Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/yZZgTTcnNQ71A_0Qm9jFH1P9FHk.roa
File: yZZgTTcnNQ71A_0Qm9jFH1P9FHk.roa (raw, json)
Hash identifier: BkzG9/+5zug939j48qer9gjVADNF9YrBuBHcTiqBiKc=
Subject key identifier: C9:96:60:4D:37:27:35:0E:F5:03:FD:10:9B:D8:C5:1F:53:FD:14:79
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 45D1
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/yZZgTTcnNQ71A_0Qm9jFH1P9FHk.roa
Signing time: Mon 04 Apr 2022 00:30:10 +0000
ROA not before: Mon 04 Apr 2022 00:30:10 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17873 (0x45d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 4 00:30:10 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=C996604D3727350EF503FD109BD8C51F53FD1479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:70:10:ea:14:6a:7e:78:b5:64:af:60:2a:c5:
f7:81:1c:78:90:f7:4b:da:2e:1a:9e:50:5f:d7:a5:
d6:b4:a1:ea:32:61:d8:3f:e2:6f:8d:bd:45:d0:d7:
64:1a:4c:95:ef:f0:8e:91:af:5d:b2:aa:33:90:06:
e6:95:70:39:45:39:fc:9d:67:ae:fc:8a:95:3c:45:
65:6b:c6:9b:66:f3:54:d6:e7:ea:f8:69:36:af:45:
a3:64:90:bf:c3:09:a7:b4:81:92:33:4b:dc:27:17:
9c:79:20:a1:45:4b:a9:8d:ee:aa:bc:e4:59:5d:42:
26:a1:3c:0b:9c:53:e5:78:67:f4:0a:45:bd:a6:a3:
cf:8a:87:2b:49:cc:e5:17:a9:bb:45:c9:ed:68:9c:
ea:23:02:f4:ba:f9:93:f3:c8:0e:57:70:72:2b:37:
18:a3:c4:be:67:7e:73:35:51:4d:b5:02:69:bf:1c:
dd:53:a9:56:36:d4:8e:62:e0:40:5e:30:b0:fd:73:
23:08:a6:d4:f0:06:04:8a:d4:2d:3e:5d:b0:4b:14:
12:d9:46:24:0c:95:d4:5c:8c:ee:45:65:fd:32:f6:
ba:29:6c:da:b9:b4:ff:49:d7:91:65:48:3f:e3:d4:
11:1d:85:01:fc:f5:d5:06:e1:95:be:20:fa:66:ed:
0b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:96:60:4D:37:27:35:0E:F5:03:FD:10:9B:D8:C5:1F:53:FD:14:79
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/yZZgTTcnNQ71A_0Qm9jFH1P9FHk.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:bf:06:09:7a:c7:fd:b1:d4:fa:ce:02:cf:c5:d3:e4:e3:4c:
e5:8e:ad:36:82:d8:47:6d:3d:36:0b:5f:a3:a4:f9:85:f5:ea:
62:31:a8:ee:90:64:f7:b2:4d:4d:e5:81:fd:8c:f3:2e:58:27:
c6:0e:c3:ed:d7:f8:3d:86:27:c3:86:f9:18:9d:5b:ae:a0:10:
da:ab:36:13:e3:7e:4d:28:cc:8d:c4:ba:69:71:d3:42:3c:0e:
6a:60:86:9a:b7:f4:11:21:1e:46:98:92:5f:f0:21:88:bf:ac:
6b:07:13:80:a3:ac:a1:dd:44:b7:fb:fd:ce:80:65:3f:55:6e:
53:3c:18:0d:06:d4:b6:65:54:af:67:e8:b0:59:99:40:07:a2:
cb:8b:7b:f5:6f:97:2a:db:6b:91:5f:29:11:65:8a:07:88:34:
59:c0:a2:1b:18:c0:ab:de:0d:e3:ac:e2:2d:be:66:01:6c:54:
e7:9b:fc:ee:ef:84:f9:d5:3d:8d:f6:a3:44:3d:db:f8:60:fb:
a6:f5:de:a6:ae:b0:d9:7f:2a:67:15:f9:f5:88:20:c2:45:e4:
3d:08:18:1b:e6:bf:2f:e1:02:83:11:ca:13:b1:32:a9:69:29:
71:98:f4:fe:15:49:af:da:53:27:c4:00:37:9a:bf:a0:60:10:
a4:17:c4:38
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRdEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA0MDQw
MDMwMTBaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKEM5OTY2MDREMzcyNzM1
MEVGNTAzRkQxMDlCRDhDNTFGNTNGRDE0NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCacBDqFGp+eLVkr2AqxfeBHHiQ90vaLhqeUF/Xpda0oeoyYdg/
4m+NvUXQ12QaTJXv8I6Rr12yqjOQBuaVcDlFOfydZ678ipU8RWVrxptm81TW5+r4
aTavRaNkkL/DCae0gZIzS9wnF5x5IKFFS6mN7qq85FldQiahPAucU+V4Z/QKRb2m
o8+KhytJzOUXqbtFye1onOojAvS6+ZPzyA5XcHIrNxijxL5nfnM1UU21Amm/HN1T
qVY21I5i4EBeMLD9cyMIptTwBgSK1C0+XbBLFBLZRiQMldRcjO5FZf0y9ropbNq5
tP9J15FlSD/j1BEdhQH89dUG4ZW+IPpm7QujAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUyZZgTTcnNQ71A/0Qm9jFH1P9FHkwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS95WlpnVFRjbk5RNzFBXzBRbTlqRkgxUDlGSGsucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAswDQYJKoZIhvcNAQELBQADggEB
AFq/Bgl6x/2x1PrOAs/F0+TjTOWOrTaC2EdtPTYLX6Ok+YX16mIxqO6QZPeyTU3l
gf2M8y5YJ8YOw+3X+D2GJ8OG+RidW66gENqrNhPjfk0ozI3Eumlx00I8Dmpghpq3
9BEhHkaYkl/wIYi/rGsHE4CjrKHdRLf7/c6AZT9VblM8GA0G1LZlVK9n6LBZmUAH
osuLe/Vvlyrba5FfKRFligeINFnAohsYwKveDeOs4i2+ZgFsVOeb/O7vhPnVPY32
o0Q92/hg+6b13qausNl/KmcV+fWIIMJF5D0IGBvmvy/hAoMRyhOxMqlpKXGY9P4V
Sa/aUyfEADeav6BgEKQXxDg=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org