Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/p-AL-hUKTcN8NoNtN9ApO8Wcca0.roa
File: p-AL-hUKTcN8NoNtN9ApO8Wcca0.roa (raw, json)
Hash identifier: 3Vqd/clm26K258EhBfgYDOWyMXO6bzrAKkNwb3uvtv8=
Subject key identifier: A7:E0:0B:FA:15:0A:4D:C3:7C:36:83:6D:37:D0:29:3B:C5:9C:71:AD
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 48C3
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/p-AL-hUKTcN8NoNtN9ApO8Wcca0.roa
Signing time: Sat 28 May 2022 00:30:08 +0000
ROA not before: Sat 28 May 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18627 (0x48c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 28 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=A7E00BFA150A4DC37C36836D37D0293BC59C71AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9b:d8:c4:21:36:91:3a:46:b2:d1:cf:e0:56:
91:86:e1:a3:0b:f4:81:20:60:3a:95:f5:12:21:05:
1a:f7:b5:17:90:e1:a9:14:97:fa:d1:84:a3:6e:06:
d5:c7:49:da:c3:fd:6f:a9:89:e2:e1:96:64:68:e1:
46:7a:71:69:ec:e4:e8:de:4d:ea:dd:3f:68:9b:ff:
25:39:1b:0a:44:41:fa:5e:f9:e2:3c:bb:dc:e8:b8:
61:2f:06:ed:4d:d8:ed:b1:b9:33:67:ff:52:65:7f:
f6:da:7d:14:8d:ba:4d:00:1a:ed:8d:46:f9:b9:25:
2b:81:80:4d:c9:58:6b:d3:5c:76:7b:59:36:db:32:
20:e4:71:91:bf:53:0b:8a:f4:b3:4d:55:47:40:05:
94:36:d3:06:30:77:cd:28:02:63:d6:7f:1e:ad:f5:
c2:2e:a5:3e:94:cd:83:45:0f:e6:2f:77:1f:dc:3b:
f6:bf:f8:82:30:66:58:a1:1b:e8:1e:a0:cc:94:6c:
0e:aa:11:cf:79:c7:ea:43:8c:0f:7f:4f:15:72:69:
6c:61:ea:d8:97:59:e9:03:e0:6c:01:41:28:4a:e9:
25:89:2c:8c:4a:ae:a3:7f:06:55:7f:c9:25:e0:37:
5a:dc:80:b9:1a:3f:79:df:2e:1e:2f:8b:86:88:36:
df:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E0:0B:FA:15:0A:4D:C3:7C:36:83:6D:37:D0:29:3B:C5:9C:71:AD
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/p-AL-hUKTcN8NoNtN9ApO8Wcca0.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
23:19:3d:72:1b:16:e8:4e:22:65:e6:93:d4:45:98:ae:b5:58:
ba:73:2d:eb:ce:31:c4:ce:8b:3e:df:30:35:ff:ac:d6:db:5d:
d5:0d:c4:8e:b8:1c:b3:94:57:f1:b8:4f:2d:05:6a:42:e2:37:
40:e4:d2:82:88:7d:3e:e2:6b:99:96:8b:13:c9:f5:95:f7:3c:
0c:4f:d0:7e:04:4d:2c:a7:ff:05:26:9f:74:33:24:80:18:06:
27:6f:5a:c1:fe:79:78:23:ec:a0:1a:12:5a:ba:0d:5a:3b:7d:
cb:87:7e:0e:26:13:52:04:44:66:3b:ab:0f:4e:71:e2:96:e4:
d9:af:3d:9c:79:38:c6:bd:2d:42:b9:97:e8:d9:cc:32:63:ba:
76:85:b1:61:a3:e8:dd:55:d6:8a:99:b2:f1:e2:da:c5:6c:8d:
53:1d:43:8b:76:77:3e:88:d7:4d:3b:c0:3f:00:c2:63:5b:dd:
0a:e5:f9:68:03:1a:2a:d4:c0:dd:96:67:9f:b8:d5:57:57:6c:
6f:ab:09:ec:49:53:17:fc:95:55:47:0a:53:98:05:95:aa:e6:
78:81:f3:72:2d:58:78:49:12:28:be:85:31:a5:89:5b:92:bc:
9d:2c:40:a6:8b:a4:7a:8d:b9:0a:e5:25:bc:37:36:76:66:01:
9f:d6:8a:82
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICSMMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA1Mjgw
MDMwMDhaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKEE3RTAwQkZBMTUwQTRE
QzM3QzM2ODM2RDM3RDAyOTNCQzU5QzcxQUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDpm9jEITaROkay0c/gVpGG4aML9IEgYDqV9RIhBRr3tReQ4akU
l/rRhKNuBtXHSdrD/W+pieLhlmRo4UZ6cWns5OjeTerdP2ib/yU5GwpEQfpe+eI8
u9zouGEvBu1N2O2xuTNn/1Jlf/bafRSNuk0AGu2NRvm5JSuBgE3JWGvTXHZ7WTbb
MiDkcZG/UwuK9LNNVUdABZQ20wYwd80oAmPWfx6t9cIupT6UzYNFD+Yvdx/cO/a/
+IIwZlihG+geoMyUbA6qEc95x+pDjA9/TxVyaWxh6tiXWekD4GwBQShK6SWJLIxK
rqN/BlV/ySXgN1rcgLkaP3nfLh4vi4aINt/JAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUp+AL+hUKTcN8NoNtN9ApO8Wcca0wHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9wLUFMLWhVS1RjTjhOb050TjlBcE84V2NjYTAucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAMwDQYJKoZIhvcNAQELBQADggEB
ACMZPXIbFuhOImXmk9RFmK61WLpzLevOMcTOiz7fMDX/rNbbXdUNxI64HLOUV/G4
Ty0FakLiN0Dk0oKIfT7ia5mWixPJ9ZX3PAxP0H4ETSyn/wUmn3QzJIAYBidvWsH+
eXgj7KAaElq6DVo7fcuHfg4mE1IERGY7qw9OceKW5NmvPZx5OMa9LUK5l+jZzDJj
unaFsWGj6N1V1oqZsvHi2sVsjVMdQ4t2dz6I1007wD8AwmNb3Qrl+WgDGirUwN2W
Z5+41VdXbG+rCexJUxf8lVVHClOYBZWq5niB83ItWHhJEii+hTGliVuSvJ0sQKaL
pHqNuQrlJbw3NnZmAZ/WioI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org