Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/C9SGC9tnBkYUYOOfjTZqcPnKcYY.roa
File: C9SGC9tnBkYUYOOfjTZqcPnKcYY.roa (raw, json)
Hash identifier: n+7zB9c74t8G8fM3nOB2YN+GgvwBWUfDhYO/+fi7qLE=
Subject key identifier: 0B:D4:86:0B:DB:67:06:46:14:60:E3:9F:8D:36:6A:70:F9:CA:71:86
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 42DC
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/C9SGC9tnBkYUYOOfjTZqcPnKcYY.roa
Signing time: Wed 09 Feb 2022 00:30:05 +0000
ROA not before: Wed 09 Feb 2022 00:30:05 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17116 (0x42dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 9 00:30:05 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=0BD4860BDB6706461460E39F8D366A70F9CA7186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b0:c7:b2:17:da:21:37:ed:90:86:de:35:15:
e3:8b:82:2d:47:6d:54:dc:64:4a:e1:cd:a3:d7:7f:
c5:42:e6:0c:44:ba:e9:67:4a:74:41:04:7d:7d:da:
37:6e:62:fd:3c:25:8d:f6:37:51:22:3a:9e:38:c8:
51:58:26:06:8b:88:b2:cb:50:79:29:df:5f:53:c1:
44:63:4f:c7:47:ca:2b:62:bb:4a:3f:0b:1d:fc:f9:
e8:69:59:69:c0:61:fb:82:8b:6c:9a:a9:7e:b4:d0:
5e:01:ed:0a:41:dd:ca:f5:47:30:c2:ff:be:6c:57:
f2:a7:e2:3f:b9:a9:a1:05:37:af:02:b3:dd:35:0a:
5a:b8:1f:d1:b9:a0:ea:27:19:9f:8c:1d:e7:8c:e6:
68:f2:93:7b:20:d0:3e:e3:64:f1:bc:79:81:51:5d:
dc:68:e6:51:22:e6:55:e1:59:e2:d3:b3:22:7a:76:
ff:7f:30:f7:2a:ef:e6:32:37:00:14:a3:b2:a2:2f:
40:f8:b0:27:fe:09:ce:fa:f9:c2:a3:de:64:ab:10:
7b:13:18:af:aa:5d:fe:09:a1:fc:89:ba:0a:a3:9a:
75:00:70:f3:95:95:7f:c5:72:6e:1c:bc:3d:ce:83:
ee:9c:ff:35:27:fc:c0:65:1f:cd:be:f3:fd:d0:0b:
4c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D4:86:0B:DB:67:06:46:14:60:E3:9F:8D:36:6A:70:F9:CA:71:86
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/C9SGC9tnBkYUYOOfjTZqcPnKcYY.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:b1:33:a6:8e:09:af:45:a3:87:6f:0a:9d:53:c8:b8:9b:aa:
27:9f:ec:07:4d:37:ab:6e:ec:25:06:ea:56:e2:2f:f3:6b:94:
fe:3a:11:97:3a:88:42:f5:42:75:d8:ec:ec:e0:3c:dd:45:0f:
6c:9b:97:c8:2c:04:68:57:23:72:20:cd:df:46:5f:ee:87:37:
cc:5c:f3:2e:8e:a4:7d:b8:8a:02:03:7d:eb:38:6c:be:2d:d7:
cb:41:b0:55:d9:3a:88:9f:3e:dc:6c:90:ae:a4:e9:f5:ce:17:
1e:b8:52:4f:2d:89:77:e4:13:74:67:30:42:9c:d7:40:74:55:
36:79:70:d9:e0:1a:69:be:76:59:2a:38:e3:a1:b9:73:0d:21:
6a:20:47:9f:13:ba:9a:30:92:54:24:54:dc:eb:d3:ca:ea:b3:
02:0d:aa:2c:22:50:43:52:e0:c8:8d:cd:05:1c:75:2d:b1:d3:
86:1f:34:6e:a7:d5:b2:58:02:b8:3e:72:32:7a:f0:da:02:2a:
56:5d:ca:72:f8:38:39:dd:d9:00:38:d5:65:63:9d:d4:5e:dd:
8f:97:46:dc:6f:09:39:43:66:aa:bd:7b:4e:81:f8:8c:35:33:
48:66:a0:9d:52:0f:da:b8:41:11:16:c5:84:49:48:f6:58:da:
d5:03:68:4d
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICQtwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAyMDkw
MDMwMDVaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKDBCRDQ4NjBCREI2NzA2
NDYxNDYwRTM5RjhEMzY2QTcwRjlDQTcxODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCysMeyF9ohN+2Qht41FeOLgi1HbVTcZErhzaPXf8VC5gxEuuln
SnRBBH192jduYv08JY32N1EiOp44yFFYJgaLiLLLUHkp319TwURjT8dHyitiu0o/
Cx38+ehpWWnAYfuCi2yaqX600F4B7QpB3cr1RzDC/75sV/Kn4j+5qaEFN68Cs901
Clq4H9G5oOonGZ+MHeeM5mjyk3sg0D7jZPG8eYFRXdxo5lEi5lXhWeLTsyJ6dv9/
MPcq7+YyNwAUo7KiL0D4sCf+Cc76+cKj3mSrEHsTGK+qXf4JofyJugqjmnUAcPOV
lX/Fcm4cvD3Og+6c/zUn/MBlH82+8/3QC0ytAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUC9SGC9tnBkYUYOOfjTZqcPnKcYYwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9DOVNHQzl0bkJrWVVZT09malRacWNQbktjWVkucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAUwDQYJKoZIhvcNAQELBQADggEB
AFyxM6aOCa9Fo4dvCp1TyLibqief7AdNN6tu7CUG6lbiL/NrlP46EZc6iEL1QnXY
7OzgPN1FD2ybl8gsBGhXI3Igzd9GX+6HN8xc8y6OpH24igIDfes4bL4t18tBsFXZ
OoifPtxskK6k6fXOFx64Uk8tiXfkE3RnMEKc10B0VTZ5cNngGmm+dlkqOOOhuXMN
IWogR58TupowklQkVNzr08rqswINqiwiUENS4MiNzQUcdS2x04YfNG6n1bJYArg+
cjJ68NoCKlZdynL4ODnd2QA41WVjndRe3Y+XRtxvCTlDZqq9e06B+Iw1M0hmoJ1S
D9q4QREWxYRJSPZY2tUDaE0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org