Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/fgc0bpAyRmKSBOYlOI2NSm21X5s.roa
File: fgc0bpAyRmKSBOYlOI2NSm21X5s.roa (raw, json)
Hash identifier: zSGi9gxHQFtmcBmmg1f++Un17ZlpPNNbgcdHFVyV4oo=
Subject key identifier: 7E:07:34:6E:90:32:46:62:92:04:E6:25:38:8D:8D:4A:6D:B5:5F:9B
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 48B1
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/fgc0bpAyRmKSBOYlOI2NSm21X5s.roa
Signing time: Fri 27 May 2022 00:30:07 +0000
ROA not before: Fri 27 May 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18609 (0x48b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 27 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=7E07346E903246629204E625388D8D4A6DB55F9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c8:32:c5:77:93:2b:86:fd:f6:9a:df:c9:2a:
81:79:e7:9e:bf:d4:0c:73:8e:bd:b2:61:27:3e:f7:
fd:13:7b:da:24:7a:c6:5d:15:1e:d4:2c:bf:2c:86:
e7:5a:0c:be:e0:98:31:fd:f2:70:4a:23:12:40:a9:
f8:fc:56:1d:c4:63:ee:4c:05:44:bc:ac:5d:f0:89:
fc:71:d3:1b:11:4a:ef:0c:3e:b8:6d:a6:b6:b6:50:
13:9e:7c:c4:72:9d:56:8a:dd:1a:95:13:54:00:e5:
aa:78:f5:15:90:2e:74:76:6c:08:48:47:87:a0:cb:
af:11:fa:b0:c8:c3:95:71:84:7e:78:99:28:d1:14:
51:f8:ad:7b:d5:ee:2d:7d:d6:40:48:09:6f:6a:3d:
ea:94:10:7e:9c:82:e6:94:9a:7a:b5:a7:8b:c6:34:
6a:8e:94:b8:27:cf:a3:9c:9e:62:4b:e9:1e:30:3f:
47:64:46:45:d6:60:5f:61:79:9f:a9:ce:25:84:38:
a9:87:fc:4e:48:2a:b0:ec:63:2b:f8:c3:40:5e:9a:
7f:1a:fd:95:a3:07:32:51:4c:58:c9:a9:1e:42:d0:
a3:a4:48:e8:65:f4:38:e8:1c:b0:9c:6e:4f:14:5f:
30:5c:af:96:11:65:53:98:86:0f:af:d6:cd:ea:7e:
18:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:07:34:6E:90:32:46:62:92:04:E6:25:38:8D:8D:4A:6D:B5:5F:9B
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/fgc0bpAyRmKSBOYlOI2NSm21X5s.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
89:89:4c:19:d4:1d:d0:0f:1f:95:1b:e0:25:ed:ad:25:af:ae:
4f:5c:bc:72:04:a7:fb:85:3e:88:8e:51:f1:a5:88:73:bd:a1:
bb:01:c2:37:ed:b9:8e:ec:31:44:de:08:09:71:b0:87:78:18:
37:25:8b:cc:9e:63:46:7a:c4:2d:0b:d1:b4:b7:05:6e:79:a2:
e3:66:f2:42:6e:ad:60:7e:3a:a7:ab:fb:e5:18:3e:74:3b:c8:
3b:68:06:69:d8:ce:d1:da:fc:8d:77:37:ae:af:27:81:ef:78:
78:ad:ad:c2:dc:f1:d3:f4:ed:29:0e:c6:35:33:b7:3c:75:4a:
f2:64:b0:e0:5f:e9:5e:fc:b9:92:7d:76:b5:ba:9c:2f:a1:6a:
00:63:89:4e:55:e4:4e:af:0a:c8:7c:21:dc:c4:ec:27:f2:20:
a1:9e:47:39:11:85:84:6a:a6:c6:0c:25:62:ec:2b:5b:ba:93:
75:b3:16:a5:51:8e:1e:e7:6b:80:af:95:9d:0e:fe:77:4a:70:
e7:14:c4:4c:86:78:d2:db:f5:82:13:7f:6b:35:59:a5:ac:2b:
00:f6:d0:47:30:b1:24:f3:c4:51:34:9c:5c:70:59:f8:9f:c6:
da:61:94:24:82:a6:17:fb:b0:14:05:f8:4f:ac:08:88:ae:1f:
61:08:7d:c1
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICSLEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA1Mjcw
MDMwMDdaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDdFMDczNDZFOTAzMjQ2
NjI5MjA0RTYyNTM4OEQ4RDRBNkRCNTVGOUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDByDLFd5Mrhv32mt/JKoF5556/1Axzjr2yYSc+9/0Te9okesZd
FR7ULL8shudaDL7gmDH98nBKIxJAqfj8Vh3EY+5MBUS8rF3wifxx0xsRSu8MPrht
pra2UBOefMRynVaK3RqVE1QA5ap49RWQLnR2bAhIR4egy68R+rDIw5VxhH54mSjR
FFH4rXvV7i191kBICW9qPeqUEH6cguaUmnq1p4vGNGqOlLgnz6OcnmJL6R4wP0dk
RkXWYF9heZ+pziWEOKmH/E5IKrDsYyv4w0Bemn8a/ZWjBzJRTFjJqR5C0KOkSOhl
9DjoHLCcbk8UXzBcr5YRZVOYhg+v1s3qfhiNAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUfgc0bpAyRmKSBOYlOI2NSm21X5swHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9mZ2MwYnBBeVJtS1NCT1lsT0kyTlNtMjFYNXMucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHA8wDQYJKoZIhvcNAQELBQADggEB
AImJTBnUHdAPH5Ub4CXtrSWvrk9cvHIEp/uFPoiOUfGliHO9obsBwjftuY7sMUTe
CAlxsId4GDcli8yeY0Z6xC0L0bS3BW55ouNm8kJurWB+Oqer++UYPnQ7yDtoBmnY
ztHa/I13N66vJ4HveHitrcLc8dP07SkOxjUztzx1SvJksOBf6V78uZJ9drW6nC+h
agBjiU5V5E6vCsh8IdzE7CfyIKGeRzkRhYRqpsYMJWLsK1u6k3WzFqVRjh7na4Cv
lZ0O/ndKcOcUxEyGeNLb9YITf2s1WaWsKwD20EcwsSTzxFE0nFxwWfifxtphlCSC
phf7sBQF+E+sCIiuH2EIfcE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org