Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/0IShCYAP_0EHUQfHuwHTVM5Uk2c.roa
File: 0IShCYAP_0EHUQfHuwHTVM5Uk2c.roa (raw, json)
Hash identifier: DvmRBqcn4P9P1wbLk7ApFnPkqHs8G66ZvAM9OM0OVHs=
Subject key identifier: D0:84:A1:09:80:0F:FF:41:07:51:07:C7:BB:01:D3:54:CE:54:93:67
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 462F
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/0IShCYAP_0EHUQfHuwHTVM5Uk2c.roa
Signing time: Mon 11 Apr 2022 00:30:07 +0000
ROA not before: Mon 11 Apr 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17967 (0x462f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 11 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=D084A109800FFF41075107C7BB01D354CE549367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:aa:91:9c:af:b8:04:5c:fd:4f:74:8b:ae:0e:
9c:d6:18:04:9e:77:12:12:11:5d:91:47:bd:3f:d5:
ac:2e:d4:62:20:a9:e3:84:0e:19:a6:21:68:87:45:
4d:12:c4:15:8c:41:4c:24:42:9e:0d:04:03:df:74:
e1:72:a6:49:54:80:ce:38:cb:fb:be:fe:4b:12:c7:
a9:58:9b:e2:31:a6:a7:f7:9b:05:7f:10:fc:cd:ea:
c2:34:c2:25:90:67:8c:ab:27:7e:fd:76:cf:dc:7c:
90:22:a1:97:2a:49:1c:de:ab:f4:49:29:f4:6e:34:
b6:cf:61:24:c2:4a:4e:35:61:8f:49:1e:3e:b2:c4:
c2:da:0c:45:ce:2c:f8:3a:91:c9:5c:b2:ff:ae:cb:
2f:87:3d:44:4e:bc:ec:49:33:0f:26:bc:3f:c4:85:
74:91:21:48:b8:2f:aa:58:99:f4:57:d9:44:38:69:
1b:30:3b:f4:71:9f:53:9d:43:7c:11:70:a6:ed:d5:
e0:16:df:82:2f:38:2f:b0:b6:f5:9b:dd:53:80:2c:
e6:cf:8b:35:13:9b:44:9b:6f:2d:21:51:2f:a0:6e:
cf:3d:0f:14:15:97:de:04:d9:61:ec:3e:c6:c8:7a:
89:9c:71:15:f2:4b:1d:9e:77:b3:aa:db:cb:f3:fd:
a0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:84:A1:09:80:0F:FF:41:07:51:07:C7:BB:01:D3:54:CE:54:93:67
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/0IShCYAP_0EHUQfHuwHTVM5Uk2c.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
01:81:27:4a:80:bb:e7:f2:0b:77:7e:6a:ac:94:c8:f8:a2:0f:
9b:92:d9:98:8b:a2:a6:eb:96:a0:4d:aa:a3:ef:a1:d7:5a:64:
7c:a3:61:1d:49:cc:3b:03:85:71:56:6e:2c:48:a3:97:f6:50:
99:e2:39:6a:43:f6:a6:cc:fb:af:b8:09:bc:9e:fb:13:bd:f7:
49:49:13:52:7e:05:35:cb:94:b2:4a:67:c2:e1:e9:0e:46:8b:
3d:9b:86:f9:c0:48:7f:6e:9c:00:c6:76:a6:3f:0d:b9:d8:4d:
22:fc:bc:18:11:ab:8e:13:cf:fe:87:84:99:a0:ab:81:ae:9a:
84:8f:73:b9:15:0c:25:62:9f:2e:01:58:23:c8:80:b1:d1:80:
89:90:6d:5d:20:1f:1c:08:1b:53:40:95:d1:2f:f1:ed:b1:05:
de:aa:5b:87:f4:9c:56:90:59:0a:c1:53:60:75:f7:64:f1:f0:
3e:30:a6:cc:35:60:f4:1e:5a:3f:c5:a8:9a:23:84:2a:1f:19:
c7:12:55:44:ae:db:ed:da:f8:f0:cd:d1:a7:57:36:66:09:24:
46:87:b8:57:8a:fc:9c:a3:40:bf:27:f2:27:09:ab:2e:ea:ab:
e8:34:b7:1b:0a:f0:b9:10:5b:39:19:90:ae:e6:5a:94:b6:08:
05:6a:e6:1a
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRi8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA0MTEw
MDMwMDdaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKEQwODRBMTA5ODAwRkZG
NDEwNzUxMDdDN0JCMDFEMzU0Q0U1NDkzNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCkqpGcr7gEXP1PdIuuDpzWGASedxISEV2RR70/1awu1GIgqeOE
DhmmIWiHRU0SxBWMQUwkQp4NBAPfdOFypklUgM44y/u+/ksSx6lYm+Ixpqf3mwV/
EPzN6sI0wiWQZ4yrJ379ds/cfJAioZcqSRzeq/RJKfRuNLbPYSTCSk41YY9JHj6y
xMLaDEXOLPg6kclcsv+uyy+HPUROvOxJMw8mvD/EhXSRIUi4L6pYmfRX2UQ4aRsw
O/Rxn1OdQ3wRcKbt1eAW34IvOC+wtvWb3VOALObPizUTm0Sbby0hUS+gbs89DxQV
l94E2WHsPsbIeomccRXySx2ed7Oq28vz/aBHAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU0IShCYAP/0EHUQfHuwHTVM5Uk2cwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS8wSVNoQ1lBUF8wRUhVUWZIdXdIVFZNNVVrMmMucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAkwDQYJKoZIhvcNAQELBQADggEB
AAGBJ0qAu+fyC3d+aqyUyPiiD5uS2ZiLoqbrlqBNqqPvoddaZHyjYR1JzDsDhXFW
bixIo5f2UJniOWpD9qbM+6+4Cbye+xO990lJE1J+BTXLlLJKZ8Lh6Q5Giz2bhvnA
SH9unADGdqY/DbnYTSL8vBgRq44Tz/6HhJmgq4GumoSPc7kVDCViny4BWCPIgLHR
gImQbV0gHxwIG1NAldEv8e2xBd6qW4f0nFaQWQrBU2B192Tx8D4wpsw1YPQeWj/F
qJojhCofGccSVUSu2+3a+PDN0adXNmYJJEaHuFeK/JyjQL8n8icJqy7qq+g0txsK
8LkQWzkZkK7mWpS2CAVq5ho=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org