Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/kA4Xfge3jiB_bCgFqRzU-sKs_PQ.roa
File: kA4Xfge3jiB_bCgFqRzU-sKs_PQ.roa (raw, json)
Hash identifier: zjQdWsc0qy0YY1o8nju1jdOgBWS0/Ntzy641XLzBWD0=
Subject key identifier: 90:0E:17:7E:07:B7:8E:20:7F:6C:28:05:A9:1C:D4:FA:C2:AC:FC:F4
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 45BC
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/kA4Xfge3jiB_bCgFqRzU-sKs_PQ.roa
Signing time: Sun 03 Apr 2022 00:30:07 +0000
ROA not before: Sun 03 Apr 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17852 (0x45bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 3 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=900E177E07B78E207F6C2805A91CD4FAC2ACFCF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d6:a4:7c:90:cb:36:b9:4c:71:ca:33:d5:17:
6b:dd:05:bb:ca:74:5f:74:d1:2f:45:ad:32:e4:78:
55:44:82:04:de:33:d5:82:21:fa:4d:12:fb:09:08:
70:93:55:c2:02:89:93:07:1a:29:57:38:3f:b9:fb:
55:e0:05:5c:61:e5:b8:c8:68:64:6c:6b:16:39:2d:
67:f8:ab:b4:c1:cf:4c:fd:2a:f0:2e:41:fb:f9:c7:
51:f3:93:52:8d:c8:48:22:d6:ba:c8:77:d3:c1:c8:
e0:f7:4d:09:39:2e:ba:c7:53:05:1a:6d:15:23:06:
67:90:eb:25:f1:ab:41:15:55:55:66:41:c5:14:80:
a7:c2:3b:c7:ea:97:9b:43:6a:e9:ea:63:0b:9c:a8:
21:5c:ad:1e:b3:49:0d:54:69:fa:e3:eb:a8:39:b9:
53:23:eb:e4:51:c1:50:52:64:f9:8f:73:25:8f:41:
c2:97:d7:be:85:1a:e4:90:a2:1e:cd:58:4f:d3:5c:
b4:0a:35:43:b8:23:4e:07:ad:1c:2d:a7:cf:5a:8a:
04:7c:9c:19:c1:57:2b:ec:2d:1f:4a:c2:fc:00:2a:
ad:70:01:06:46:96:ce:1f:1e:e2:46:d6:a2:1d:a5:
42:4d:d6:86:f7:9a:95:96:93:82:95:08:88:75:00:
5e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0E:17:7E:07:B7:8E:20:7F:6C:28:05:A9:1C:D4:FA:C2:AC:FC:F4
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/kA4Xfge3jiB_bCgFqRzU-sKs_PQ.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
51:a7:8b:57:9c:26:02:d5:b2:d3:d3:04:a8:5c:92:a3:f7:c1:
41:26:a4:d8:a6:86:72:fc:70:60:50:bd:c9:74:6e:98:dc:e8:
76:69:0f:4c:f4:29:a0:d6:68:6a:6b:8a:4c:42:a0:65:53:4a:
04:c7:cb:2b:4e:9d:b0:f4:1e:16:8b:8f:75:95:6f:5f:f9:55:
27:44:ff:c9:70:09:01:19:61:ca:40:db:d6:e8:fb:cb:be:9a:
27:cc:94:05:ed:42:1f:3b:5e:fa:dc:a3:ff:77:c5:4b:92:cb:
bf:2f:ad:84:fe:5b:a6:dd:e1:c7:19:51:9b:2f:5b:3c:bf:d6:
66:24:39:57:6c:ea:42:51:84:c5:bd:26:8d:b2:1e:e6:e6:16:
31:a4:78:8e:82:7d:77:3f:fd:05:f0:20:05:65:05:00:ac:cb:
db:49:08:d4:29:a3:41:79:79:62:1b:12:22:dc:68:13:b1:55:
68:cd:88:ea:24:5b:82:a7:e4:5d:ee:58:ae:0c:9f:83:fa:23:
89:ec:ed:92:70:1f:68:f2:3a:78:fc:4e:81:7f:a5:9f:46:9a:
d1:45:ac:4c:ed:52:51:57:c4:d6:bf:21:15:3b:a3:e1:65:20:
65:1c:0e:be:9e:39:60:9d:8a:59:f7:f2:6d:b7:d5:8b:26:35:
ae:94:cb:99
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRbwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA0MDMw
MDMwMDdaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDkwMEUxNzdFMDdCNzhF
MjA3RjZDMjgwNUE5MUNENEZBQzJBQ0ZDRjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCr1qR8kMs2uUxxyjPVF2vdBbvKdF900S9FrTLkeFVEggTeM9WC
IfpNEvsJCHCTVcICiZMHGilXOD+5+1XgBVxh5bjIaGRsaxY5LWf4q7TBz0z9KvAu
Qfv5x1Hzk1KNyEgi1rrId9PByOD3TQk5LrrHUwUabRUjBmeQ6yXxq0EVVVVmQcUU
gKfCO8fql5tDaunqYwucqCFcrR6zSQ1Uafrj66g5uVMj6+RRwVBSZPmPcyWPQcKX
176FGuSQoh7NWE/TXLQKNUO4I04HrRwtp89aigR8nBnBVyvsLR9KwvwAKq1wAQZG
ls4fHuJG1qIdpUJN1ob3mpWWk4KVCIh1AF59AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUkA4Xfge3jiB/bCgFqRzU+sKs/PQwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9rQTRYZmdlM2ppQl9iQ2dGcVJ6VS1zS3NfUFEucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAUwDQYJKoZIhvcNAQELBQADggEB
AFGni1ecJgLVstPTBKhckqP3wUEmpNimhnL8cGBQvcl0bpjc6HZpD0z0KaDWaGpr
ikxCoGVTSgTHyytOnbD0HhaLj3WVb1/5VSdE/8lwCQEZYcpA29bo+8u+mifMlAXt
Qh87Xvrco/93xUuSy78vrYT+W6bd4ccZUZsvWzy/1mYkOVds6kJRhMW9Jo2yHubm
FjGkeI6CfXc//QXwIAVlBQCsy9tJCNQpo0F5eWIbEiLcaBOxVWjNiOokW4Kn5F3u
WK4Mn4P6I4ns7ZJwH2jyOnj8ToF/pZ9GmtFFrEztUlFXxNa/IRU7o+FlIGUcDr6e
OWCdiln38m231YsmNa6Uy5k=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org