Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/iTiMB2Gr23dAE0bbej0jPj3LLa0.roa
File: iTiMB2Gr23dAE0bbej0jPj3LLa0.roa (raw, json)
Hash identifier: OOcRyjRjaefQ25Ohih3KYFytAUQsR/XYbjI7hTK3JDQ=
Subject key identifier: 89:38:8C:07:61:AB:DB:77:40:13:46:DB:7A:3D:23:3E:3D:CB:2D:AD
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 48DA
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/iTiMB2Gr23dAE0bbej0jPj3LLa0.roa
Signing time: Mon 30 May 2022 00:30:05 +0000
ROA not before: Mon 30 May 2022 00:30:05 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18650 (0x48da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 30 00:30:05 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=89388C0761ABDB77401346DB7A3D233E3DCB2DAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:34:2f:4f:ff:31:5e:12:0f:e6:7c:f7:31:0b:
7a:52:eb:48:0e:10:e5:21:e2:af:d3:72:2f:21:25:
62:31:ac:d9:6f:57:b8:57:5b:e6:66:ec:21:1c:37:
5b:e5:43:7e:94:bb:c6:8c:d8:ff:26:95:1b:4e:24:
a3:b7:cf:9f:42:69:e2:08:b8:b0:d9:e5:12:93:8d:
db:83:2f:f5:db:55:bf:9e:38:1b:55:6f:99:87:4c:
98:e1:21:c1:d4:a3:83:d1:da:48:00:79:2e:6f:bd:
3d:f3:21:ae:4e:2b:5d:59:76:75:25:a8:56:66:cb:
35:d6:4c:5c:d8:82:4b:fc:d0:e8:93:fd:e1:ac:a7:
e0:79:6d:54:37:d7:09:b0:cb:20:a6:d3:0a:98:83:
71:89:4d:4e:5b:7a:43:c2:23:39:b8:a1:11:07:1b:
19:41:fa:87:4f:fb:38:99:16:1b:90:94:86:2b:2f:
ec:2d:54:ae:7e:74:ee:7e:40:b6:54:a1:3f:23:07:
96:19:18:4d:ca:40:67:b6:dd:b0:8a:99:1d:7f:ea:
d1:98:52:f4:27:e6:21:ca:71:f6:16:22:db:c0:b0:
69:46:bb:8c:4c:01:72:80:b9:ec:72:98:3c:a1:ce:
fb:11:44:94:07:e6:5e:f6:20:9b:02:c2:3f:21:8d:
16:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:38:8C:07:61:AB:DB:77:40:13:46:DB:7A:3D:23:3E:3D:CB:2D:AD
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/iTiMB2Gr23dAE0bbej0jPj3LLa0.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
23:47:36:b7:55:4e:8c:24:46:5d:72:42:e1:94:be:56:a1:b7:
c3:91:eb:a8:62:43:01:d8:ca:7f:5b:db:0f:8f:44:fe:65:f0:
cb:16:4f:b8:48:2b:f5:48:7a:7b:2f:4b:31:60:b7:b4:a6:af:
fc:f4:19:ac:29:df:a0:88:3c:67:0b:8c:34:9f:ee:87:8b:d1:
bd:8d:01:17:df:d4:79:7f:41:e9:bc:45:59:11:ec:23:cc:6f:
a2:71:c5:e5:fd:62:91:79:79:86:9d:b5:e3:4e:d3:94:bf:27:
69:47:61:f8:98:b1:bb:23:5b:a3:63:6e:10:70:59:a5:3b:b3:
2d:28:32:5d:63:cd:8a:c0:27:a3:69:7a:4d:d9:ee:46:6d:32:
87:9d:9e:2b:89:3f:2d:d7:b8:b9:d9:d9:45:a5:90:23:55:9f:
10:34:20:a3:b1:e7:9f:3a:e0:f2:74:1b:a0:75:b7:62:6e:b6:
bc:fd:10:14:db:bb:8d:14:c3:2b:cd:34:ca:b4:ed:64:a7:20:
b9:10:e7:f8:51:e9:ff:88:f2:23:7b:5a:82:12:a1:e8:0f:b2:
a7:00:28:61:17:51:a9:5b:35:16:20:19:dd:75:d3:30:6c:14:
91:0e:60:1e:ff:5b:79:07:41:ac:2c:b3:3d:19:3f:66:9f:fa:
32:93:d5:60
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICSNowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA1MzAw
MDMwMDVaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDg5Mzg4QzA3NjFBQkRC
Nzc0MDEzNDZEQjdBM0QyMzNFM0RDQjJEQUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxNC9P/zFeEg/mfPcxC3pS60gOEOUh4q/Tci8hJWIxrNlvV7hX
W+Zm7CEcN1vlQ36Uu8aM2P8mlRtOJKO3z59CaeIIuLDZ5RKTjduDL/XbVb+eOBtV
b5mHTJjhIcHUo4PR2kgAeS5vvT3zIa5OK11ZdnUlqFZmyzXWTFzYgkv80OiT/eGs
p+B5bVQ31wmwyyCm0wqYg3GJTU5bekPCIzm4oREHGxlB+odP+ziZFhuQlIYrL+wt
VK5+dO5+QLZUoT8jB5YZGE3KQGe23bCKmR1/6tGYUvQn5iHKcfYWItvAsGlGu4xM
AXKAuexymDyhzvsRRJQH5l72IJsCwj8hjRYBAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUiTiMB2Gr23dAE0bbej0jPj3LLa0wHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9pVGlNQjJHcjIzZEFFMGJiZWowalBqM0xMYTAucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAUwDQYJKoZIhvcNAQELBQADggEB
ACNHNrdVTowkRl1yQuGUvlaht8OR66hiQwHYyn9b2w+PRP5l8MsWT7hIK/VIensv
SzFgt7Smr/z0Gawp36CIPGcLjDSf7oeL0b2NARff1Hl/Qem8RVkR7CPMb6JxxeX9
YpF5eYadteNO05S/J2lHYfiYsbsjW6NjbhBwWaU7sy0oMl1jzYrAJ6Npek3Z7kZt
MoedniuJPy3XuLnZ2UWlkCNVnxA0IKOx55864PJ0G6B1t2Jutrz9EBTbu40UwyvN
NMq07WSnILkQ5/hR6f+I8iN7WoISoegPsqcAKGEXUalbNRYgGd110zBsFJEOYB7/
W3kHQawssz0ZP2af+jKT1WA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org