Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/k7ya9K4CkzC5IXVzOP3xCVZdueY.roa
File: k7ya9K4CkzC5IXVzOP3xCVZdueY.roa (raw, json)
Hash identifier: lsHVKc9DdItGcwQq0kEV5X7B1Pfy03LImcSpoZ8tb8g=
Subject key identifier: 93:BC:9A:F4:AE:02:93:30:B9:21:75:73:38:FD:F1:09:56:5D:B9:E6
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4680
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/k7ya9K4CkzC5IXVzOP3xCVZdueY.roa
Signing time: Sun 17 Apr 2022 00:30:07 +0000
ROA not before: Sun 17 Apr 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18048 (0x4680)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 17 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=93BC9AF4AE029330B921757338FDF109565DB9E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bd:9b:7a:28:b1:6d:ce:68:59:6d:ad:7e:9f:
b6:cc:4c:df:a4:aa:6a:31:d7:d0:dc:3a:e8:57:1a:
47:97:63:e7:64:7c:1e:fe:ac:42:7f:58:5b:b0:3e:
97:01:a0:1f:13:78:f0:ef:31:f1:73:f6:ea:9a:7b:
66:97:63:40:4c:0f:e6:66:75:6e:6f:f3:40:0c:a9:
ad:27:79:ea:3c:84:2e:bf:4f:3b:6c:94:a1:af:9f:
4b:6c:82:eb:a5:72:2f:2c:30:87:78:b6:d5:14:48:
9d:42:47:76:4f:49:6e:5f:52:4c:fb:ab:65:da:1e:
64:9d:8e:9a:ab:49:d0:22:46:f8:1b:c9:01:c3:2b:
ef:bb:6c:fb:8c:8c:c6:f3:cc:bf:7d:48:f8:c5:95:
90:a2:1b:c9:70:06:30:66:6d:5b:da:32:46:39:50:
ba:87:16:ac:e4:19:40:21:4a:66:82:c3:e3:33:a3:
dd:fe:4b:a0:b5:87:ab:08:eb:c5:ce:72:ff:91:15:
0d:51:42:75:4d:5c:76:0b:71:93:0d:aa:8d:08:c3:
98:69:7c:bf:7c:97:05:f0:4f:7a:f3:36:61:a4:94:
ec:03:f9:38:bb:ff:58:c1:21:29:c1:76:ab:89:6e:
37:74:1b:63:41:ee:e4:6f:3e:77:72:b9:03:bc:29:
41:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BC:9A:F4:AE:02:93:30:B9:21:75:73:38:FD:F1:09:56:5D:B9:E6
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/k7ya9K4CkzC5IXVzOP3xCVZdueY.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
47:c5:69:0f:52:14:ac:9e:28:26:bb:10:7e:2b:e0:49:6e:24:
2f:e3:06:49:23:33:e6:22:2c:a5:c2:52:e5:e1:b5:75:e8:20:
e1:49:98:bc:07:4d:cb:3d:4d:8f:ea:39:03:ce:9c:47:1d:71:
38:a9:bd:f9:56:29:04:5f:e3:80:48:5a:36:ff:59:a8:46:77:
16:11:08:08:44:5d:e5:d0:ab:7c:cd:57:e4:a2:65:c3:b8:28:
a9:d4:30:07:92:92:41:2c:9e:5f:3c:1c:7e:1a:a4:b7:8f:66:
9d:b5:be:b1:e3:87:fd:7b:04:7b:8b:ae:a3:b4:64:82:26:8c:
7b:6e:0a:c8:c9:fa:ba:23:c0:22:f1:87:9f:51:7e:ca:ef:b4:
70:16:f2:b8:ca:82:bc:d0:c0:8a:1e:23:23:89:f2:ad:ec:19:
2d:46:81:5b:ed:a0:6f:04:43:d0:46:e4:fd:08:77:17:04:84:
96:70:48:68:09:59:ab:e0:2e:d9:d2:5e:bb:45:18:82:4d:b5:
18:53:11:ba:38:95:d9:d5:b0:a0:bc:90:8a:75:8f:97:1b:0d:
07:fa:b9:20:df:52:b3:1b:b5:79:db:a4:9e:b0:cb:61:6d:c9:
53:f0:cd:ae:6b:8d:5a:6f:a4:11:e8:48:41:d8:27:3e:9d:f6:
e5:80:33:1c
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRoAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA0MTcw
MDMwMDdaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDkzQkM5QUY0QUUwMjkz
MzBCOTIxNzU3MzM4RkRGMTA5NTY1REI5RTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEvZt6KLFtzmhZba1+n7bMTN+kqmox19DcOuhXGkeXY+dkfB7+
rEJ/WFuwPpcBoB8TePDvMfFz9uqae2aXY0BMD+ZmdW5v80AMqa0neeo8hC6/Tzts
lKGvn0tsguulci8sMId4ttUUSJ1CR3ZPSW5fUkz7q2XaHmSdjpqrSdAiRvgbyQHD
K++7bPuMjMbzzL99SPjFlZCiG8lwBjBmbVvaMkY5ULqHFqzkGUAhSmaCw+Mzo93+
S6C1h6sI68XOcv+RFQ1RQnVNXHYLcZMNqo0Iw5hpfL98lwXwT3rzNmGklOwD+Ti7
/1jBISnBdquJbjd0G2NB7uRvPndyuQO8KUF3AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUk7ya9K4CkzC5IXVzOP3xCVZdueYwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9rN3lhOUs0Q2t6QzVJWFZ6T1AzeENWWmR1ZVkucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAUwDQYJKoZIhvcNAQELBQADggEB
AEfFaQ9SFKyeKCa7EH4r4EluJC/jBkkjM+YiLKXCUuXhtXXoIOFJmLwHTcs9TY/q
OQPOnEcdcTipvflWKQRf44BIWjb/WahGdxYRCAhEXeXQq3zNV+SiZcO4KKnUMAeS
kkEsnl88HH4apLePZp21vrHjh/17BHuLrqO0ZIImjHtuCsjJ+rojwCLxh59Rfsrv
tHAW8rjKgrzQwIoeIyOJ8q3sGS1GgVvtoG8EQ9BG5P0IdxcEhJZwSGgJWavgLtnS
XrtFGIJNtRhTEbo4ldnVsKC8kIp1j5cbDQf6uSDfUrMbtXnbpJ6wy2FtyVPwza5r
jVpvpBHoSEHYJz6d9uWAMxw=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org