Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/zPQdDMjMm66zKpfT3z_b1sjw0PM.roa
File: zPQdDMjMm66zKpfT3z_b1sjw0PM.roa (raw, json)
Hash identifier: EjENqy3dQtBDgP7krrY15tlLCBCjKLB0Ik23JsGL14g=
Subject key identifier: CC:F4:1D:0C:C8:CC:9B:AE:B3:2A:97:D3:DF:3F:DB:D6:C8:F0:D0:F3
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 43A3
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/zPQdDMjMm66zKpfT3z_b1sjw0PM.roa
Signing time: Wed 23 Feb 2022 00:30:09 +0000
ROA not before: Wed 23 Feb 2022 00:30:09 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17315 (0x43a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 23 00:30:09 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=CCF41D0CC8CC9BAEB32A97D3DF3FDBD6C8F0D0F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:87:23:51:0d:fa:0e:1f:09:6f:b2:83:86:5e:
5a:c5:4a:1a:f0:fc:b1:03:81:fd:85:32:b8:c8:0b:
38:e9:84:6f:9a:d4:22:8e:29:8b:b4:85:82:ef:5a:
41:89:27:f8:14:0d:b2:b1:73:c8:8e:f4:4f:f2:f9:
20:a5:fb:05:72:b9:24:10:94:16:c4:41:e1:f3:5c:
e5:51:88:e0:cf:ff:89:93:11:99:0d:ad:9e:b8:d3:
11:5f:3d:90:24:c7:eb:57:b5:4f:0a:c0:bd:d8:f9:
40:83:e4:b3:3d:53:79:a4:63:74:b8:50:c2:4d:2c:
9e:b2:ef:46:f3:fc:22:6e:1a:c9:29:5b:37:70:bd:
62:16:c3:41:7d:4b:72:7e:05:74:b2:a5:ef:85:48:
7f:43:9f:be:65:5b:03:ab:35:d8:f0:6b:dd:d0:f8:
3d:04:81:4a:b9:29:b7:65:5a:44:f4:1b:d6:fc:87:
b2:04:4a:81:68:e3:a9:64:23:ca:6e:75:6e:fc:85:
43:11:65:15:2a:88:3e:28:e5:31:64:23:eb:c0:b0:
33:92:af:28:46:94:02:d6:8f:53:db:9e:9d:72:c8:
4e:55:0a:e8:a5:99:95:3a:08:9f:0a:db:61:d2:a6:
d7:39:09:21:09:61:65:a4:13:c6:0f:d1:4a:de:4b:
13:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F4:1D:0C:C8:CC:9B:AE:B3:2A:97:D3:DF:3F:DB:D6:C8:F0:D0:F3
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/zPQdDMjMm66zKpfT3z_b1sjw0PM.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:46:2f:e6:6f:8b:11:1c:e5:c4:64:ba:2f:b4:b6:ab:1a:67:
a4:6c:99:c4:37:84:37:45:f2:5b:8d:65:02:d8:b2:1c:15:6a:
a8:8d:8f:76:ae:77:a8:92:17:91:32:04:e5:04:10:68:7a:92:
d6:51:59:0c:a9:1b:8b:92:fb:4e:71:71:01:c8:ff:5a:40:7a:
ab:fc:75:93:39:48:27:bd:5d:c4:ff:6f:5c:d2:d9:a8:55:5b:
4c:ba:7e:0d:d9:cb:3f:dd:13:ef:74:fc:0d:db:1f:8b:88:24:
50:7f:8b:7b:e1:38:5b:0d:ef:84:4b:b9:e3:32:b8:b2:79:06:
4c:19:f7:7f:52:89:89:18:25:89:72:61:eb:4e:07:f7:79:31:
49:92:ba:b1:46:a4:53:b2:21:07:19:ff:0e:5c:12:8b:7c:1e:
f0:2d:a9:f0:bb:02:ab:08:3c:7b:1f:f2:d2:f4:dd:7c:dc:fc:
ff:40:89:00:4e:a4:08:69:5e:f9:5a:06:45:26:6b:6b:44:a4:
a7:dd:36:15:94:9d:8b:a6:38:75:dc:79:dc:b6:be:ce:5a:61:
c7:6c:56:f9:41:85:b0:ac:6f:52:7b:a8:5c:e2:a9:e3:85:12:
1c:44:99:bc:2a:ad:5c:f8:23:d1:ca:58:27:aa:3b:8c:8f:b4:
08:c5:82:be
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICQ6MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAyMjMw
MDMwMDlaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKENDRjQxRDBDQzhDQzlC
QUVCMzJBOTdEM0RGM0ZEQkQ2QzhGMEQwRjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQhyNRDfoOHwlvsoOGXlrFShrw/LEDgf2FMrjICzjphG+a1CKO
KYu0hYLvWkGJJ/gUDbKxc8iO9E/y+SCl+wVyuSQQlBbEQeHzXOVRiODP/4mTEZkN
rZ640xFfPZAkx+tXtU8KwL3Y+UCD5LM9U3mkY3S4UMJNLJ6y70bz/CJuGskpWzdw
vWIWw0F9S3J+BXSype+FSH9Dn75lWwOrNdjwa93Q+D0EgUq5KbdlWkT0G9b8h7IE
SoFo46lkI8pudW78hUMRZRUqiD4o5TFkI+vAsDOSryhGlALWj1Pbnp1yyE5VCuil
mZU6CJ8K22HSptc5CSEJYWWkE8YP0UreSxODAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUzPQdDMjMm66zKpfT3z/b1sjw0PMwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS96UFFkRE1qTW02NnpLcGZUM3pfYjFzancwUE0ucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHA0wDQYJKoZIhvcNAQELBQADggEB
AE9GL+ZvixEc5cRkui+0tqsaZ6RsmcQ3hDdF8luNZQLYshwVaqiNj3aud6iSF5Ey
BOUEEGh6ktZRWQypG4uS+05xcQHI/1pAeqv8dZM5SCe9XcT/b1zS2ahVW0y6fg3Z
yz/dE+90/A3bH4uIJFB/i3vhOFsN74RLueMyuLJ5BkwZ939SiYkYJYlyYetOB/d5
MUmSurFGpFOyIQcZ/w5cEot8HvAtqfC7AqsIPHsf8tL03Xzc/P9AiQBOpAhpXvla
BkUma2tEpKfdNhWUnYumOHXcedy2vs5aYcdsVvlBhbCsb1J7qFziqeOFEhxEmbwq
rVz4I9HKWCeqO4yPtAjFgr4=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:53 2023 by rpki-client on console-ams.rpki-client.org