Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/mVXbaK_gGDsV7MAIfdWWkdBwpjY.roa
File: mVXbaK_gGDsV7MAIfdWWkdBwpjY.roa (raw, json)
Hash identifier: nqk4VZU6QeVe6oZnEo9mE/L7SNE0jxjlVdUrniFoRlU=
Subject key identifier: 99:55:DB:68:AF:E0:18:3B:15:EC:C0:08:7D:D5:96:91:D0:70:A6:36
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 472F
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/mVXbaK_gGDsV7MAIfdWWkdBwpjY.roa
Signing time: Fri 29 Apr 2022 00:30:11 +0000
ROA not before: Fri 29 Apr 2022 00:30:11 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18223 (0x472f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 29 00:30:11 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=9955DB68AFE0183B15ECC0087DD59691D070A636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:39:1a:02:22:40:be:22:fa:95:d9:76:70:a7:
cd:ee:04:14:be:02:d5:16:f5:aa:34:c4:e3:ca:ed:
6a:bb:38:9d:48:82:e5:a4:9a:e9:cc:8b:6f:b7:98:
d4:19:bf:7f:12:dc:c3:db:36:c1:47:e5:72:7b:3d:
bf:fe:10:f9:75:1a:d9:e6:a5:1d:6a:71:ea:b6:f0:
54:39:d2:51:a1:d0:f5:03:fd:1e:63:aa:17:b1:f2:
90:56:ad:79:8f:75:f5:2c:c6:d0:ab:99:aa:c2:ea:
65:0c:5d:40:95:03:70:4f:81:af:92:e2:f2:6a:9c:
34:84:10:df:fa:b5:f9:b5:c2:a7:1e:e7:7d:ae:f6:
0a:c7:27:d9:6b:ce:26:69:50:a2:2a:32:e9:d3:a6:
bd:84:1c:00:86:b1:ef:65:7a:22:31:1b:24:3d:2b:
43:22:d2:80:87:ac:3a:a9:8b:ef:37:95:80:e2:57:
c0:09:be:7b:db:45:41:f0:0b:50:51:c5:d9:e3:e7:
cd:ef:63:92:7c:44:94:71:e2:6d:59:6f:e0:e9:11:
f0:f0:3c:24:e1:84:e3:c1:28:2c:26:4d:cf:2a:91:
91:c5:ba:d0:28:74:37:7a:1c:55:13:d2:91:20:1a:
51:e8:87:14:bf:7f:f5:e6:0d:9b:09:7b:78:2d:6e:
80:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:55:DB:68:AF:E0:18:3B:15:EC:C0:08:7D:D5:96:91:D0:70:A6:36
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/mVXbaK_gGDsV7MAIfdWWkdBwpjY.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:be:e0:e1:7a:4d:d3:6b:9c:17:46:5b:ec:7b:1b:0a:db:c0:
75:79:45:75:7d:04:65:56:b6:30:26:cd:93:36:80:c9:0f:eb:
9f:63:b7:55:60:59:08:c5:5f:32:55:f6:ca:76:f5:5b:6c:14:
11:d3:cb:9e:e6:37:36:91:01:38:f8:61:f3:42:83:b9:6f:e3:
2d:6e:1d:30:9a:a4:74:fe:37:a9:f3:68:63:db:ff:64:cf:8f:
fb:db:c4:0d:66:db:37:f3:17:3b:a2:62:15:34:32:0b:46:15:
d9:3b:9b:cc:16:24:25:a9:0b:e4:3a:14:79:83:dd:98:94:1f:
15:77:c4:6d:1e:20:9e:0b:89:0a:07:7e:b0:8f:e3:3a:db:2b:
5d:50:b5:ce:92:3a:b5:a5:09:a9:73:8c:23:ec:ca:cb:46:ef:
1c:0b:40:7d:df:a6:1b:03:c9:95:ca:36:7a:85:38:22:20:2f:
42:94:13:74:f6:af:f9:53:66:5c:a4:71:2e:bf:57:bc:1b:2e:
ce:6e:69:d8:62:f3:34:e8:cf:08:a7:fd:f0:5d:0a:9d:b0:ff:
02:4d:c7:ef:18:32:3b:f6:3a:b3:71:29:9b:bc:a6:19:20:84:
c3:7d:ef:80:67:e0:fa:82:5c:b3:7a:a7:4e:61:19:5a:1a:2c:
23:7b:d1:95
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRy8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA0Mjkw
MDMwMTFaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDk5NTVEQjY4QUZFMDE4
M0IxNUVDQzAwODdERDU5NjkxRDA3MEE2MzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDORoCIkC+IvqV2XZwp83uBBS+AtUW9ao0xOPK7Wq7OJ1IguWk
munMi2+3mNQZv38S3MPbNsFH5XJ7Pb/+EPl1GtnmpR1qceq28FQ50lGh0PUD/R5j
qhex8pBWrXmPdfUsxtCrmarC6mUMXUCVA3BPga+S4vJqnDSEEN/6tfm1wqce532u
9grHJ9lrziZpUKIqMunTpr2EHACGse9leiIxGyQ9K0Mi0oCHrDqpi+83lYDiV8AJ
vnvbRUHwC1BRxdnj583vY5J8RJRx4m1Zb+DpEfDwPCThhOPBKCwmTc8qkZHFutAo
dDd6HFUT0pEgGlHohxS/f/XmDZsJe3gtboDRAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUmVXbaK/gGDsV7MAIfdWWkdBwpjYwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9tVlhiYUtfZ0dEc1Y3TUFJZmRXV2tkQndwalkucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAswDQYJKoZIhvcNAQELBQADggEB
ALa+4OF6TdNrnBdGW+x7GwrbwHV5RXV9BGVWtjAmzZM2gMkP659jt1VgWQjFXzJV
9sp29VtsFBHTy57mNzaRATj4YfNCg7lv4y1uHTCapHT+N6nzaGPb/2TPj/vbxA1m
2zfzFzuiYhU0MgtGFdk7m8wWJCWpC+Q6FHmD3ZiUHxV3xG0eIJ4LiQoHfrCP4zrb
K11Qtc6SOrWlCalzjCPsystG7xwLQH3fphsDyZXKNnqFOCIgL0KUE3T2r/lTZlyk
cS6/V7wbLs5uadhi8zTozwin/fBdCp2w/wJNx+8YMjv2OrNxKZu8phkghMN974Bn
4PqCXLN6p05hGVoaLCN70ZU=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org