Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/ViP_EX7gnjUp_2RS3oEBFvQ2Ny8.roa
File: ViP_EX7gnjUp_2RS3oEBFvQ2Ny8.roa (raw, json)
Hash identifier: +gJcQ2DO+XruQSEDXcvZlpxDMQVhn941iMOAn95qcIs=
Subject key identifier: 56:23:FF:11:7E:E0:9E:35:29:FF:64:52:DE:81:01:16:F4:36:37:2F
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 49D0
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ViP_EX7gnjUp_2RS3oEBFvQ2Ny8.roa
Signing time: Mon 13 Jun 2022 00:30:09 +0000
ROA not before: Mon 13 Jun 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18896 (0x49d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 13 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=5623FF117EE09E3529FF6452DE810116F436372F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6a:cf:3f:7d:ee:d2:97:5d:66:4b:cc:30:4e:
7d:78:6a:84:43:f5:45:c8:a0:a0:c7:ca:76:3f:84:
5a:9a:45:74:48:32:f4:2e:44:74:bf:bb:9f:cd:53:
da:b4:41:26:a4:da:49:8a:81:c7:79:50:bb:ff:b1:
a7:34:9b:f2:77:21:b2:4f:e8:dc:bc:76:a8:f3:14:
ea:a2:c8:33:4a:f2:64:9d:1c:e0:7c:70:7e:2d:07:
3a:ce:f3:35:dd:24:8b:49:c5:3b:07:85:6c:cf:75:
e7:22:ac:e4:cc:bd:67:cb:ab:11:c1:68:8b:1d:b1:
e2:c9:6c:0f:18:b5:9f:ca:39:9a:50:22:c6:33:f3:
5f:8d:84:ba:34:9d:04:68:f6:be:b9:77:78:a7:56:
cf:22:4e:ac:8a:f7:8f:05:a5:20:25:f3:76:3c:cc:
50:48:d6:3c:3d:b7:23:54:1c:c8:e8:31:3f:4d:c8:
2d:56:d1:d0:84:d1:e0:27:8a:46:10:60:59:96:60:
15:82:e5:a2:95:7a:25:d4:87:ab:9e:49:05:9a:12:
90:53:c5:47:d9:26:5a:8f:17:6b:e8:ff:a7:5a:71:
4e:da:3f:04:bf:fe:aa:5a:82:d2:74:b2:b1:23:bf:
f7:72:32:d9:48:ac:e6:f6:e0:2b:1f:dd:5b:35:07:
a2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:23:FF:11:7E:E0:9E:35:29:FF:64:52:DE:81:01:16:F4:36:37:2F
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ViP_EX7gnjUp_2RS3oEBFvQ2Ny8.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
87:31:58:aa:63:8d:72:a9:20:4e:87:c9:27:89:92:9e:e1:c2:
93:56:06:e1:2b:bd:e8:76:69:5b:c1:86:fa:ba:6a:63:5e:26:
0d:cc:a3:68:ed:a8:90:d1:34:ea:5e:03:41:70:04:a9:16:5a:
bf:11:a6:20:53:fc:d9:f8:de:bd:7a:03:fd:12:4e:7e:9c:84:
a4:a4:d9:07:f2:83:56:cb:d0:b4:6b:e2:60:f5:1d:f4:56:e8:
f7:0b:ff:c6:12:1e:49:51:61:0b:70:78:0e:f5:ef:4e:bc:d5:
6f:79:ca:88:4c:37:74:14:ee:40:d2:e7:72:99:09:6c:49:bc:
42:05:10:fb:f0:ed:84:a8:82:a1:da:34:fd:6a:da:6f:4d:78:
8d:3c:37:3d:cd:aa:20:b0:b5:4e:09:bd:7d:40:d1:c1:03:9a:
08:4f:71:eb:a3:61:6d:e9:48:f6:bd:44:cf:d7:84:ca:0f:65:
8d:d6:2a:fe:c2:a4:34:c4:0f:41:ec:b0:5a:52:01:37:f6:8c:
69:77:7f:39:b3:ed:23:4d:98:25:23:42:4e:46:0e:63:cd:5b:
6e:73:29:17:21:41:c7:19:e6:aa:60:5f:a8:f7:19:5f:8b:13:
69:10:de:58:48:43:eb:4a:a2:ec:8d:f3:49:a2:5c:af:f4:a3:
91:0a:20:be
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICSdAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA2MTMw
MDMwMDlaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDU2MjNGRjExN0VFMDlF
MzUyOUZGNjQ1MkRFODEwMTE2RjQzNjM3MkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9as8/fe7Sl11mS8wwTn14aoRD9UXIoKDHynY/hFqaRXRIMvQu
RHS/u5/NU9q0QSak2kmKgcd5ULv/sac0m/J3IbJP6Ny8dqjzFOqiyDNK8mSdHOB8
cH4tBzrO8zXdJItJxTsHhWzPdecirOTMvWfLqxHBaIsdseLJbA8YtZ/KOZpQIsYz
81+NhLo0nQRo9r65d3inVs8iTqyK948FpSAl83Y8zFBI1jw9tyNUHMjoMT9NyC1W
0dCE0eAnikYQYFmWYBWC5aKVeiXUh6ueSQWaEpBTxUfZJlqPF2vo/6dacU7aPwS/
/qpagtJ0srEjv/dyMtlIrOb24Csf3Vs1B6LdAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUViP/EX7gnjUp/2RS3oEBFvQ2Ny8wHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9WaVBfRVg3Z25qVXBfMlJTM29FQkZ2UTJOeTgucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAMwDQYJKoZIhvcNAQELBQADggEB
AIcxWKpjjXKpIE6HySeJkp7hwpNWBuErveh2aVvBhvq6amNeJg3Mo2jtqJDRNOpe
A0FwBKkWWr8RpiBT/Nn43r16A/0STn6chKSk2Qfyg1bL0LRr4mD1HfRW6PcL/8YS
HklRYQtweA7170681W95yohMN3QU7kDS53KZCWxJvEIFEPvw7YSogqHaNP1q2m9N
eI08Nz3NqiCwtU4JvX1A0cEDmghPceujYW3pSPa9RM/XhMoPZY3WKv7CpDTED0Hs
sFpSATf2jGl3fzmz7SNNmCUjQk5GDmPNW25zKRchQccZ5qpgX6j3GV+LE2kQ3lhI
Q+tKouyN80miXK/0o5EKIL4=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org