Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/XFEsYI_Ns1LdUC2VdAKvUPM6sNU.roa
File: XFEsYI_Ns1LdUC2VdAKvUPM6sNU.roa (raw, json)
Hash identifier: hQVd9nydDA+SuICz1Saam7WkAhH98JaGVU3kQXnjElU=
Subject key identifier: 5C:51:2C:60:8F:CD:B3:52:DD:50:2D:95:74:02:AF:50:F3:3A:B0:D5
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 492D
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/XFEsYI_Ns1LdUC2VdAKvUPM6sNU.roa
Signing time: Fri 03 Jun 2022 00:30:07 +0000
ROA not before: Fri 03 Jun 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18733 (0x492d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 3 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=5C512C608FCDB352DD502D957402AF50F33AB0D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:16:42:ac:cc:37:77:f7:3f:78:3a:f8:09:67:
30:80:28:4b:06:42:ab:8f:96:17:87:2a:a2:f3:16:
c3:ef:16:50:df:4a:b5:44:af:34:81:cc:ce:74:93:
71:dd:8f:a6:be:b2:72:5f:f1:68:23:4e:63:d9:2d:
52:a0:58:f6:01:3f:5f:8f:6c:7e:61:e2:fe:8b:d7:
aa:bc:d4:22:c7:38:f1:a0:6f:fe:04:58:10:cf:0e:
a7:13:b2:6a:ba:0a:8c:47:cd:7a:63:c0:e5:ac:37:
dd:11:ee:2e:66:37:7c:35:90:53:3b:5d:58:c0:5e:
87:e2:7b:d5:b7:09:0a:80:66:0c:6c:eb:9c:a9:1c:
89:6b:55:ac:da:f7:90:22:70:5a:59:a6:cf:31:ab:
14:c1:f0:42:b5:b7:2a:31:74:4d:8b:d8:5d:7f:fe:
ab:d4:64:71:5b:38:36:f8:65:6c:a7:4c:2e:66:e4:
c4:66:54:22:52:79:a4:61:2f:d3:39:04:e9:09:86:
f3:0a:b0:e7:a3:86:b5:17:a0:f9:8a:03:91:51:94:
a1:f6:d0:e1:db:34:df:34:68:73:01:1f:6b:52:e0:
49:53:c1:c9:5e:c4:01:b2:34:38:cf:f0:c8:0b:fa:
dc:08:3f:af:3b:9e:e7:bf:7d:57:64:4f:5f:a8:55:
66:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:51:2C:60:8F:CD:B3:52:DD:50:2D:95:74:02:AF:50:F3:3A:B0:D5
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/XFEsYI_Ns1LdUC2VdAKvUPM6sNU.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.6.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:24:88:9e:67:04:ac:37:91:b0:59:ab:c9:b9:3e:7e:15:7b:
65:ef:60:5f:db:35:76:26:d0:ab:39:1a:2f:93:e4:74:d0:f2:
78:59:7f:b0:04:5f:97:65:05:c2:2e:3e:eb:42:2a:12:10:71:
ea:a0:7a:e5:cb:a0:1c:f1:07:77:15:9b:eb:a3:21:2b:6a:e2:
00:50:73:80:1f:65:8a:ff:42:dd:37:09:84:f0:03:cf:e0:46:
c7:20:2d:99:91:2e:4b:32:e0:9d:11:f4:c6:ae:02:0f:de:51:
10:a9:6e:a0:bf:1b:a5:67:63:1a:8c:d4:cf:e7:06:eb:52:a1:
da:e7:09:ef:e3:32:16:02:98:aa:02:96:85:d9:d0:70:e1:28:
3a:d3:8e:33:82:b8:60:0e:8b:61:07:7e:7a:8e:1e:75:1c:23:
65:8f:88:b6:77:b0:00:dd:a1:08:15:62:95:12:3b:c4:10:23:
ac:9d:83:0d:7b:b3:02:62:22:48:7c:9e:77:1b:20:6f:a5:8f:
b7:45:68:d6:cb:0c:6c:f9:4e:84:a4:31:94:8e:c6:87:4a:ea:
1e:6f:19:ac:ca:cd:da:e3:d4:95:23:ad:5b:ff:d1:85:4a:0f:
04:f3:f7:25:ae:6e:a6:90:f9:d4:ec:28:46:80:2f:17:d2:cf:
c4:df:db:bc
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICSS0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA2MDMw
MDMwMDdaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDVDNTEyQzYwOEZDREIz
NTJERDUwMkQ5NTc0MDJBRjUwRjMzQUIwRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxFkKszDd39z94OvgJZzCAKEsGQquPlheHKqLzFsPvFlDfSrVE
rzSBzM50k3Hdj6a+snJf8WgjTmPZLVKgWPYBP1+PbH5h4v6L16q81CLHOPGgb/4E
WBDPDqcTsmq6CoxHzXpjwOWsN90R7i5mN3w1kFM7XVjAXofie9W3CQqAZgxs65yp
HIlrVaza95AicFpZps8xqxTB8EK1tyoxdE2L2F1//qvUZHFbODb4ZWynTC5m5MRm
VCJSeaRhL9M5BOkJhvMKsOejhrUXoPmKA5FRlKH20OHbNN80aHMBH2tS4ElTwcle
xAGyNDjP8MgL+twIP687nue/fVdkT1+oVWZNAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUXFEsYI/Ns1LdUC2VdAKvUPM6sNUwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9YRkVzWUlfTnMxTGRVQzJWZEFLdlVQTTZzTlUucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAYwDQYJKoZIhvcNAQELBQADggEB
AKEkiJ5nBKw3kbBZq8m5Pn4Ve2XvYF/bNXYm0Ks5Gi+T5HTQ8nhZf7AEX5dlBcIu
PutCKhIQceqgeuXLoBzxB3cVm+ujIStq4gBQc4AfZYr/Qt03CYTwA8/gRscgLZmR
Lksy4J0R9MauAg/eURCpbqC/G6VnYxqM1M/nButSodrnCe/jMhYCmKoCloXZ0HDh
KDrTjjOCuGAOi2EHfnqOHnUcI2WPiLZ3sADdoQgVYpUSO8QQI6ydgw17swJiIkh8
nncbIG+lj7dFaNbLDGz5ToSkMZSOxodK6h5vGazKzdrj1JUjrVv/0YVKDwTz9yWu
bqaQ+dTsKEaALxfSz8Tf27w=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org