Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/f2i4P5Id-8QX8zi_8gtPM1KmhsM.roa
File: f2i4P5Id-8QX8zi_8gtPM1KmhsM.roa (raw, json)
Hash identifier: dQ6Hhpzk9w8yQYPx79NV7mi11U3YiX9KxZ7U68hNmZw=
Subject key identifier: 7F:68:B8:3F:92:1D:FB:C4:17:F3:38:BF:F2:0B:4F:33:52:A6:86:C3
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 493B
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/f2i4P5Id-8QX8zi_8gtPM1KmhsM.roa
Signing time: Fri 03 Jun 2022 00:30:14 +0000
ROA not before: Fri 03 Jun 2022 00:30:14 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18747 (0x493b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 3 00:30:14 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=7F68B83F921DFBC417F338BFF20B4F3352A686C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7e:fc:5a:86:69:43:29:07:7e:a3:4f:dd:26:
a1:9b:0a:d7:1f:74:6f:62:03:d9:83:30:fc:6b:00:
52:fb:85:9c:74:17:0d:ed:2c:fa:aa:51:b8:62:63:
e6:99:b4:c2:13:ce:78:22:39:49:64:85:1b:6a:fc:
a0:e6:d2:56:fb:dc:a8:cb:c1:5c:cf:6b:ba:45:e6:
5a:09:3c:5b:c8:bf:99:1a:96:9e:2e:86:d5:c2:e1:
4a:4f:e2:1d:e3:be:93:13:84:10:0c:6e:19:99:cb:
05:c1:ef:7c:60:a9:24:8c:12:5b:a0:01:cd:ae:ff:
68:37:26:c1:71:44:4e:fb:5f:ac:e1:ad:ea:b0:a1:
4b:77:8c:26:ac:90:fe:b7:ae:45:4f:56:37:71:94:
98:1b:97:98:b5:b3:c1:12:ef:73:ee:72:8f:7e:ef:
db:35:ea:f3:46:23:7f:dc:ea:f3:11:56:d7:60:b5:
f5:c7:10:0e:6a:98:a0:ed:2a:5b:22:ca:c1:cd:f0:
7c:47:62:8c:9b:73:c8:4a:db:69:af:6e:2b:1c:7a:
2f:79:44:85:5d:d1:10:af:a5:97:eb:58:e8:6c:df:
5a:54:88:b6:7f:68:f5:5a:ff:6f:d4:81:5c:f4:35:
8e:c9:41:d0:73:5f:26:05:0b:3d:f4:bc:b4:c1:a1:
03:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:68:B8:3F:92:1D:FB:C4:17:F3:38:BF:F2:0B:4F:33:52:A6:86:C3
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/f2i4P5Id-8QX8zi_8gtPM1KmhsM.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.12.0/24
Signature Algorithm: sha256WithRSAEncryption
83:e1:a8:61:56:25:e6:1a:74:8b:d4:53:a1:2a:64:57:95:2d:
57:ab:ba:44:15:fc:2b:52:49:cf:16:d3:93:c1:46:b9:d5:7b:
52:1c:c4:7f:35:ac:03:59:c8:8e:2e:25:d4:96:7a:a9:0a:73:
a8:a3:74:33:cc:76:96:72:aa:16:b2:db:ed:12:4b:08:40:78:
ec:c7:54:b4:47:67:25:71:da:87:e1:a2:b7:d8:80:83:ee:8d:
a0:3c:7b:df:a6:f7:eb:ad:78:95:33:f9:ab:06:04:55:e7:8e:
15:9c:f1:a1:43:95:99:98:9e:41:73:74:53:8f:41:6b:bd:4e:
98:a8:90:36:3c:92:b1:18:19:60:1a:a1:1e:95:64:31:02:c0:
b6:dd:26:d8:a2:10:4d:cd:3b:46:28:e3:e0:a8:0b:70:1b:b6:
7c:5c:3b:f6:f5:02:b3:33:13:ff:75:6d:5d:88:24:fc:c5:a0:
78:f2:af:c2:01:7d:06:85:95:55:5c:2d:9b:9d:56:ac:5f:3d:
aa:76:1b:95:93:ab:4e:61:3b:6d:c2:87:8b:22:12:a3:f7:57:
35:08:ec:03:81:e5:f0:7f:30:32:22:cb:2f:18:e6:a4:03:ee:
7d:87:a8:37:b7:62:fd:c2:96:c7:35:31:0f:f2:4b:50:16:22:
38:ee:cf:d9
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICSTswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA2MDMw
MDMwMTRaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDdGNjhCODNGOTIxREZC
QzQxN0YzMzhCRkYyMEI0RjMzNTJBNjg2QzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpfvxahmlDKQd+o0/dJqGbCtcfdG9iA9mDMPxrAFL7hZx0Fw3t
LPqqUbhiY+aZtMITzngiOUlkhRtq/KDm0lb73KjLwVzPa7pF5loJPFvIv5kalp4u
htXC4UpP4h3jvpMThBAMbhmZywXB73xgqSSMElugAc2u/2g3JsFxRE77X6zhreqw
oUt3jCaskP63rkVPVjdxlJgbl5i1s8ES73Puco9+79s16vNGI3/c6vMRVtdgtfXH
EA5qmKDtKlsiysHN8HxHYoybc8hK22mvbiscei95RIVd0RCvpZfrWOhs31pUiLZ/
aPVa/2/UgVz0NY7JQdBzXyYFCz30vLTBoQMZAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUf2i4P5Id+8QX8zi/8gtPM1KmhsMwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9mMmk0UDVJZC04UVg4emlfOGd0UE0xS21oc00ucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAwwDQYJKoZIhvcNAQELBQADggEB
AIPhqGFWJeYadIvUU6EqZFeVLVerukQV/CtSSc8W05PBRrnVe1IcxH81rANZyI4u
JdSWeqkKc6ijdDPMdpZyqhay2+0SSwhAeOzHVLRHZyVx2ofhorfYgIPujaA8e9+m
9+uteJUz+asGBFXnjhWc8aFDlZmYnkFzdFOPQWu9TpiokDY8krEYGWAaoR6VZDEC
wLbdJtiiEE3NO0Yo4+CoC3AbtnxcO/b1ArMzE/91bV2IJPzFoHjyr8IBfQaFlVVc
LZudVqxfPap2G5WTq05hO23Ch4siEqP3VzUI7AOB5fB/MDIiyy8Y5qQD7n2HqDe3
Yv3Clsc1MQ/yS1AWIjjuz9k=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org