Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/jA9j1p3O7m08IY9xTbpLKY5C_sw.roa
File: jA9j1p3O7m08IY9xTbpLKY5C_sw.roa (raw, json)
Hash identifier: /QQDOa4ucikM0quiqzMCqFWdG+WdLobDhpA3xjDRzNA=
Subject key identifier: 8C:0F:63:D6:9D:CE:EE:6D:3C:21:8F:71:4D:BA:4B:29:8E:42:FE:CC
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 491D
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/jA9j1p3O7m08IY9xTbpLKY5C_sw.roa
Signing time: Thu 02 Jun 2022 00:30:09 +0000
ROA not before: Thu 02 Jun 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18717 (0x491d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 2 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=8C0F63D69DCEEE6D3C218F714DBA4B298E42FECC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:2d:20:53:ba:d7:41:51:5d:b0:53:be:4b:1c:
e4:cd:7e:cf:8f:f3:a8:5d:40:10:d6:88:9c:69:5e:
02:47:ef:82:d9:1e:26:90:17:13:3a:e5:50:a3:49:
b8:ec:4c:37:6b:00:f3:8b:72:a7:d3:70:28:ad:f3:
48:2a:6f:a7:e6:28:c5:d0:68:c8:20:d0:89:29:dd:
2c:9f:63:75:8e:a6:c4:07:50:b7:23:ec:cb:5d:aa:
73:d7:01:f7:48:07:75:35:d5:b1:8c:47:19:9e:11:
3c:91:b5:57:06:d2:1f:cf:54:4d:e6:63:6b:88:fe:
54:37:2d:13:37:7e:73:e5:57:85:75:1c:5f:4c:f8:
86:5d:ec:ba:d5:be:4b:93:df:29:0e:f0:ad:25:11:
d7:11:02:f8:b5:78:9e:e9:69:eb:63:2f:ce:a7:48:
de:7f:50:c0:9d:a2:7d:49:29:f0:41:a2:11:48:41:
5a:da:4a:a1:7b:ad:29:4c:2f:54:86:8f:ff:92:ca:
3a:47:a7:e0:e8:7b:7e:88:42:84:b5:98:40:14:1b:
13:73:54:9f:18:25:b4:24:1f:88:ac:e4:78:c3:d7:
7b:62:28:cb:99:0b:77:d0:23:e4:64:a6:a2:ed:e7:
84:15:b3:fb:b2:55:89:89:75:37:74:e5:fc:88:a4:
d8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0F:63:D6:9D:CE:EE:6D:3C:21:8F:71:4D:BA:4B:29:8E:42:FE:CC
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/jA9j1p3O7m08IY9xTbpLKY5C_sw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.2.0/24
Signature Algorithm: sha256WithRSAEncryption
00:6a:d4:e1:9b:b6:be:c9:af:a8:f1:95:8c:fd:97:52:4f:74:
19:1a:a8:a9:f9:b3:db:4a:0e:3e:77:e1:5f:39:04:f7:f0:83:
22:9c:82:cb:7e:6b:b1:05:31:9b:2a:e6:24:0a:85:fa:f9:f5:
3a:fe:87:08:2e:b7:3d:33:bb:cc:28:70:4e:11:71:90:e7:4d:
5a:74:54:9e:de:78:57:60:8d:56:8d:90:39:ee:e0:6f:ea:f5:
a7:63:80:85:26:e9:90:35:3b:78:e6:67:2d:e0:40:af:d3:a5:
4a:a0:38:11:a1:5c:93:24:b9:09:f7:fd:1a:82:9d:da:1d:c5:
d5:c2:31:08:40:3d:5a:7c:d5:9b:e8:60:10:06:1a:9f:5a:29:
ef:8c:6d:41:b3:92:50:82:5b:85:8a:b1:be:31:3a:96:75:57:
32:c2:94:da:af:83:b5:0d:13:c5:f5:2a:f4:74:48:b8:e4:d8:
8f:f9:38:61:73:8b:84:07:1e:6b:f9:f0:88:47:04:f5:88:35:
3c:79:96:3e:d5:1a:77:b0:9c:f6:65:8a:19:ea:50:db:b0:81:
69:5b:67:7e:49:1c:e8:9b:02:59:51:c3:09:29:86:26:d5:1d:
d1:c0:ce:b5:1c:80:75:30:59:e5:1b:f3:ca:e1:ba:da:2d:9d:
8d:50:08:61
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICSR0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA2MDIw
MDMwMDlaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDhDMEY2M0Q2OURDRUVF
NkQzQzIxOEY3MTREQkE0QjI5OEU0MkZFQ0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD4LSBTutdBUV2wU75LHOTNfs+P86hdQBDWiJxpXgJH74LZHiaQ
FxM65VCjSbjsTDdrAPOLcqfTcCit80gqb6fmKMXQaMgg0Ikp3SyfY3WOpsQHULcj
7MtdqnPXAfdIB3U11bGMRxmeETyRtVcG0h/PVE3mY2uI/lQ3LRM3fnPlV4V1HF9M
+IZd7LrVvkuT3ykO8K0lEdcRAvi1eJ7paetjL86nSN5/UMCdon1JKfBBohFIQVra
SqF7rSlML1SGj/+SyjpHp+Doe36IQoS1mEAUGxNzVJ8YJbQkH4is5HjD13tiKMuZ
C3fQI+RkpqLt54QVs/uyVYmJdTd05fyIpNhBAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUjA9j1p3O7m08IY9xTbpLKY5C/swwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9qQTlqMXAzTzdtMDhJWTl4VGJwTEtZNUNfc3cucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAIwDQYJKoZIhvcNAQELBQADggEB
AABq1OGbtr7Jr6jxlYz9l1JPdBkaqKn5s9tKDj534V85BPfwgyKcgst+a7EFMZsq
5iQKhfr59Tr+hwgutz0zu8wocE4RcZDnTVp0VJ7eeFdgjVaNkDnu4G/q9adjgIUm
6ZA1O3jmZy3gQK/TpUqgOBGhXJMkuQn3/RqCndodxdXCMQhAPVp81ZvoYBAGGp9a
Ke+MbUGzklCCW4WKsb4xOpZ1VzLClNqvg7UNE8X1KvR0SLjk2I/5OGFzi4QHHmv5
8IhHBPWINTx5lj7VGnewnPZlihnqUNuwgWlbZ35JHOibAllRwwkphibVHdHAzrUc
gHUwWeUb88rhutotnY1QCGE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org