Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/gIQDGr2rlvY7_hFP6nDnXukZeP8.roa
File: gIQDGr2rlvY7_hFP6nDnXukZeP8.roa (raw, json)
Hash identifier: uUmEPwl/0w20qoAql4xMQ6Kx+GPFRtcI5cWFbIHG2Q0=
Subject key identifier: 80:84:03:1A:BD:AB:96:F6:3B:FE:11:4F:EA:70:E7:5E:E9:19:78:FF
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4454
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/gIQDGr2rlvY7_hFP6nDnXukZeP8.roa
Signing time: Tue 08 Mar 2022 00:36:42 +0000
ROA not before: Tue 08 Mar 2022 00:36:42 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17492 (0x4454)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 8 00:36:42 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=8084031ABDAB96F63BFE114FEA70E75EE91978FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:15:10:fd:16:13:99:88:3e:64:00:0f:cd:c6:
76:90:ce:f9:5f:08:0b:8f:c9:92:a5:39:8c:c2:12:
16:7c:4e:d5:94:ee:3f:ae:ca:d8:dc:c5:9d:dc:26:
8e:c9:5d:5c:84:7d:0f:ba:e8:37:86:d3:92:12:89:
4d:df:ba:44:70:63:3a:9e:81:a8:65:2f:2d:6b:82:
49:71:1b:f4:84:66:e4:ce:30:d5:f2:f5:5c:7e:e8:
08:ce:37:2f:e7:3a:78:c8:c3:24:62:7c:fc:65:a4:
48:2e:10:93:6c:a4:aa:b8:a9:04:f6:69:fa:0a:84:
6c:02:18:f5:df:d8:c4:19:55:c4:bd:7d:b5:22:37:
44:3e:6f:80:c0:19:1e:c9:9f:3f:77:8d:af:01:5a:
be:cd:e6:98:34:16:a3:08:9d:8f:ba:27:ca:4a:e8:
3e:73:9c:8d:67:81:a6:2c:1f:3d:b5:c4:02:27:f0:
df:4c:05:96:d0:96:31:ae:be:54:34:ff:8a:9a:1f:
7f:b4:49:93:6f:08:d3:74:c4:c8:84:79:a5:ec:bf:
10:2c:5e:27:b4:e0:9f:99:93:6b:2f:a7:dd:3b:45:
9e:30:2e:d7:62:b2:c4:42:cc:84:d8:7a:47:53:35:
cf:00:7b:c5:f3:da:59:0e:55:2e:6c:dc:6f:41:c5:
46:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:84:03:1A:BD:AB:96:F6:3B:FE:11:4F:EA:70:E7:5E:E9:19:78:FF
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/gIQDGr2rlvY7_hFP6nDnXukZeP8.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
54:7e:f8:93:6e:a3:c6:16:d9:db:80:04:1d:23:92:38:2b:d5:
19:5b:ff:66:c8:8a:6d:cf:03:f5:fd:5f:44:63:81:5b:a6:c8:
78:95:18:9c:04:43:35:24:e3:e5:bc:11:45:33:2c:4e:e9:e8:
cc:bb:b4:f6:e6:a7:28:6e:39:25:93:60:24:22:e0:49:21:72:
85:5c:33:5c:60:89:2a:21:ca:30:98:9f:37:03:b6:71:77:74:
6e:0f:80:22:47:6e:9d:e3:7e:7c:f0:7b:10:2b:34:79:e8:fa:
9b:34:51:c5:7c:84:cf:9d:07:16:eb:c5:4f:ce:5c:c2:be:f0:
bd:62:d0:7a:6f:e8:d5:36:c4:86:ba:97:c7:b1:4c:e0:d4:0f:
1c:95:36:91:f6:4c:35:b7:7b:79:40:94:e7:12:bc:57:5f:43:
9d:ac:d5:62:df:77:47:01:35:81:7a:86:d5:f9:74:dc:e5:5f:
88:9c:52:38:2a:62:11:a6:43:71:98:5a:6c:c7:7c:98:92:03:
15:51:fd:e8:40:41:8d:ca:f4:ca:ab:36:52:7d:c3:48:e9:2b:
2d:a4:5a:ac:d2:23:01:a9:0f:f0:86:99:35:94:b4:80:6c:96:
0d:1e:d4:d8:5b:3a:6f:a1:cf:3c:6b:7e:46:6d:f6:11:6f:aa:
1f:73:2e:18
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRFQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAzMDgw
MDM2NDJaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKDgwODQwMzFBQkRBQjk2
RjYzQkZFMTE0RkVBNzBFNzVFRTkxOTc4RkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMFRD9FhOZiD5kAA/NxnaQzvlfCAuPyZKlOYzCEhZ8TtWU7j+u
ytjcxZ3cJo7JXVyEfQ+66DeG05ISiU3fukRwYzqegahlLy1rgklxG/SEZuTOMNXy
9Vx+6AjONy/nOnjIwyRifPxlpEguEJNspKq4qQT2afoKhGwCGPXf2MQZVcS9fbUi
N0Q+b4DAGR7Jnz93ja8BWr7N5pg0FqMInY+6J8pK6D5znI1ngaYsHz21xAIn8N9M
BZbQljGuvlQ0/4qaH3+0SZNvCNN0xMiEeaXsvxAsXie04J+Zk2svp907RZ4wLtdi
ssRCzITYekdTNc8Ae8Xz2lkOVS5s3G9BxUZNAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUgIQDGr2rlvY7/hFP6nDnXukZeP8wHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9nSVFER3Iycmx2WTdfaEZQNm5Eblh1a1plUDgucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHA0wDQYJKoZIhvcNAQELBQADggEB
AFR++JNuo8YW2duABB0jkjgr1Rlb/2bIim3PA/X9X0RjgVumyHiVGJwEQzUk4+W8
EUUzLE7p6My7tPbmpyhuOSWTYCQi4EkhcoVcM1xgiSohyjCYnzcDtnF3dG4PgCJH
bp3jfnzwexArNHno+ps0UcV8hM+dBxbrxU/OXMK+8L1i0Hpv6NU2xIa6l8exTODU
DxyVNpH2TDW3e3lAlOcSvFdfQ52s1WLfd0cBNYF6htX5dNzlX4icUjgqYhGmQ3GY
WmzHfJiSAxVR/ehAQY3K9MqrNlJ9w0jpKy2kWqzSIwGpD/CGmTWUtIBslg0e1Nhb
Om+hzzxrfkZt9hFvqh9zLhg=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org