Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/-oD-qwpsAqqtPENBFvneUF6Yoc0.roa
File: -oD-qwpsAqqtPENBFvneUF6Yoc0.roa (raw, json)
Hash identifier: fSRYFFvF10wqdWW23oUYPKt4O8B8rn47cl/dMTF0lJc=
Subject key identifier: FA:80:FE:AB:0A:6C:02:AA:AD:3C:43:41:16:F9:DE:50:5E:98:A1:CD
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 437C
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/-oD-qwpsAqqtPENBFvneUF6Yoc0.roa
Signing time: Sun 20 Feb 2022 00:30:10 +0000
ROA not before: Sun 20 Feb 2022 00:30:10 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17276 (0x437c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 20 00:30:10 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=FA80FEAB0A6C02AAAD3C434116F9DE505E98A1CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d3:f3:a9:ff:07:0a:4f:c8:0e:f8:c9:a0:50:
c8:92:f5:6a:90:f5:d6:9d:15:54:53:7a:70:ea:92:
fd:b6:99:3d:0b:84:c7:41:cd:9d:42:13:0d:b4:1a:
ce:e9:a3:27:7b:5c:7f:56:54:d9:48:7a:19:73:e5:
d8:ab:ce:9f:9c:85:5c:d5:74:98:3c:71:24:b6:86:
ad:09:31:c8:a6:e7:91:4c:92:03:84:ff:04:a8:22:
18:49:91:49:83:34:c1:41:8d:70:87:9c:ec:3e:17:
d8:e1:c5:6a:ec:28:e9:e1:9e:8d:0f:de:6a:fe:ab:
51:23:71:83:2e:74:5a:14:a7:fe:df:8f:fd:2d:f1:
20:ab:ed:e7:9e:12:71:7a:97:6f:0e:cc:0f:70:b1:
03:cf:25:aa:e4:1b:9f:cd:6f:32:9d:86:01:be:da:
e9:7e:25:71:e1:99:fe:fa:ad:42:6d:c6:6b:c4:61:
e8:ca:8d:0c:c6:9d:49:fb:48:2b:38:5c:1b:95:aa:
8c:03:82:e1:89:a9:69:b5:3a:67:f1:2d:53:a1:71:
95:53:cc:e1:ab:0c:d8:dc:38:10:28:80:23:33:46:
e1:68:9e:13:3a:5c:20:3a:23:e9:52:c0:17:f1:96:
15:64:a7:e7:bb:f8:10:1c:c1:c8:3a:34:56:6d:5c:
79:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:80:FE:AB:0A:6C:02:AA:AD:3C:43:41:16:F9:DE:50:5E:98:A1:CD
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/-oD-qwpsAqqtPENBFvneUF6Yoc0.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:36:57:6d:03:d9:0f:08:7d:4e:82:54:0b:c5:2c:f1:19:3c:
92:0f:79:76:1f:ee:8a:37:02:f2:f0:ca:54:6a:22:da:84:dd:
7c:ab:b0:f9:f3:2f:53:e6:bb:f0:0a:4b:43:83:32:3b:87:46:
66:3a:80:ee:cd:8d:1d:52:11:2e:0b:5f:78:f2:ec:0e:93:20:
b1:91:39:36:80:e9:14:1f:79:d5:05:b2:c9:90:2b:75:98:ea:
52:e5:60:bb:5b:6e:1a:ea:5a:20:3d:bc:7d:3e:72:68:32:6f:
3d:31:24:b0:9b:63:fc:a1:e5:79:31:99:68:97:f0:e8:ae:5d:
ee:f3:de:00:84:2a:4c:98:2d:fb:db:4e:08:3f:23:9b:cc:0b:
8c:02:5b:94:dc:8d:25:74:77:1f:95:4a:07:5e:e2:e8:f0:97:
34:fe:9d:4e:2b:7a:4f:92:3f:af:24:cf:81:68:fa:ff:cb:46:
8a:c8:22:cf:f3:c0:92:7c:68:0e:7b:a4:a2:c5:92:b0:93:38:
2b:1e:37:07:f6:51:ec:2b:03:f4:7f:af:87:99:b2:89:f9:5c:
9e:80:0c:5e:64:cd:98:37:f6:30:d6:16:3e:70:26:e3:9c:b1:
7b:58:bd:45:89:60:ea:ac:aa:ea:7b:a2:75:65:81:83:38:11:
a8:d2:97:83
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICQ3wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAyMjAw
MDMwMTBaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKEZBODBGRUFCMEE2QzAy
QUFBRDNDNDM0MTE2RjlERTUwNUU5OEExQ0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDS0/Op/wcKT8gO+MmgUMiS9WqQ9dadFVRTenDqkv22mT0LhMdB
zZ1CEw20Gs7poyd7XH9WVNlIehlz5dirzp+chVzVdJg8cSS2hq0JMcim55FMkgOE
/wSoIhhJkUmDNMFBjXCHnOw+F9jhxWrsKOnhno0P3mr+q1EjcYMudFoUp/7fj/0t
8SCr7eeeEnF6l28OzA9wsQPPJarkG5/NbzKdhgG+2ul+JXHhmf76rUJtxmvEYejK
jQzGnUn7SCs4XBuVqowDguGJqWm1OmfxLVOhcZVTzOGrDNjcOBAogCMzRuFonhM6
XCA6I+lSwBfxlhVkp+e7+BAcwcg6NFZtXHkDAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU+oD+qwpsAqqtPENBFvneUF6Yoc0wHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS8tb0QtcXdwc0FxcXRQRU5CRnZuZVVGNllvYzAucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAswDQYJKoZIhvcNAQELBQADggEB
AKo2V20D2Q8IfU6CVAvFLPEZPJIPeXYf7oo3AvLwylRqItqE3XyrsPnzL1Pmu/AK
S0ODMjuHRmY6gO7NjR1SES4LX3jy7A6TILGROTaA6RQfedUFssmQK3WY6lLlYLtb
bhrqWiA9vH0+cmgybz0xJLCbY/yh5XkxmWiX8OiuXe7z3gCEKkyYLfvbTgg/I5vM
C4wCW5TcjSV0dx+VSgde4ujwlzT+nU4rek+SP68kz4Fo+v/LRorIIs/zwJJ8aA57
pKLFkrCTOCseNwf2UewrA/R/r4eZson5XJ6ADF5kzZg39jDWFj5wJuOcsXtYvUWJ
YOqsqup7onVlgYM4EajSl4M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:52 2024 by rpki-client on console-fra.rpki-client.org