Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/UYXN_LV1Hkt4cXZRMr_qt6wpIuA.roa
File: UYXN_LV1Hkt4cXZRMr_qt6wpIuA.roa (raw, json)
Hash identifier: GZT70x0R3mhsDPcm4drkBu7WwmsrcxF4zG6cbMxkSgI=
Subject key identifier: 51:85:CD:FC:B5:75:1E:4B:78:71:76:51:32:BF:EA:B7:AC:29:22:E0
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4488
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/UYXN_LV1Hkt4cXZRMr_qt6wpIuA.roa
Signing time: Sat 12 Mar 2022 00:30:07 +0000
ROA not before: Sat 12 Mar 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17544 (0x4488)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 12 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=5185CDFCB5751E4B7871765132BFEAB7AC2922E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f3:b1:88:6e:3a:90:84:b1:ec:f8:b0:73:dc:
42:2a:c2:55:5a:14:38:79:7a:14:89:ba:c3:5c:c6:
f6:6d:dd:d6:97:ec:3d:9f:5a:c1:cb:c1:ba:97:29:
71:40:8d:1d:6c:ae:76:ca:58:f2:c3:31:ff:f2:89:
c4:e1:01:ee:7e:16:74:81:39:66:d5:9b:1e:dc:5c:
93:2b:33:98:f0:60:34:7a:f6:19:2d:24:ed:22:00:
54:c6:42:af:93:7c:b0:aa:80:22:c5:a7:53:38:30:
03:de:0a:29:4c:8d:87:f9:d6:68:20:5b:6a:9f:19:
38:92:eb:7f:8a:c5:91:8a:9f:14:d9:89:65:24:fd:
ed:4f:20:38:11:5a:c6:f8:1b:d2:5a:8f:cd:37:b0:
46:e5:dc:8f:7d:80:2e:90:c6:84:22:e7:1b:f1:76:
eb:14:1e:ce:9f:ef:88:82:39:76:5a:90:5e:bb:82:
76:94:f3:7e:92:af:31:c7:12:71:40:f5:74:d8:83:
5b:a0:1f:70:e7:79:49:89:74:f7:05:80:7d:ae:f2:
56:5e:c4:c8:65:81:e6:3d:68:05:a0:ec:c0:76:1b:
57:63:e3:b8:f0:79:46:e7:6d:a5:73:27:f8:e7:be:
db:6c:8f:07:59:9e:11:fc:bb:62:14:db:67:57:46:
d0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:85:CD:FC:B5:75:1E:4B:78:71:76:51:32:BF:EA:B7:AC:29:22:E0
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/UYXN_LV1Hkt4cXZRMr_qt6wpIuA.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:c9:2b:bb:7c:62:13:c5:3a:93:34:ec:32:4b:86:32:dd:03:
03:01:0d:a4:54:3b:cb:0a:54:39:d0:ce:ba:85:46:d1:25:6e:
79:33:f9:b5:2c:e6:bc:00:85:b2:83:ad:ea:7f:61:cb:06:09:
f4:7f:c5:48:a6:03:06:d0:02:79:90:29:f9:d0:a6:84:04:7a:
d2:8f:06:52:1c:a4:3d:14:1c:f5:72:3c:7d:e1:a2:df:c4:aa:
01:54:be:11:b7:3c:66:ca:58:ef:c8:3f:ff:29:bf:00:7e:45:
de:36:69:5b:bd:45:9a:30:67:52:0a:cf:4a:0a:60:42:47:96:
91:d5:e3:e7:7a:8a:63:e6:a5:1f:1f:b0:41:90:4d:03:28:72:
d3:ce:1b:bc:52:33:6b:e2:51:21:34:36:4b:f8:dc:e9:33:72:
aa:60:ef:4d:f3:14:c4:74:83:ec:88:31:02:9c:c7:28:43:fa:
f9:d0:7c:81:06:f1:51:ed:a0:d4:12:37:46:dc:0b:b2:35:21:
55:e5:d5:ba:85:75:a7:a8:fb:13:b3:5e:43:54:33:e1:49:7f:
ac:d7:1a:4e:ac:b7:3c:94:d5:3e:98:e8:8c:5e:ea:7d:32:58:
29:6f:24:bb:16:73:24:6a:ea:9e:75:77:7a:2e:0c:13:03:f0:
57:89:06:5a
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRIgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAzMTIw
MDMwMDdaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKDUxODVDREZDQjU3NTFF
NEI3ODcxNzY1MTMyQkZFQUI3QUMyOTIyRTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCx87GIbjqQhLHs+LBz3EIqwlVaFDh5ehSJusNcxvZt3daX7D2f
WsHLwbqXKXFAjR1srnbKWPLDMf/yicThAe5+FnSBOWbVmx7cXJMrM5jwYDR69hkt
JO0iAFTGQq+TfLCqgCLFp1M4MAPeCilMjYf51mggW2qfGTiS63+KxZGKnxTZiWUk
/e1PIDgRWsb4G9Jaj803sEbl3I99gC6QxoQi5xvxdusUHs6f74iCOXZakF67gnaU
836SrzHHEnFA9XTYg1ugH3DneUmJdPcFgH2u8lZexMhlgeY9aAWg7MB2G1dj47jw
eUbnbaVzJ/jnvttsjwdZnhH8u2IU22dXRtCDAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUUYXN/LV1Hkt4cXZRMr/qt6wpIuAwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9VWVhOX0xWMUhrdDRjWFpSTXJfcXQ2d3BJdUEucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHA8wDQYJKoZIhvcNAQELBQADggEB
ALrJK7t8YhPFOpM07DJLhjLdAwMBDaRUO8sKVDnQzrqFRtElbnkz+bUs5rwAhbKD
rep/YcsGCfR/xUimAwbQAnmQKfnQpoQEetKPBlIcpD0UHPVyPH3hot/EqgFUvhG3
PGbKWO/IP/8pvwB+Rd42aVu9RZowZ1IKz0oKYEJHlpHV4+d6imPmpR8fsEGQTQMo
ctPOG7xSM2viUSE0Nkv43Okzcqpg703zFMR0g+yIMQKcxyhD+vnQfIEG8VHtoNQS
N0bcC7I1IVXl1bqFdaeo+xOzXkNUM+FJf6zXGk6stzyU1T6Y6Ixe6n0yWClvJLsW
cyRq6p51d3ouDBMD8FeJBlo=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org