Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/11XgsUxhoSan_BkZGFHuSC8Be6A.roa
File: 11XgsUxhoSan_BkZGFHuSC8Be6A.roa (raw, json)
Hash identifier: Mx7D4e9LRqIlluosFvM0NMHf5Sx+LcI/NmJIR3q1B/4=
Subject key identifier: D7:55:E0:B1:4C:61:A1:26:A7:FC:19:19:18:51:EE:48:2F:01:7B:A0
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4617
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/11XgsUxhoSan_BkZGFHuSC8Be6A.roa
Signing time: Sat 09 Apr 2022 00:30:12 +0000
ROA not before: Sat 09 Apr 2022 00:30:12 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17943 (0x4617)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 9 00:30:12 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=D755E0B14C61A126A7FC19191851EE482F017BA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:21:91:af:df:f8:b7:38:17:f2:fe:8b:43:c2:
35:10:95:99:fe:25:7f:ae:60:13:62:97:e9:a8:b4:
ac:c2:b0:e2:45:e5:82:57:00:8a:34:a8:c6:8b:df:
19:a1:66:e0:bd:f9:26:45:db:f2:2b:b2:92:8c:a2:
54:73:41:b4:cd:31:d4:61:f0:48:df:b0:40:03:cb:
03:29:e7:6a:e5:d7:16:3f:8a:f9:6c:0e:3d:aa:4c:
de:85:9d:f8:3e:c3:cc:82:88:21:dc:61:b9:b5:75:
46:c8:7a:41:68:8e:5a:f7:39:16:d0:39:d1:0c:8a:
32:61:d3:7f:1c:10:0c:03:6c:8a:9c:41:95:11:dc:
93:10:41:26:60:2b:9d:eb:8a:55:bd:c9:8a:f2:6e:
77:92:2b:0a:e0:01:5e:14:03:bf:a0:52:42:6e:ad:
18:d3:93:89:ca:10:ab:1b:88:2c:1d:b8:d5:23:e2:
2a:ea:5b:be:e0:58:55:cb:d3:b3:54:af:1b:56:f4:
c5:a5:7d:9b:43:9e:06:4d:ef:94:6b:74:a8:70:8f:
d8:50:c0:77:d3:e5:a0:fd:ad:36:53:fb:fc:86:cb:
88:9b:64:9f:1f:19:6f:f1:73:93:92:a6:8b:0b:90:
5c:9d:fe:22:1b:cd:87:0a:ff:7a:b7:ed:dd:2b:f9:
4a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:55:E0:B1:4C:61:A1:26:A7:FC:19:19:18:51:EE:48:2F:01:7B:A0
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/11XgsUxhoSan_BkZGFHuSC8Be6A.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:49:6b:63:ab:d2:80:99:85:b0:bb:a2:a7:d8:99:53:46:26:
c4:ff:6d:9d:a3:62:00:3a:e0:cc:0a:9c:70:94:70:c9:5e:56:
54:20:0c:a2:aa:d9:9e:c8:26:b1:a5:84:01:a2:a5:1e:52:83:
65:74:cd:89:79:62:4e:99:d0:54:84:be:33:09:5d:d3:f7:56:
a3:d1:8b:6b:b1:27:00:6f:84:21:1a:62:c5:5a:4c:40:bb:0c:
c4:c1:41:09:70:88:dc:4b:01:93:22:88:ff:a5:e0:90:cb:54:
77:2d:71:95:b8:a5:33:31:3c:a5:67:11:8c:59:cc:ca:f4:b0:
91:5e:2e:90:6b:05:12:e8:a7:ce:d3:cb:1b:4f:67:98:fe:fd:
0c:be:58:e5:c5:5a:54:c0:be:86:48:07:f0:9b:a3:59:c6:6d:
12:74:25:31:81:27:25:e0:6b:96:04:34:15:b9:38:e4:bc:cb:
24:16:52:0c:85:41:79:f0:06:13:3a:96:6f:56:db:e3:19:0e:
69:2e:a0:b5:96:b0:b7:bb:d9:4b:85:dc:c4:a6:5c:20:70:cb:
63:b2:82:37:31:83:82:b0:eb:83:ac:fd:ea:d1:b2:2d:b3:f4:
29:02:c1:cf:3e:c3:74:13:3d:b8:60:48:05:c1:0d:9c:02:25:
44:64:79:4d
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRhcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA0MDkw
MDMwMTJaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKEQ3NTVFMEIxNEM2MUEx
MjZBN0ZDMTkxOTE4NTFFRTQ4MkYwMTdCQTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEIZGv3/i3OBfy/otDwjUQlZn+JX+uYBNil+motKzCsOJF5YJX
AIo0qMaL3xmhZuC9+SZF2/IrspKMolRzQbTNMdRh8EjfsEADywMp52rl1xY/ivls
Dj2qTN6Fnfg+w8yCiCHcYbm1dUbIekFojlr3ORbQOdEMijJh038cEAwDbIqcQZUR
3JMQQSZgK53rilW9yYrybneSKwrgAV4UA7+gUkJurRjTk4nKEKsbiCwduNUj4irq
W77gWFXL07NUrxtW9MWlfZtDngZN75RrdKhwj9hQwHfT5aD9rTZT+/yGy4ibZJ8f
GW/xc5OSposLkFyd/iIbzYcK/3q37d0r+UqdAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU11XgsUxhoSan/BkZGFHuSC8Be6AwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS8xMVhnc1V4aG9TYW5fQmtaR0ZIdVNDOEJlNkEucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAswDQYJKoZIhvcNAQELBQADggEB
AExJa2Or0oCZhbC7oqfYmVNGJsT/bZ2jYgA64MwKnHCUcMleVlQgDKKq2Z7IJrGl
hAGipR5Sg2V0zYl5Yk6Z0FSEvjMJXdP3VqPRi2uxJwBvhCEaYsVaTEC7DMTBQQlw
iNxLAZMiiP+l4JDLVHctcZW4pTMxPKVnEYxZzMr0sJFeLpBrBRLop87TyxtPZ5j+
/Qy+WOXFWlTAvoZIB/Cbo1nGbRJ0JTGBJyXga5YENBW5OOS8yyQWUgyFQXnwBhM6
lm9W2+MZDmkuoLWWsLe72UuF3MSmXCBwy2Oygjcxg4Kw64Os/erRsi2z9CkCwc8+
w3QTPbhgSAXBDZwCJURkeU0=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org