Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/v2WZQH-qE1UwQ3O_DYWgSixo9hw.roa
File: v2WZQH-qE1UwQ3O_DYWgSixo9hw.roa (raw, json)
Hash identifier: J66So/Qmw6/Db2QX4HaXQYZFoKoqdt1pV5sehyogjbY=
Subject key identifier: BF:65:99:40:7F:AA:13:55:30:43:73:BF:0D:85:A0:4A:2C:68:F6:1C
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4851
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/v2WZQH-qE1UwQ3O_DYWgSixo9hw.roa
Signing time: Fri 20 May 2022 00:30:08 +0000
ROA not before: Fri 20 May 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18513 (0x4851)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 20 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=BF6599407FAA1355304373BF0D85A04A2C68F61C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c5:a8:98:14:a5:18:0d:e3:64:44:38:6e:ed:
17:14:08:f2:d0:33:46:95:ac:46:a2:95:8a:0f:45:
88:5a:66:3e:51:42:78:65:ad:ca:2e:63:ad:cf:2a:
05:e7:21:56:8d:b1:11:58:fd:df:cc:fd:74:12:b2:
a3:b5:13:07:d5:5c:33:11:34:41:2e:bc:0a:01:2b:
d2:8d:27:e7:08:80:b4:cc:03:36:ce:69:66:08:22:
2d:83:d1:b1:41:1e:23:1d:bd:d5:50:48:65:c5:89:
d7:d9:ef:79:aa:cc:2a:e2:44:a5:cf:02:7c:03:35:
f3:80:26:67:e2:fd:2f:52:1d:a5:61:d9:f2:6d:1c:
54:b8:44:72:fe:7c:64:25:14:3e:16:97:06:dd:fc:
56:cb:fd:4d:10:63:dc:8b:97:79:66:12:50:35:94:
2b:20:2b:80:41:95:ba:31:bb:db:8a:ec:4a:ce:e7:
d9:07:6b:53:d4:92:4b:34:4e:44:56:c4:ec:78:e0:
88:91:d5:75:4f:93:e2:cb:a7:72:a9:ee:f6:2b:47:
28:20:e4:71:38:87:f2:7f:ba:33:8d:cb:8a:35:a7:
2a:43:57:d7:55:72:6d:e1:a1:57:69:bd:dc:de:96:
47:90:67:ac:e7:82:68:3b:95:35:8b:a0:92:32:87:
1f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:65:99:40:7F:AA:13:55:30:43:73:BF:0D:85:A0:4A:2C:68:F6:1C
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/v2WZQH-qE1UwQ3O_DYWgSixo9hw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
57:bb:6e:61:0f:20:fc:eb:26:a7:f6:74:84:0c:45:c1:7f:99:
47:84:f7:59:c2:cc:1f:56:af:17:63:79:38:c9:6c:7f:fd:5c:
d2:de:6a:d6:7b:db:90:bf:cf:fb:93:a8:df:30:b7:15:a8:a7:
f9:d4:2c:45:3a:69:30:15:42:07:7a:d5:5b:86:a6:19:c2:dd:
3b:8e:36:1d:6a:9b:cb:1b:8c:d7:fd:66:27:8c:b5:a9:e3:50:
ad:f1:61:f9:b5:d3:b0:4f:dc:b5:5f:1f:11:98:7a:bd:24:d9:
09:17:f0:35:3f:44:f0:58:a3:22:da:d2:bb:3a:f0:05:92:5c:
ee:77:6e:da:7f:24:dd:84:6b:d5:c1:f4:8b:4f:f2:a2:3d:9a:
48:22:d5:66:f7:97:fc:16:09:8d:22:b8:0b:56:64:78:5d:84:
b3:96:08:19:f5:d9:0d:89:23:74:24:47:ca:cb:41:1a:8c:7f:
78:05:bf:45:91:1b:df:5c:3f:57:d4:18:1b:f9:13:7f:27:66:
dd:9d:3f:fb:52:e3:dd:b6:1e:f5:ea:f9:e5:81:ad:7a:20:65:
4d:13:37:10:27:32:02:bf:35:7d:b9:b0:ef:85:50:d2:f9:81:
a2:d5:39:f9:22:d1:21:f7:f4:53:0b:62:af:b5:58:21:63:e3:
ce:ae:c3:64
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICSFEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA1MjAw
MDMwMDhaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKEJGNjU5OTQwN0ZBQTEz
NTUzMDQzNzNCRjBEODVBMDRBMkM2OEY2MUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDgxaiYFKUYDeNkRDhu7RcUCPLQM0aVrEailYoPRYhaZj5RQnhl
rcouY63PKgXnIVaNsRFY/d/M/XQSsqO1EwfVXDMRNEEuvAoBK9KNJ+cIgLTMAzbO
aWYIIi2D0bFBHiMdvdVQSGXFidfZ73mqzCriRKXPAnwDNfOAJmfi/S9SHaVh2fJt
HFS4RHL+fGQlFD4Wlwbd/FbL/U0QY9yLl3lmElA1lCsgK4BBlboxu9uK7ErO59kH
a1PUkks0TkRWxOx44IiR1XVPk+LLp3Kp7vYrRygg5HE4h/J/ujONy4o1pypDV9dV
cm3hoVdpvdzelkeQZ6zngmg7lTWLoJIyhx/lAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUv2WZQH+qE1UwQ3O/DYWgSixo9hwwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS92MldaUUgtcUUxVXdRM09fRFlXZ1NpeG85aHcucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAkwDQYJKoZIhvcNAQELBQADggEB
AFe7bmEPIPzrJqf2dIQMRcF/mUeE91nCzB9WrxdjeTjJbH/9XNLeatZ725C/z/uT
qN8wtxWop/nULEU6aTAVQgd61VuGphnC3TuONh1qm8sbjNf9ZieMtanjUK3xYfm1
07BP3LVfHxGYer0k2QkX8DU/RPBYoyLa0rs68AWSXO53btp/JN2Ea9XB9ItP8qI9
mkgi1Wb3l/wWCY0iuAtWZHhdhLOWCBn12Q2JI3QkR8rLQRqMf3gFv0WRG99cP1fU
GBv5E38nZt2dP/tS4922HvXq+eWBrXogZU0TNxAnMgK/NX25sO+FUNL5gaLVOfki
0SH39FMLYq+1WCFj486uw2Q=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org