Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/7k8hNh5QK1VvsBoNj9VJu-ksCNQ.roa
File: 7k8hNh5QK1VvsBoNj9VJu-ksCNQ.roa (raw, json)
Hash identifier: AtIb8D4xfAx8ODAdCdhWzc8JzVvJZfPTdzjd5wcWCt8=
Subject key identifier: EE:4F:21:36:1E:50:2B:55:6F:B0:1A:0D:8F:D5:49:BB:E9:2C:08:D4
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 455E
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/7k8hNh5QK1VvsBoNj9VJu-ksCNQ.roa
Signing time: Sun 27 Mar 2022 00:30:08 +0000
ROA not before: Sun 27 Mar 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17758 (0x455e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 27 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=EE4F21361E502B556FB01A0D8FD549BBE92C08D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c6:82:15:81:41:bc:50:29:99:77:b8:20:e5:
1e:d2:ae:53:e4:c7:d8:10:96:d0:48:76:b7:17:28:
6e:2c:e4:e1:d2:fe:a4:af:09:02:2f:dd:52:1d:a6:
0e:99:63:ee:2c:1b:dc:83:a5:80:0c:33:b8:dd:e5:
fc:a7:30:6c:bc:76:70:f5:ec:bd:52:2a:89:93:3a:
c8:9c:1d:0a:c2:10:7b:2c:f6:9b:4e:c9:1d:f1:c9:
ab:7b:3d:c9:7b:47:04:05:b1:7c:92:a6:97:29:a1:
43:ea:0e:8a:50:85:2d:bb:74:a2:2b:45:81:bd:c5:
10:ea:6c:b2:a1:5e:55:1a:35:97:13:4b:f4:12:e2:
1e:fc:87:44:8c:f3:2c:96:7c:25:fd:46:a2:df:d0:
72:f7:9a:32:f0:9a:62:fd:6a:33:f1:5f:93:f5:0f:
23:bc:13:de:98:75:e8:2a:e2:3c:b0:f2:ec:d3:22:
0e:a2:d5:08:84:c0:6e:ce:d9:50:a0:40:2b:6c:6b:
87:45:48:8a:5f:b1:de:e8:d5:94:af:7e:6a:98:9d:
50:d1:49:cf:27:d3:34:95:93:02:a1:38:6d:1b:6c:
95:22:98:a9:22:6f:1f:8f:32:10:38:ae:9e:f0:96:
20:4c:9e:26:4d:d0:4b:76:1d:09:17:6b:4e:18:78:
95:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4F:21:36:1E:50:2B:55:6F:B0:1A:0D:8F:D5:49:BB:E9:2C:08:D4
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/7k8hNh5QK1VvsBoNj9VJu-ksCNQ.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:1c:63:4b:00:e8:2b:15:a0:95:dd:a8:7b:e0:0e:67:3b:9c:
5d:6d:ae:ed:e7:63:df:64:19:3b:58:6c:b8:40:50:48:1a:47:
1f:f5:07:57:a2:30:34:97:8b:2b:79:95:4d:ea:ca:bc:41:15:
fc:af:19:5c:58:f8:17:5d:ff:2d:43:7e:fd:a2:ea:61:53:a0:
94:bf:d0:f8:2b:70:2c:51:30:bd:3f:ba:cd:48:23:5a:67:a7:
5e:e2:82:0e:22:5a:8e:a4:77:be:63:d7:0a:a3:d9:0e:fc:7b:
9b:c4:7b:7a:9a:d0:9e:c0:ae:36:f6:96:8a:96:b6:61:ae:c0:
f1:f2:cb:b8:b3:a4:ed:ab:4f:51:cc:29:32:46:13:99:cd:41:
70:58:26:51:37:5f:13:15:6b:00:f8:84:74:24:83:3e:a5:9c:
50:6f:0d:dc:a0:57:e2:20:8f:86:21:1b:2e:00:5a:0c:19:7f:
af:43:70:28:a4:e4:fc:0f:13:94:42:74:88:e9:5d:91:fc:b4:
10:7f:a2:f7:f1:c7:4f:86:9a:71:12:0f:fb:e8:6e:c9:40:ba:
95:9d:98:e7:47:01:a8:8c:06:bf:7b:6d:1c:84:f8:88:10:bb:
08:9c:09:20:fc:c3:87:56:d0:75:08:ef:16:04:fe:a7:6b:cd:
a7:ff:e8:b6
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRV4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAzMjcw
MDMwMDhaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKEVFNEYyMTM2MUU1MDJC
NTU2RkIwMUEwRDhGRDU0OUJCRTkyQzA4RDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDqxoIVgUG8UCmZd7gg5R7SrlPkx9gQltBIdrcXKG4s5OHS/qSv
CQIv3VIdpg6ZY+4sG9yDpYAMM7jd5fynMGy8dnD17L1SKomTOsicHQrCEHss9ptO
yR3xyat7Pcl7RwQFsXySppcpoUPqDopQhS27dKIrRYG9xRDqbLKhXlUaNZcTS/QS
4h78h0SM8yyWfCX9RqLf0HL3mjLwmmL9ajPxX5P1DyO8E96Ydegq4jyw8uzTIg6i
1QiEwG7O2VCgQCtsa4dFSIpfsd7o1ZSvfmqYnVDRSc8n0zSVkwKhOG0bbJUimKki
bx+PMhA4rp7wliBMniZN0Et2HQkXa04YeJWBAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU7k8hNh5QK1VvsBoNj9VJu+ksCNQwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS83azhoTmg1UUsxVnZzQm9OajlWSnUta3NDTlEucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAMwDQYJKoZIhvcNAQELBQADggEB
ALUcY0sA6CsVoJXdqHvgDmc7nF1tru3nY99kGTtYbLhAUEgaRx/1B1eiMDSXiyt5
lU3qyrxBFfyvGVxY+Bdd/y1Dfv2i6mFToJS/0PgrcCxRML0/us1II1pnp17igg4i
Wo6kd75j1wqj2Q78e5vEe3qa0J7Arjb2loqWtmGuwPHyy7izpO2rT1HMKTJGE5nN
QXBYJlE3XxMVawD4hHQkgz6lnFBvDdygV+Igj4YhGy4AWgwZf69DcCik5PwPE5RC
dIjpXZH8tBB/ovfxx0+GmnESD/vobslAupWdmOdHAaiMBr97bRyE+IgQuwicCSD8
w4dW0HUI7xYE/qdrzaf/6LY=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org