Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/223ykbDlTHSRIiOqCiOLZxVagJg.roa
File: 223ykbDlTHSRIiOqCiOLZxVagJg.roa (raw, json)
Hash identifier: CxQ7JI2HhmLX9h/CpvHzn35JEywmFNc0AMheDI1dOWs=
Subject key identifier: DB:6D:F2:91:B0:E5:4C:74:91:22:23:AA:0A:23:8B:67:15:5A:80:98
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 49A5
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/223ykbDlTHSRIiOqCiOLZxVagJg.roa
Signing time: Fri 10 Jun 2022 00:30:07 +0000
ROA not before: Fri 10 Jun 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18853 (0x49a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 10 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=DB6DF291B0E54C74912223AA0A238B67155A8098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:47:e2:a1:4f:e3:7e:a3:3f:be:8a:06:94:c8:
e1:50:90:d2:ec:af:30:d9:fc:22:04:d4:ac:12:a9:
5b:21:c5:6c:a7:c7:4f:00:f5:e3:1c:16:99:6b:ed:
e1:16:c2:6f:af:50:5c:59:b1:0e:9f:71:2f:c3:75:
46:75:fb:8f:62:ff:fc:22:f7:93:1e:94:0f:c0:e6:
cb:cb:48:31:29:2d:a6:9f:c2:ae:a7:f0:d2:05:ad:
94:11:91:92:fd:93:f6:77:14:5e:d4:e2:42:d6:4e:
5e:7b:36:47:84:9d:d1:c8:77:bd:4e:0b:44:4a:71:
4f:92:d8:80:77:c2:20:e8:37:9c:2e:99:a8:6e:72:
22:4d:d5:b7:55:14:b7:48:39:62:34:28:d3:b9:e3:
18:82:c6:61:c1:d5:f6:ea:fb:83:73:d4:f6:af:b0:
65:c3:d1:40:11:35:50:57:89:34:eb:27:10:b4:3b:
6a:11:48:43:22:2b:8b:3c:7d:83:42:d4:94:04:de:
c4:b6:4e:fb:36:07:a0:6e:62:b7:3f:33:8d:b6:05:
de:5d:95:21:f5:1e:49:a7:04:be:08:8a:45:c7:90:
94:59:1a:7c:3a:34:46:3b:bb:02:9f:72:42:d9:1e:
d0:d2:71:bc:fa:4b:2f:86:a2:a1:71:3f:1b:47:88:
f3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6D:F2:91:B0:E5:4C:74:91:22:23:AA:0A:23:8B:67:15:5A:80:98
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/223ykbDlTHSRIiOqCiOLZxVagJg.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:16:c4:d2:d0:0b:d2:c3:a0:e7:b5:3b:9c:aa:be:a3:6f:1f:
d0:bc:43:a4:26:c1:dd:3a:28:58:b2:4f:6b:40:27:22:de:a6:
b9:6a:50:ce:81:7e:0c:dc:83:55:24:02:40:b3:97:d3:10:2b:
f1:66:a0:34:44:72:fa:c6:87:96:a6:55:09:fa:0a:f9:c7:4b:
c5:82:55:e4:73:f3:d3:ab:40:9b:ea:ae:69:64:61:e8:e6:c0:
dc:e0:b7:e8:8e:53:17:df:14:f7:6d:bf:b2:e2:76:31:99:93:
da:4b:1f:d7:ab:12:64:56:3f:c7:b8:f2:ce:c7:0d:6b:ce:22:
06:43:fb:63:e4:63:61:b5:34:fe:a0:a6:da:fa:8c:08:4d:4a:
62:de:97:16:81:36:43:70:c6:c3:da:c0:ed:72:d7:1b:55:84:
09:35:d5:75:85:7d:68:1f:49:62:6c:26:1f:ea:55:20:68:d4:
5f:9c:44:67:e7:ab:06:64:6c:4d:7f:de:dc:70:44:07:fd:0c:
ee:b4:f5:6e:02:39:7b:30:12:fb:19:3e:62:84:d4:ab:ef:d8:
fd:35:70:97:3c:cd:f4:0b:56:1e:2c:8c:00:2d:b8:53:7d:13:
74:c5:e0:5d:34:bb:47:82:a1:4f:2a:8c:a5:8f:4d:2c:d7:f3:
83:46:c4:36
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICSaUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA2MTAw
MDMwMDdaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKERCNkRGMjkxQjBFNTRD
NzQ5MTIyMjNBQTBBMjM4QjY3MTU1QTgwOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDxR+KhT+N+oz++igaUyOFQkNLsrzDZ/CIE1KwSqVshxWynx08A
9eMcFplr7eEWwm+vUFxZsQ6fcS/DdUZ1+49i//wi95MelA/A5svLSDEpLaafwq6n
8NIFrZQRkZL9k/Z3FF7U4kLWTl57NkeEndHId71OC0RKcU+S2IB3wiDoN5wumahu
ciJN1bdVFLdIOWI0KNO54xiCxmHB1fbq+4Nz1PavsGXD0UARNVBXiTTrJxC0O2oR
SEMiK4s8fYNC1JQE3sS2Tvs2B6BuYrc/M422Bd5dlSH1HkmnBL4IikXHkJRZGnw6
NEY7uwKfckLZHtDScbz6Sy+GoqFxPxtHiPMxAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU223ykbDlTHSRIiOqCiOLZxVagJgwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS8yMjN5a2JEbFRIU1JJaU9xQ2lPTFp4VmFnSmcucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHA0wDQYJKoZIhvcNAQELBQADggEB
ADsWxNLQC9LDoOe1O5yqvqNvH9C8Q6Qmwd06KFiyT2tAJyLeprlqUM6Bfgzcg1Uk
AkCzl9MQK/FmoDREcvrGh5amVQn6CvnHS8WCVeRz89OrQJvqrmlkYejmwNzgt+iO
UxffFPdtv7LidjGZk9pLH9erEmRWP8e48s7HDWvOIgZD+2PkY2G1NP6gptr6jAhN
SmLelxaBNkNwxsPawO1y1xtVhAk11XWFfWgfSWJsJh/qVSBo1F+cRGfnqwZkbE1/
3txwRAf9DO609W4COXswEvsZPmKE1Kvv2P01cJc8zfQLVh4sjAAtuFN9E3TF4F00
u0eCoU8qjKWPTSzX84NGxDY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:52 2024 by rpki-client on console-fra.rpki-client.org