Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/c7o-wBd3PfDd4My02bKvLKyF6Zc.roa
File: c7o-wBd3PfDd4My02bKvLKyF6Zc.roa (raw, json)
Hash identifier: g5Bf9PZToX9ktOUMkITzr+k/HuIv+vDKg80mJJESTgo=
Subject key identifier: 73:BA:3E:C0:17:77:3D:F0:DD:E0:CC:B4:D9:B2:AF:2C:AC:85:E9:97
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 43B9
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/c7o-wBd3PfDd4My02bKvLKyF6Zc.roa
Signing time: Fri 25 Feb 2022 00:30:07 +0000
ROA not before: Fri 25 Feb 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17337 (0x43b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 25 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=73BA3EC017773DF0DDE0CCB4D9B2AF2CAC85E997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:54:75:48:74:d6:5b:c7:d0:fc:d7:aa:7d:3a:
f4:7d:5a:c5:24:28:ba:73:a9:f2:6e:9b:ba:55:d0:
55:34:f3:a9:50:79:ef:73:a5:4b:e7:fd:61:c0:67:
08:65:bc:66:78:23:52:8b:90:d4:6f:78:bc:b5:eb:
c2:cb:26:fc:1b:1c:04:f9:7a:7b:4f:9b:83:80:0b:
8a:94:7c:4b:c3:7f:20:de:aa:48:37:ab:ce:65:c6:
95:96:cf:c7:42:67:b2:5d:ba:44:ce:d4:c6:e1:d9:
c8:d6:a6:b9:f7:59:9a:63:67:d8:0d:4a:0c:e4:78:
61:ca:31:aa:3a:b0:0a:b2:67:9b:9b:92:61:e5:1a:
b3:ab:fe:71:58:2d:1f:cf:05:aa:80:74:af:50:73:
6a:82:eb:31:0b:ec:e9:18:96:64:38:df:b7:94:78:
e9:74:9d:bc:63:f5:00:7e:94:e6:9b:27:98:cf:b2:
7b:45:6a:15:8a:c7:f4:96:29:0a:c6:ee:53:9f:2a:
ae:38:69:d6:ee:7e:30:f8:b4:ca:2e:b4:be:96:67:
04:95:51:0c:d3:d0:e1:b0:ee:b8:72:33:7e:d0:28:
3f:fc:aa:ff:71:04:c3:a7:f6:05:5e:97:8e:90:7d:
c6:6e:6d:ce:68:9b:e4:b5:8c:2e:b7:69:c2:39:d7:
60:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:BA:3E:C0:17:77:3D:F0:DD:E0:CC:B4:D9:B2:AF:2C:AC:85:E9:97
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/c7o-wBd3PfDd4My02bKvLKyF6Zc.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:e2:8f:5a:54:a3:65:b9:ba:32:30:c6:03:4b:e3:5c:50:e4:
67:b4:2e:ab:e9:a4:a2:74:6b:e7:08:d4:ff:bd:78:28:45:9a:
93:df:fd:51:83:16:17:e0:29:11:64:53:f3:bc:2f:05:d6:34:
e6:33:9c:39:c1:09:a7:f2:7e:6e:df:70:ca:bc:5a:a1:fb:ef:
ed:39:27:e4:0b:02:24:fa:e0:71:fb:0d:05:89:90:3a:4b:54:
d7:71:a8:e3:c1:49:c0:fd:57:40:c8:5a:c3:b6:9d:65:ea:9f:
50:7c:bb:6e:d1:8c:94:42:b5:9f:1e:94:20:41:69:c7:e8:27:
5b:3c:ba:18:65:c8:3f:02:f5:f9:5b:ff:9d:5c:b7:32:fc:45:
fa:d3:22:a5:43:52:d2:f2:bc:4a:c0:ff:11:58:e7:2b:e2:a8:
76:1c:fd:a9:43:35:41:78:2e:e2:39:ec:60:39:26:f9:6c:16:
3d:16:59:74:e2:f8:90:72:9d:4b:0b:a0:9e:d9:09:be:42:bf:
85:1a:d2:b3:e0:24:01:6a:02:ef:a9:fc:4c:52:e0:67:54:95:
0f:b1:86:6f:a5:f2:81:e6:5a:3b:a9:74:c0:40:e1:ee:59:d5:
bc:c7:73:5a:24:16:e0:41:fe:31:83:a9:48:cc:15:10:1e:b6:
0a:89:05:7d
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICQ7kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAyMjUw
MDMwMDdaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKDczQkEzRUMwMTc3NzNE
RjBEREUwQ0NCNEQ5QjJBRjJDQUM4NUU5OTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDmVHVIdNZbx9D816p9OvR9WsUkKLpzqfJum7pV0FU086lQee9z
pUvn/WHAZwhlvGZ4I1KLkNRveLy168LLJvwbHAT5entPm4OAC4qUfEvDfyDeqkg3
q85lxpWWz8dCZ7JdukTO1Mbh2cjWprn3WZpjZ9gNSgzkeGHKMao6sAqyZ5ubkmHl
GrOr/nFYLR/PBaqAdK9Qc2qC6zEL7OkYlmQ437eUeOl0nbxj9QB+lOabJ5jPsntF
ahWKx/SWKQrG7lOfKq44adbufjD4tMoutL6WZwSVUQzT0OGw7rhyM37QKD/8qv9x
BMOn9gVel46QfcZubc5om+S1jC63acI512AVAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUc7o+wBd3PfDd4My02bKvLKyF6ZcwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9jN28td0JkM1BmRGQ0TXkwMmJLdkxLeUY2WmMucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAUwDQYJKoZIhvcNAQELBQADggEB
ACvij1pUo2W5ujIwxgNL41xQ5Ge0LqvppKJ0a+cI1P+9eChFmpPf/VGDFhfgKRFk
U/O8LwXWNOYznDnBCafyfm7fcMq8WqH77+05J+QLAiT64HH7DQWJkDpLVNdxqOPB
ScD9V0DIWsO2nWXqn1B8u27RjJRCtZ8elCBBacfoJ1s8uhhlyD8C9flb/51ctzL8
RfrTIqVDUtLyvErA/xFY5yviqHYc/alDNUF4LuI57GA5JvlsFj0WWXTi+JBynUsL
oJ7ZCb5Cv4Ua0rPgJAFqAu+p/ExS4GdUlQ+xhm+l8oHmWjupdMBA4e5Z1bzHc1ok
FuBB/jGDqUjMFRAetgqJBX0=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org