81:a6:ac:22:d4:
05:40:d3:be:49:b9:4a:49:1f:01:1c:49:4c:e1:a0:a1:8e:9c:
18:8c:1f:93:31:01:31:94:12:53:ab:95:5a:6b:0a:b4:5c:ad:
c2:f3:c4:c9:57:d5:ae:5a:04:eb:fe:cd:11:f9:0d:0f:d3:3b:
4a:a4:6b:29:22:7e:dd:b6:37:97:3f:6e:3b:78:23:41:62:c0:
5e:5d:f3:ac:5e:a4:d4:48:be:40:bb:ef:09:22:82:42:8f:ba:
20:23:5d:59:8d:91:8a:93:4e:d3:5d:32:34:f9:07:83:ba:8a:
f5:14:f3:6c:01:51:40:62:5d:ea:5b:89:8e:27:7e:20:1d:84:
89:ad:5f:5c:57:2f:db:06:74:76:94:44:40:70:e4:ab:e0:f5:
07:e7:28:e0
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICSN4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA1MzAw
MDMwMDdaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDRCNkMwQzM4QUUwMUNB
Qzk2QzE5MzRDRDcyODRDNDNGODU2QUJFMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKaMht5DfnJDy4YnFCxlqjvK4J/NdLYBnTfmiMB3HlTjPhRo12
OsCsEoea6mBdAd4HnxQ8CBIfl9hekZZ6ddwDyW8hWxvf0D67vG/xuP9LlGjglq8b
7TovArb/q+Gkebc8XPAbiq1Vu7n4x/YoLwx9+Rka3l/0MikN4VFz875R8VhMlxCA
aB6Zr6V+qwohPT2ot9bHItNgubXC0b9RMlROkc/PZjJkG3gsFLuQOTKL/2CXVM6H
iCyQwQZGHC63PzrZyTJdp1hrM2Y0dW2JnbEuQ0HYtStV7dmkHTNtk3IbTUciRKlK
vw0Obo8I1LY6BqiDQlXB9x4sePG8FDQFPfrPAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUS2wMOK4ByslsGTTNcoTEP4VqvgIwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9TMndNT0s0QnlzbHNHVFROY29URVA0VnF2Z0kucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHA0wDQYJKoZIhvcNAQELBQADggEB
ABc5JwN4f8vKA0735ZmBoUS0VH/m4m67CkTygKYTlu8fjaNzRwVBS0wQ6oo7+wK1
tlB4Gf7Iu9I8L2TmEbpY1jubts1Fk75R9FmTNSzoYo653ZpQMCunrV48MouRIPmU
DRPFhoBE1CiBpqwi1AVA075JuUpJHwEcSUzhoKGOnBiMH5MxATGUElOrlVprCrRc
rcLzxMlX1a5aBOv+zRH5DQ/TO0qkaykift22N5c/bjt4I0FiwF5d86xepNRIvkC7
7wkigkKPuiAjXVmNkYqTTtNdMjT5B4O6ivUU82wBUUBiXepbiY4nfiAdhImtX1xX
L9sGdHaUREBw5Kvg9QfnKOA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org