Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/bDZIMFDuUJbQVpLPkCSB8H89qgQ.roa
File: bDZIMFDuUJbQVpLPkCSB8H89qgQ.roa (raw, json)
Hash identifier: tqSSpnO27pT84cIcebXcbBhh5AHj6i409B6XwKJN2pM=
Subject key identifier: 6C:36:48:30:50:EE:50:96:D0:56:92:CF:90:24:81:F0:7F:3D:AA:04
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4889
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/bDZIMFDuUJbQVpLPkCSB8H89qgQ.roa
Signing time: Tue 24 May 2022 00:30:07 +0000
ROA not before: Tue 24 May 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18569 (0x4889)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 24 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=6C36483050EE5096D05692CF902481F07F3DAA04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b1:56:82:40:ff:f2:12:13:b2:89:d7:55:a5:
a2:1c:2c:eb:8d:9d:c9:57:05:cc:69:4c:44:ab:3b:
2b:55:9c:d4:09:a0:59:a7:1d:04:74:50:b1:5c:1a:
d8:0c:d2:ff:5f:35:55:12:f4:3d:54:ad:91:7b:9f:
8a:22:65:52:19:3a:22:4f:44:43:89:80:ec:3b:4e:
47:c0:74:70:25:22:82:d1:5b:29:88:4a:33:ea:8f:
2d:2c:d2:ac:24:3a:de:ed:e9:04:d2:b5:00:88:22:
f4:12:54:27:9f:a2:49:04:3f:71:53:38:ee:a6:b3:
25:fa:d5:af:3f:58:4a:38:99:7b:d3:4e:7d:23:82:
b5:68:c2:e3:11:65:35:20:14:dd:cf:47:2c:68:02:
fa:35:95:73:80:f1:6e:b4:fb:95:d9:c3:55:b8:96:
47:25:96:12:e4:f9:ed:26:1d:6e:29:ca:1e:fd:e7:
9f:8e:9e:dd:60:10:35:a1:d7:64:cf:60:fb:b4:b7:
80:0c:cc:cd:6c:df:05:9a:42:b0:25:6a:b4:ce:e3:
20:71:5e:b4:52:8f:cc:a9:d8:9b:2b:a1:b6:0a:d3:
2f:b2:53:78:34:a5:58:24:41:e7:45:9d:29:38:01:
89:f1:27:07:22:3d:c6:0d:cb:11:25:15:6f:83:60:
95:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:36:48:30:50:EE:50:96:D0:56:92:CF:90:24:81:F0:7F:3D:AA:04
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/bDZIMFDuUJbQVpLPkCSB8H89qgQ.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
52:35:45:2c:af:fa:60:e7:e4:c2:b2:7f:e3:45:ab:12:d6:be:
5b:e6:30:4b:b3:47:89:ca:3e:b4:ad:3a:e3:9d:c0:62:fe:83:
3d:4b:4f:de:a3:84:c7:3b:f5:f0:bb:d1:e5:79:58:f3:ab:85:
97:f6:d9:4c:54:59:41:18:f2:89:65:72:76:99:f9:ef:63:ec:
ca:3c:e0:20:af:e0:cd:db:b8:59:d5:8c:04:be:24:0d:c9:e4:
d6:84:d1:a2:d9:cb:b9:32:7b:bf:b3:c0:30:5c:31:25:aa:a7:
16:ba:34:f4:52:d7:01:68:9f:8b:5a:21:34:d2:b6:16:fa:8d:
97:9b:12:f9:ef:54:cc:7f:51:15:3d:b9:6f:1c:e4:0f:a3:dd:
18:84:35:75:0e:e6:6a:58:a6:02:82:da:2e:58:49:0c:e9:6d:
29:20:c6:e2:77:ea:b2:af:b8:7e:e5:90:63:a4:d8:63:20:24:
2d:d0:1f:2b:97:b3:f4:76:a6:91:22:e2:c4:cf:da:54:c2:b9:
35:1e:26:cd:57:c7:20:6e:93:5e:61:af:08:ee:f2:5a:1a:be:
31:43:e7:5b:ce:9c:20:4f:5d:4c:d8:ea:e9:2e:5d:57:a2:38:
84:c0:94:a1:18:bf:59:4f:11:0f:f0:6c:4f:75:30:63:a6:a9:
69:39:54:51
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICSIkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA1MjQw
MDMwMDdaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDZDMzY0ODMwNTBFRTUw
OTZEMDU2OTJDRjkwMjQ4MUYwN0YzREFBMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtsVaCQP/yEhOyiddVpaIcLOuNnclXBcxpTESrOytVnNQJoFmn
HQR0ULFcGtgM0v9fNVUS9D1UrZF7n4oiZVIZOiJPREOJgOw7TkfAdHAlIoLRWymI
SjPqjy0s0qwkOt7t6QTStQCIIvQSVCefokkEP3FTOO6msyX61a8/WEo4mXvTTn0j
grVowuMRZTUgFN3PRyxoAvo1lXOA8W60+5XZw1W4lkcllhLk+e0mHW4pyh7955+O
nt1gEDWh12TPYPu0t4AMzM1s3wWaQrAlarTO4yBxXrRSj8yp2JsrobYK0y+yU3g0
pVgkQedFnSk4AYnxJwciPcYNyxElFW+DYJWHAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUbDZIMFDuUJbQVpLPkCSB8H89qgQwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9iRFpJTUZEdVVKYlFWcExQa0NTQjhIODlxZ1Eucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAkwDQYJKoZIhvcNAQELBQADggEB
AFI1RSyv+mDn5MKyf+NFqxLWvlvmMEuzR4nKPrStOuOdwGL+gz1LT96jhMc79fC7
0eV5WPOrhZf22UxUWUEY8ollcnaZ+e9j7Mo84CCv4M3buFnVjAS+JA3J5NaE0aLZ
y7kye7+zwDBcMSWqpxa6NPRS1wFon4taITTSthb6jZebEvnvVMx/URU9uW8c5A+j
3RiENXUO5mpYpgKC2i5YSQzpbSkgxuJ36rKvuH7lkGOk2GMgJC3QHyuXs/R2ppEi
4sTP2lTCuTUeJs1XxyBuk15hrwju8loavjFD51vOnCBPXUzY6ukuXVeiOITAlKEY
v1lPEQ/wbE91MGOmqWk5VFE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org