Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/n9t10cwBX85unSOsadbK-mgUizg.roa
File: n9t10cwBX85unSOsadbK-mgUizg.roa (raw, json)
Hash identifier: LhjPzZAIjdoVfhOAGjS6DssuoC7sKlWAO+QR+Pdgryc=
Subject key identifier: 9F:DB:75:D1:CC:01:5F:CE:6E:9D:23:AC:69:D6:CA:FA:68:14:8B:38
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 47FB
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/n9t10cwBX85unSOsadbK-mgUizg.roa
Signing time: Sat 14 May 2022 00:30:05 +0000
ROA not before: Sat 14 May 2022 00:30:05 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18427 (0x47fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 14 00:30:05 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=9FDB75D1CC015FCE6E9D23AC69D6CAFA68148B38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3f:f9:96:39:46:1e:3f:24:0e:10:d8:8b:ce:
f9:01:e7:00:68:24:84:23:0e:a8:43:17:50:47:d8:
07:84:15:0a:8f:c4:4f:32:d3:ee:a5:ff:1a:99:71:
9b:5a:26:47:5f:b3:28:e9:2d:4c:c0:ca:e1:27:67:
97:21:0c:f0:15:a2:e5:fd:af:c1:2d:23:8b:64:c3:
b5:4c:70:8c:b9:08:fa:86:e1:7e:33:81:89:02:62:
37:03:5e:ae:1d:7e:7c:f0:fe:c0:c2:bb:af:58:3c:
ad:a9:68:4f:bf:d1:6b:e4:3b:b6:33:63:93:4c:be:
e9:d5:43:50:92:40:24:3c:ac:04:60:ec:bb:03:3f:
3b:65:ce:e6:f9:b3:49:aa:dc:af:70:9d:41:fc:a1:
92:9a:a7:17:07:11:5b:46:c4:22:5d:b0:d3:83:14:
78:51:5e:14:7d:24:fa:42:2a:9e:c6:46:21:f9:a4:
a1:0e:1f:ea:a6:8b:a3:a9:4c:14:7c:2b:74:fc:a7:
d6:4e:2f:ef:6f:52:1e:90:04:0c:05:00:6e:2f:68:
78:2b:b6:d7:5a:7a:d3:cb:60:8a:a9:41:c8:18:c8:
1e:3d:72:53:04:3a:8c:ff:d7:35:74:0a:5b:6a:1f:
5e:dc:13:87:24:33:d2:74:29:16:c4:5c:97:ae:7a:
98:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DB:75:D1:CC:01:5F:CE:6E:9D:23:AC:69:D6:CA:FA:68:14:8B:38
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/n9t10cwBX85unSOsadbK-mgUizg.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
00:aa:77:02:13:77:f4:a4:98:95:ba:e0:4f:63:2a:be:1f:37:
c4:db:d4:47:e8:0a:79:ae:c2:de:29:6b:44:e4:c6:48:ee:34:
56:db:64:cf:3f:56:92:d3:14:b7:97:54:7a:36:b0:c2:f1:d7:
86:3d:63:8a:6c:d5:d4:7b:c8:c8:93:b1:03:0e:88:f4:7b:6a:
5d:23:a4:da:0d:ea:d1:c2:07:aa:76:35:24:00:10:32:19:b5:
34:c4:0a:20:4f:10:4c:2e:00:1a:1a:fb:44:c4:e1:11:1c:6a:
1d:39:4b:1c:06:13:f5:49:7e:ee:f0:fc:3b:6e:71:58:55:92:
e1:05:af:bb:52:57:2e:d0:aa:bf:83:71:06:31:be:65:fe:6c:
7a:97:6d:5c:03:bd:ca:78:92:ab:8f:e3:b7:50:08:85:4c:7a:
a5:96:3d:1e:f5:4a:ce:a6:c7:05:0e:68:95:fb:c5:e1:51:65:
23:a5:1c:fb:9b:17:19:d4:f9:ce:62:05:1b:55:a0:8a:12:52:
a5:b2:03:13:26:95:3f:ce:b1:6a:9b:82:a6:70:49:de:8d:49:
f0:55:cf:f6:09:24:54:59:9e:c4:ea:c0:71:cd:4f:1e:1e:78:
f0:eb:29:e3:64:e0:96:02:46:d2:f1:73:13:ec:dd:fc:50:2a:
69:48:32:28
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICR/swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA1MTQw
MDMwMDVaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDlGREI3NUQxQ0MwMTVG
Q0U2RTlEMjNBQzY5RDZDQUZBNjgxNDhCMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCuP/mWOUYePyQOENiLzvkB5wBoJIQjDqhDF1BH2AeEFQqPxE8y
0+6l/xqZcZtaJkdfsyjpLUzAyuEnZ5chDPAVouX9r8EtI4tkw7VMcIy5CPqG4X4z
gYkCYjcDXq4dfnzw/sDCu69YPK2paE+/0WvkO7YzY5NMvunVQ1CSQCQ8rARg7LsD
Pztlzub5s0mq3K9wnUH8oZKapxcHEVtGxCJdsNODFHhRXhR9JPpCKp7GRiH5pKEO
H+qmi6OpTBR8K3T8p9ZOL+9vUh6QBAwFAG4vaHgrttdaetPLYIqpQcgYyB49clME
Ooz/1zV0CltqH17cE4ckM9J0KRbEXJeuepjXAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUn9t10cwBX85unSOsadbK+mgUizgwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9uOXQxMGN3Qlg4NXVuU09zYWRiSy1tZ1Vpemcucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHA8wDQYJKoZIhvcNAQELBQADggEB
AACqdwITd/SkmJW64E9jKr4fN8Tb1EfoCnmuwt4pa0TkxkjuNFbbZM8/VpLTFLeX
VHo2sMLx14Y9Y4ps1dR7yMiTsQMOiPR7al0jpNoN6tHCB6p2NSQAEDIZtTTECiBP
EEwuABoa+0TE4REcah05SxwGE/VJfu7w/DtucVhVkuEFr7tSVy7Qqr+DcQYxvmX+
bHqXbVwDvcp4kquP47dQCIVMeqWWPR71Ss6mxwUOaJX7xeFRZSOlHPubFxnU+c5i
BRtVoIoSUqWyAxMmlT/OsWqbgqZwSd6NSfBVz/YJJFRZnsTqwHHNTx4eePDrKeNk
4JYCRtLxcxPs3fxQKmlIMig=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org