Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/xTXUjDrFA29ev_WSzLCjBrVKUBU.roa
File: xTXUjDrFA29ev_WSzLCjBrVKUBU.roa (raw, json)
Hash identifier: /l1LqPcM308T7bXjfknxilo03D53J2qC5Ect9EVqUB4=
Subject key identifier: C5:35:D4:8C:3A:C5:03:6F:5E:BF:F5:92:CC:B0:A3:06:B5:4A:50:15
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 45CB
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/xTXUjDrFA29ev_WSzLCjBrVKUBU.roa
Signing time: Mon 04 Apr 2022 00:30:06 +0000
ROA not before: Mon 04 Apr 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17867 (0x45cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 4 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=C535D48C3AC5036F5EBFF592CCB0A306B54A5015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:db:76:3e:97:ab:e1:d9:9f:19:19:f8:1b:c9:
f9:b6:5e:6d:fb:06:e3:4c:fc:d9:4a:ec:18:25:6c:
09:e0:12:af:40:b8:59:1d:b4:16:2b:f6:a7:fd:c4:
a7:63:f7:7e:75:28:36:5d:37:d4:b4:60:4a:ce:f7:
47:d7:70:8c:42:46:ec:a2:49:2d:60:44:c2:ba:32:
8b:bb:c9:2d:8d:c6:b3:28:9a:24:5d:c4:69:fa:da:
d7:e6:39:2b:1a:67:60:c1:d8:5e:e6:81:21:70:3c:
58:fb:d8:ee:d4:e5:07:f9:4c:32:f3:07:8a:46:d8:
99:9b:30:37:f6:6f:85:b2:97:25:24:a8:60:42:7e:
ef:ac:18:b6:09:ad:0b:20:56:e0:cb:8a:15:8c:91:
7b:87:40:f9:d7:46:72:68:1b:ed:ea:44:6a:e4:6d:
0c:18:2d:ed:ba:aa:9c:e7:ee:58:aa:7c:3d:fe:42:
16:1f:6b:6c:e0:e8:e0:2d:f6:b3:4d:26:10:5a:cf:
a8:83:12:03:cc:59:0a:f3:7e:7d:a1:30:d3:54:44:
93:24:d4:ba:0a:2c:5d:ae:2c:0d:40:ba:95:e8:c3:
c1:6b:90:31:0d:59:16:1c:8d:52:67:cb:59:9d:59:
ce:9c:89:a8:95:5f:c0:db:f8:85:eb:4d:42:c8:81:
f0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:35:D4:8C:3A:C5:03:6F:5E:BF:F5:92:CC:B0:A3:06:B5:4A:50:15
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/xTXUjDrFA29ev_WSzLCjBrVKUBU.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
21:8d:3f:31:d6:fa:0c:e4:d6:f5:9b:fe:f4:bc:2b:03:d0:38:
aa:51:63:11:f3:21:9a:d7:f4:22:6e:ac:ed:a2:19:53:0f:84:
bd:5d:7e:d7:50:4e:ee:35:55:8d:1d:1e:45:21:12:7d:2b:56:
da:11:2e:17:7d:29:a7:62:e8:9d:78:63:80:cc:7e:09:92:5c:
e9:49:fa:91:d9:7f:e0:42:00:cf:34:5d:e3:c9:58:7e:38:7f:
b7:c3:b7:ce:81:6a:79:9b:d1:60:e6:63:01:2e:07:c1:62:52:
ba:99:b8:02:7f:41:f9:bb:84:14:50:9e:17:11:0a:6f:1c:7c:
3b:a9:1c:59:01:24:ac:39:14:d5:52:42:e6:a1:a6:53:7d:bd:
e1:92:3c:9e:0a:5f:88:d8:ce:c1:8d:08:cc:04:46:74:11:47:
7f:76:40:8d:4e:26:21:d6:ae:d3:22:e6:53:5a:da:b7:3d:11:
7b:0c:e1:d1:bc:63:04:55:c5:10:d8:53:6f:e5:b0:bd:a1:2e:
8a:bb:a0:38:1e:eb:45:60:27:ef:4c:3b:88:1e:4f:2d:97:a2:
d5:06:f5:3e:a8:6f:25:52:31:32:3f:0d:4e:06:2f:f6:0a:92:
49:da:db:72:a0:1a:3c:b0:ba:f3:de:d4:0b:5a:3f:7f:35:cd:
87:1d:16:9a
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRcswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA0MDQw
MDMwMDZaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKEM1MzVENDhDM0FDNTAz
NkY1RUJGRjU5MkNDQjBBMzA2QjU0QTUwMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCa23Y+l6vh2Z8ZGfgbyfm2Xm37BuNM/NlK7BglbAngEq9AuFkd
tBYr9qf9xKdj9351KDZdN9S0YErO90fXcIxCRuyiSS1gRMK6Mou7yS2NxrMomiRd
xGn62tfmOSsaZ2DB2F7mgSFwPFj72O7U5Qf5TDLzB4pG2JmbMDf2b4WylyUkqGBC
fu+sGLYJrQsgVuDLihWMkXuHQPnXRnJoG+3qRGrkbQwYLe26qpzn7liqfD3+QhYf
a2zg6OAt9rNNJhBaz6iDEgPMWQrzfn2hMNNURJMk1LoKLF2uLA1AupXow8FrkDEN
WRYcjVJny1mdWc6ciaiVX8Db+IXrTULIgfDDAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUxTXUjDrFA29ev/WSzLCjBrVKUBUwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS94VFhVakRyRkEyOWV2X1dTekxDakJyVktVQlUucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHA8wDQYJKoZIhvcNAQELBQADggEB
ACGNPzHW+gzk1vWb/vS8KwPQOKpRYxHzIZrX9CJurO2iGVMPhL1dftdQTu41VY0d
HkUhEn0rVtoRLhd9Kadi6J14Y4DMfgmSXOlJ+pHZf+BCAM80XePJWH44f7fDt86B
anmb0WDmYwEuB8FiUrqZuAJ/Qfm7hBRQnhcRCm8cfDupHFkBJKw5FNVSQuahplN9
veGSPJ4KX4jYzsGNCMwERnQRR392QI1OJiHWrtMi5lNa2rc9EXsM4dG8YwRVxRDY
U2/lsL2hLoq7oDge60VgJ+9MO4geTy2XotUG9T6obyVSMTI/DU4GL/YKkkna23Kg
GjywuvPe1AtaP381zYcdFpo=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org