Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/zjg_HpvhkB7SAQDNKTnm-XWQTHU.roa
File: zjg_HpvhkB7SAQDNKTnm-XWQTHU.roa (raw, json)
Hash identifier: 803ARp1iMQK9JcbaGDiVBiQGXb58CKo5yhH8KX/6F8k=
Subject key identifier: CE:38:3F:1E:9B:E1:90:1E:D2:01:00:CD:29:39:E6:F9:75:90:4C:75
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 437A
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/zjg_HpvhkB7SAQDNKTnm-XWQTHU.roa
Signing time: Sun 20 Feb 2022 00:30:09 +0000
ROA not before: Sun 20 Feb 2022 00:30:09 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17274 (0x437a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 20 00:30:09 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=CE383F1E9BE1901ED20100CD2939E6F975904C75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:48:15:4a:11:74:fb:2b:3b:d4:0c:83:b1:4d:
3e:3f:da:06:b2:27:4f:46:4e:1d:29:37:c4:56:8a:
49:3d:3b:89:f1:24:1d:53:51:88:93:c8:bd:cc:09:
b3:15:24:ba:ac:c4:16:7e:30:76:b7:30:e3:0a:04:
d4:84:83:29:55:eb:af:30:b4:97:9a:b4:55:da:f5:
f9:2d:2e:b2:ee:72:dd:b8:e4:b5:01:df:c9:af:13:
45:1c:3e:41:9a:ec:a7:60:93:f4:ae:81:37:68:20:
5c:cc:70:bc:98:11:e9:b5:5d:bc:fc:ec:e1:27:57:
e5:aa:38:12:9d:59:a7:ff:3a:47:b8:91:f7:e8:65:
a5:35:6a:33:30:c1:8e:b2:50:4c:2a:4a:3c:0d:0b:
78:0d:5b:80:2a:c0:de:d6:79:8a:ef:27:66:8d:fc:
f9:ef:6b:3b:f6:6b:bc:43:79:4c:e9:cb:ef:da:6f:
04:64:fc:8f:66:0e:be:65:40:ce:89:65:8a:0c:f8:
b6:f2:e2:7e:1a:3f:97:ab:56:0d:31:90:a1:c6:a0:
a4:82:55:ae:ee:a8:d9:fc:0f:a4:9e:a9:66:b0:2d:
45:39:ac:55:8f:3b:59:e4:7a:c9:1d:01:66:ff:6a:
ac:f4:b3:7f:8e:db:50:9d:55:27:c0:a9:51:9b:16:
2f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:38:3F:1E:9B:E1:90:1E:D2:01:00:CD:29:39:E6:F9:75:90:4C:75
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/zjg_HpvhkB7SAQDNKTnm-XWQTHU.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:5a:a2:dd:7f:12:67:38:fa:18:f5:d9:c7:cf:a4:91:47:e2:
1b:a9:7b:f1:e8:f4:b5:2d:57:b0:a4:61:db:19:c3:57:ca:10:
89:67:71:f7:08:fe:aa:e2:e0:5b:2b:7b:be:2d:50:de:04:45:
db:3d:22:c3:7e:a8:5a:4a:51:e5:d3:5d:68:af:6b:2f:d5:d3:
41:ac:bb:02:f8:8a:9d:fd:80:b0:2e:03:87:72:f0:bd:72:11:
ea:80:9b:c8:df:b1:7d:69:00:fd:7f:7b:4e:40:07:9b:e9:f9:
b0:dd:a8:88:db:9c:cd:a9:28:ab:81:eb:52:90:30:eb:83:9a:
6e:ab:1c:8a:cb:be:26:db:2b:ac:9f:0a:9c:e2:3e:c6:3e:cd:
6f:1e:d8:08:48:a5:6f:b7:1b:8f:94:1e:88:91:0b:7a:99:6a:
07:2f:82:d4:31:f7:5e:24:1b:89:49:ef:29:02:1c:53:8f:61:
9e:4b:d9:36:03:3a:1f:12:00:52:0c:ef:0c:31:c3:7e:cf:f3:
92:2d:40:8c:8a:6c:b0:0b:ed:49:0c:7a:06:23:4d:a8:3a:77:
96:da:85:1d:e1:10:c8:52:da:6f:a2:43:81:05:f9:2f:73:c1:
57:23:63:2f:56:fe:b9:5c:96:e2:bd:d2:4b:9b:c0:3e:f7:35:
6b:2d:ae:e0
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICQ3owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAyMjAw
MDMwMDlaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKENFMzgzRjFFOUJFMTkw
MUVEMjAxMDBDRDI5MzlFNkY5NzU5MDRDNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCfSBVKEXT7KzvUDIOxTT4/2gayJ09GTh0pN8RWikk9O4nxJB1T
UYiTyL3MCbMVJLqsxBZ+MHa3MOMKBNSEgylV668wtJeatFXa9fktLrLuct245LUB
38mvE0UcPkGa7Kdgk/SugTdoIFzMcLyYEem1Xbz87OEnV+WqOBKdWaf/Oke4kffo
ZaU1ajMwwY6yUEwqSjwNC3gNW4AqwN7WeYrvJ2aN/Pnvazv2a7xDeUzpy+/abwRk
/I9mDr5lQM6JZYoM+Lby4n4aP5erVg0xkKHGoKSCVa7uqNn8D6SeqWawLUU5rFWP
O1nkeskdAWb/aqz0s3+O21CdVSfAqVGbFi/PAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUzjg/HpvhkB7SAQDNKTnm+XWQTHUwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS96amdfSHB2aGtCN1NBUUROS1RubS1YV1FUSFUucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAMwDQYJKoZIhvcNAQELBQADggEB
AC9aot1/Emc4+hj12cfPpJFH4hupe/Ho9LUtV7CkYdsZw1fKEIlncfcI/qri4Fsr
e74tUN4ERds9IsN+qFpKUeXTXWivay/V00GsuwL4ip39gLAuA4dy8L1yEeqAm8jf
sX1pAP1/e05AB5vp+bDdqIjbnM2pKKuB61KQMOuDmm6rHIrLvibbK6yfCpziPsY+
zW8e2AhIpW+3G4+UHoiRC3qZagcvgtQx914kG4lJ7ykCHFOPYZ5L2TYDOh8SAFIM
7wwxw37P85ItQIyKbLAL7UkMegYjTag6d5bahR3hEMhS2m+iQ4EF+S9zwVcjYy9W
/rlcluK90kubwD73NWstruA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:53 2023 by rpki-client on console-ams.rpki-client.org