Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/sEFPo8wuw5xEdQJkvpH0jSItZc0.roa
File: sEFPo8wuw5xEdQJkvpH0jSItZc0.roa (raw, json)
Hash identifier: MIwTIW04SWH+f+z+ZZQX520UCgBWp9xzx+QADOZR6Hk=
Subject key identifier: B0:41:4F:A3:CC:2E:C3:9C:44:75:02:64:BE:91:F4:8D:22:2D:65:CD
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 463B
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/sEFPo8wuw5xEdQJkvpH0jSItZc0.roa
Signing time: Tue 12 Apr 2022 00:30:09 +0000
ROA not before: Tue 12 Apr 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17979 (0x463b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 12 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=B0414FA3CC2EC39C44750264BE91F48D222D65CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:03:c4:ba:e5:8e:dc:61:f2:f8:73:31:6a:8e:
4f:2c:a4:85:a8:1a:ac:04:51:c5:35:b8:d0:92:55:
d0:ca:c7:bc:6a:56:9e:f8:84:4f:a4:4d:b0:bc:20:
54:8b:f6:76:3b:3b:a1:71:90:a3:b8:5d:98:87:7b:
3e:25:93:7d:82:e6:87:16:1d:c6:d0:4b:a8:48:45:
0b:1b:ce:e5:44:fd:c2:37:43:22:3f:12:12:90:18:
1f:6e:45:61:22:3c:3d:72:3b:e8:e3:af:bf:3d:04:
86:b8:84:e6:19:2e:30:c6:3b:a1:07:36:82:2e:8c:
7a:40:9c:95:f2:b7:a6:6d:a1:f2:3c:b2:8f:96:bc:
1f:53:ad:c0:a2:89:29:33:3e:ab:a6:af:49:02:f4:
51:4a:73:fd:6b:0a:d8:e2:96:b7:34:d8:3f:7d:96:
01:62:1d:55:ef:4b:09:38:94:c9:9b:64:58:8c:09:
e8:43:b7:05:92:f1:89:67:a4:94:9c:b8:b2:d5:18:
66:86:36:d2:41:6a:38:3a:45:85:b5:47:06:53:92:
0a:11:5f:f6:16:f0:cf:3d:36:ef:0f:be:4e:01:d1:
1f:97:3f:df:1e:9d:cf:2b:04:36:69:91:aa:28:6c:
f5:ec:62:bb:c6:14:8b:af:8c:40:dd:43:ac:5e:7f:
fb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:41:4F:A3:CC:2E:C3:9C:44:75:02:64:BE:91:F4:8D:22:2D:65:CD
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/sEFPo8wuw5xEdQJkvpH0jSItZc0.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
95:34:05:c8:0e:f4:d6:b3:b4:3b:96:68:e9:dd:1f:c5:e6:1e:
b1:63:10:68:a5:ee:34:14:38:9c:a0:bd:9d:74:89:c2:af:08:
73:9e:4b:d4:59:8e:af:de:e1:94:7c:be:d1:da:a2:42:65:47:
ae:95:05:e4:ea:b5:e2:a6:09:25:c9:f6:be:a3:40:4d:dc:34:
27:09:52:ed:3e:d1:93:f8:19:1c:3d:ae:f3:23:8b:00:db:74:
85:2b:a6:4e:36:28:06:b9:c6:42:71:f0:85:02:dc:95:bb:22:
4a:1a:03:32:f7:dd:4d:0f:c0:ae:2c:3e:b3:b7:63:9a:5b:1f:
66:12:4e:50:f2:d2:99:ce:b8:33:99:86:4e:7d:09:1c:9f:23:
8f:26:a6:8a:32:64:cd:1a:00:84:f3:48:de:18:13:8e:2f:2e:
5c:b4:0c:4f:67:05:08:59:62:b2:56:57:af:27:d1:7c:2e:2f:
7e:bd:7f:73:d4:80:e8:36:a8:03:0d:d1:69:51:ab:3f:e9:0d:
c7:98:bf:b9:0d:20:ae:06:e8:10:79:f7:a8:42:59:fb:4d:c5:
f9:88:db:13:e5:06:68:39:94:ac:63:d0:0c:e6:2c:f9:32:47:
c1:5d:17:01:18:b4:40:8e:9e:a3:f2:8a:61:ff:9b:8b:09:9c:
77:b7:2b:bb
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRjswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA0MTIw
MDMwMDlaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKEIwNDE0RkEzQ0MyRUMz
OUM0NDc1MDI2NEJFOTFGNDhEMjIyRDY1Q0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDcA8S65Y7cYfL4czFqjk8spIWoGqwEUcU1uNCSVdDKx7xqVp74
hE+kTbC8IFSL9nY7O6FxkKO4XZiHez4lk32C5ocWHcbQS6hIRQsbzuVE/cI3QyI/
EhKQGB9uRWEiPD1yO+jjr789BIa4hOYZLjDGO6EHNoIujHpAnJXyt6ZtofI8so+W
vB9TrcCiiSkzPqumr0kC9FFKc/1rCtjilrc02D99lgFiHVXvSwk4lMmbZFiMCehD
twWS8YlnpJScuLLVGGaGNtJBajg6RYW1RwZTkgoRX/YW8M89Nu8Pvk4B0R+XP98e
nc8rBDZpkaoobPXsYrvGFIuvjEDdQ6xef/tfAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUsEFPo8wuw5xEdQJkvpH0jSItZc0wHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9zRUZQbzh3dXc1eEVkUUprdnBIMGpTSXRaYzAucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHA8wDQYJKoZIhvcNAQELBQADggEB
AJU0BcgO9NaztDuWaOndH8XmHrFjEGil7jQUOJygvZ10icKvCHOeS9RZjq/e4ZR8
vtHaokJlR66VBeTqteKmCSXJ9r6jQE3cNCcJUu0+0ZP4GRw9rvMjiwDbdIUrpk42
KAa5xkJx8IUC3JW7IkoaAzL33U0PwK4sPrO3Y5pbH2YSTlDy0pnOuDOZhk59CRyf
I48mpooyZM0aAITzSN4YE44vLly0DE9nBQhZYrJWV68n0XwuL369f3PUgOg2qAMN
0WlRqz/pDceYv7kNIK4G6BB596hCWftNxfmI2xPlBmg5lKxj0AzmLPkyR8FdFwEY
tECOnqPyimH/m4sJnHe3K7s=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org