Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/qGDGDOdnK1T15U1IzAKcIZDIGxE.roa
File: qGDGDOdnK1T15U1IzAKcIZDIGxE.roa (raw, json)
Hash identifier: 8X/7DomGlqQM2SBrIvggZQLCu9WS3MvzYgywtcwQHbA=
Subject key identifier: A8:60:C6:0C:E7:67:2B:54:F5:E5:4D:48:CC:02:9C:21:90:C8:1B:11
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4412
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/qGDGDOdnK1T15U1IzAKcIZDIGxE.roa
Signing time: Thu 03 Mar 2022 00:30:10 +0000
ROA not before: Thu 03 Mar 2022 00:30:10 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17426 (0x4412)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 3 00:30:10 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=A860C60CE7672B54F5E54D48CC029C2190C81B11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e9:97:8b:cd:c5:38:e9:8a:c8:64:43:60:81:
52:63:d0:27:16:1f:0e:db:28:d7:3c:6a:de:b8:81:
83:5d:0f:d7:91:d3:89:bf:c9:b3:e3:a6:80:dd:02:
93:d9:6b:97:19:a4:fa:2e:e6:7c:0e:d3:33:5a:42:
e1:21:7e:1e:a7:e8:7a:94:4b:76:2d:37:50:20:51:
0e:7f:79:65:77:2d:fa:b8:6a:ef:d9:72:1f:b7:b7:
79:82:22:cf:55:25:d2:c4:b6:61:68:28:58:3b:05:
bb:7e:a9:e3:8b:24:47:32:a2:5a:73:93:97:8b:08:
4f:a7:f9:41:98:d8:e8:b0:65:61:5d:dc:37:d8:88:
fa:ce:f7:8e:8b:33:d9:b1:9d:43:f4:66:a2:3f:a9:
b6:10:b9:fc:67:4e:63:ee:d2:aa:4a:4d:b2:61:11:
9c:50:9e:98:0b:20:d2:26:22:0c:b6:19:d0:f9:3a:
68:37:95:f5:d3:3f:fb:83:3c:12:5c:a5:9f:6e:c0:
e7:33:87:0b:61:c4:ca:1d:fd:7f:a1:ad:58:ce:02:
65:64:94:65:f8:4c:2d:4c:d8:10:a8:67:41:f1:0b:
b4:9b:03:ea:c6:d5:83:d3:07:84:99:b4:23:6f:b6:
10:b2:bc:0e:a1:90:e5:62:e5:bc:87:2c:25:8d:93:
86:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:60:C6:0C:E7:67:2B:54:F5:E5:4D:48:CC:02:9C:21:90:C8:1B:11
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/qGDGDOdnK1T15U1IzAKcIZDIGxE.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:55:72:ab:35:26:02:65:60:d5:b4:d1:ce:bb:86:bb:a0:92:
60:7c:70:bd:33:f0:ad:df:ae:6b:44:d3:50:1f:32:5c:e4:2d:
fd:4c:a1:98:4d:95:54:30:6a:da:27:1a:46:d2:5e:51:7f:5e:
db:78:a5:4e:d2:65:eb:9f:06:4c:ea:96:f9:a4:b4:3c:e4:fe:
c8:86:5f:36:fb:94:8c:05:2f:37:20:6d:bf:6c:40:62:28:8b:
54:1d:ad:b9:8f:6e:99:a4:f0:7d:18:57:d6:db:e8:e8:16:28:
e7:9d:17:db:9b:fb:f4:5f:f3:b4:b8:fa:c5:75:67:2f:e3:a1:
44:ce:19:7c:d5:00:26:cb:1f:b8:cd:9e:59:da:79:c5:77:3c:
29:6d:2e:84:6c:85:0a:11:6f:e3:ab:8b:d3:f1:ab:04:42:a1:
98:bf:be:dc:f4:df:43:85:43:7b:14:22:c7:c0:0b:94:fd:35:
63:61:ee:a9:bc:e0:99:57:5d:bf:b8:0c:dc:34:2b:86:8a:4a:
8e:41:b0:80:65:a6:5c:b8:54:06:8d:f6:d3:a8:26:06:c5:26:
40:da:91:c4:bf:d7:c0:87:42:63:d3:32:b6:0a:1e:d2:2e:7c:
30:28:87:e1:5e:9f:00:d0:44:5e:f8:6a:c7:ad:f4:a3:83:3c:
f9:92:2d:88
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRBIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAzMDMw
MDMwMTBaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKEE4NjBDNjBDRTc2NzJC
NTRGNUU1NEQ0OENDMDI5QzIxOTBDODFCMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDR6ZeLzcU46YrIZENggVJj0CcWHw7bKNc8at64gYNdD9eR04m/
ybPjpoDdApPZa5cZpPou5nwO0zNaQuEhfh6n6HqUS3YtN1AgUQ5/eWV3Lfq4au/Z
ch+3t3mCIs9VJdLEtmFoKFg7Bbt+qeOLJEcyolpzk5eLCE+n+UGY2OiwZWFd3DfY
iPrO946LM9mxnUP0ZqI/qbYQufxnTmPu0qpKTbJhEZxQnpgLINImIgy2GdD5Omg3
lfXTP/uDPBJcpZ9uwOczhwthxMod/X+hrVjOAmVklGX4TC1M2BCoZ0HxC7SbA+rG
1YPTB4SZtCNvthCyvA6hkOVi5byHLCWNk4YlAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUqGDGDOdnK1T15U1IzAKcIZDIGxEwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9xR0RHRE9kbksxVDE1VTFJekFLY0laRElHeEUucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAswDQYJKoZIhvcNAQELBQADggEB
AH5Vcqs1JgJlYNW00c67hrugkmB8cL0z8K3frmtE01AfMlzkLf1MoZhNlVQwaton
GkbSXlF/Xtt4pU7SZeufBkzqlvmktDzk/siGXzb7lIwFLzcgbb9sQGIoi1QdrbmP
bpmk8H0YV9bb6OgWKOedF9ub+/Rf87S4+sV1Zy/joUTOGXzVACbLH7jNnlnaecV3
PCltLoRshQoRb+Ori9PxqwRCoZi/vtz030OFQ3sUIsfAC5T9NWNh7qm84JlXXb+4
DNw0K4aKSo5BsIBlply4VAaN9tOoJgbFJkDakcS/18CHQmPTMrYKHtIufDAoh+Fe
nwDQRF74aset9KODPPmSLYg=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org