Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/CGmAOSlR77AR7gf96AF7DRjn5OA.roa
File: CGmAOSlR77AR7gf96AF7DRjn5OA.roa (raw, json)
Hash identifier: 0jaetMxVug3Lthr/7Vl3AB/wQMyg5f1ETLIMO7wdbHA=
Subject key identifier: 08:69:80:39:29:51:EF:B0:11:EE:07:FD:E8:01:7B:0D:18:E7:E4:E0
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 47DF
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/CGmAOSlR77AR7gf96AF7DRjn5OA.roa
Signing time: Thu 12 May 2022 00:30:07 +0000
ROA not before: Thu 12 May 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18399 (0x47df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 12 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=086980392951EFB011EE07FDE8017B0D18E7E4E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:44:d6:86:1d:5a:48:80:4e:f0:2e:e5:4c:04:
88:8c:a4:f8:10:54:63:dd:24:6a:21:52:32:5f:20:
0f:4b:b6:a1:72:44:d4:01:c0:28:77:e6:6a:be:14:
ac:a7:d7:8a:c5:f3:f4:03:af:86:d7:98:76:37:d2:
14:31:74:9a:2e:f3:cb:de:72:a8:61:65:84:13:e9:
b4:b8:90:fa:ad:94:b0:0c:3f:38:d5:c2:fb:5b:80:
91:93:61:3a:c2:4e:31:a0:a3:37:2f:18:f4:14:e1:
f2:b6:1c:2b:10:94:71:7e:6b:f8:26:59:c5:81:eb:
fa:19:64:7d:97:ea:3c:56:8e:61:15:bb:44:43:e1:
8c:a4:6f:97:32:b1:b2:93:a1:96:7a:c7:a5:5b:88:
f3:77:75:5c:e9:36:cc:2a:57:52:ac:48:72:30:97:
a6:ce:03:35:2d:eb:99:4c:83:ec:7f:1a:fc:06:4e:
f9:33:3b:ad:62:1c:a5:c0:23:8a:d5:f2:c5:5e:95:
ea:32:3d:f8:14:a0:2d:b2:9d:0d:a4:f9:cb:5b:79:
ab:84:ff:6e:c7:91:85:73:f6:88:1a:b7:6e:d2:e0:
ba:9f:6f:f5:3e:91:f9:6d:d6:df:6a:76:32:7e:94:
6e:fc:3c:47:73:ce:74:9a:ae:ce:62:e9:d2:53:5c:
a5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:69:80:39:29:51:EF:B0:11:EE:07:FD:E8:01:7B:0D:18:E7:E4:E0
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/CGmAOSlR77AR7gf96AF7DRjn5OA.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:13:37:1c:46:1b:96:2a:d2:91:98:62:a8:f3:ba:1d:dc:75:
bf:45:d9:99:09:3a:ed:a4:e4:f9:6a:cb:c8:45:02:d5:7a:55:
93:a9:93:7a:c0:63:ad:c6:62:63:fb:1d:cc:48:f0:44:ea:26:
0f:09:de:e3:71:7e:19:72:20:a2:74:a7:67:c6:91:80:a7:18:
0a:84:5b:03:5f:94:98:44:bf:66:29:01:ad:c9:62:e4:3f:9d:
27:77:af:dc:7d:27:ec:c7:15:d7:ed:8f:29:72:4a:dd:2b:86:
25:bc:0f:bf:87:01:c6:45:74:1b:93:f5:9b:89:03:a4:b5:4c:
34:ce:f4:58:06:1b:4f:2e:42:ac:e8:54:89:db:4b:dc:8b:36:
b0:e0:dd:3a:55:eb:aa:10:d4:df:2c:5c:8c:92:cd:0d:50:ca:
cf:94:a3:ed:28:47:85:23:47:c6:c7:ec:34:b2:ca:de:22:45:
dd:0e:df:89:cf:04:9b:a3:6f:fb:74:73:41:cd:bb:ee:cb:72:
60:72:0d:7b:d6:d6:ee:1c:06:a5:92:b6:d8:5f:86:ef:c9:44:
4e:16:fe:d7:5c:76:67:95:6c:3e:d2:5a:d2:34:00:8a:a5:7f:
b8:6d:e1:29:e7:d0:f8:7d:e5:e5:f0:5a:85:03:c0:0e:a2:d7:
bc:aa:72:3b
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICR98wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA1MTIw
MDMwMDdaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDA4Njk4MDM5Mjk1MUVG
QjAxMUVFMDdGREU4MDE3QjBEMThFN0U0RTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRRNaGHVpIgE7wLuVMBIiMpPgQVGPdJGohUjJfIA9LtqFyRNQB
wCh35mq+FKyn14rF8/QDr4bXmHY30hQxdJou88vecqhhZYQT6bS4kPqtlLAMPzjV
wvtbgJGTYTrCTjGgozcvGPQU4fK2HCsQlHF+a/gmWcWB6/oZZH2X6jxWjmEVu0RD
4Yykb5cysbKToZZ6x6VbiPN3dVzpNswqV1KsSHIwl6bOAzUt65lMg+x/GvwGTvkz
O61iHKXAI4rV8sVeleoyPfgUoC2ynQ2k+ctbeauE/27HkYVz9ogat27S4Lqfb/U+
kflt1t9qdjJ+lG78PEdzznSars5i6dJTXKVjAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUCGmAOSlR77AR7gf96AF7DRjn5OAwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9DR21BT1NsUjc3QVI3Z2Y5NkFGN0RSam41T0Eucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHA8wDQYJKoZIhvcNAQELBQADggEB
AH4TNxxGG5Yq0pGYYqjzuh3cdb9F2ZkJOu2k5Plqy8hFAtV6VZOpk3rAY63GYmP7
HcxI8ETqJg8J3uNxfhlyIKJ0p2fGkYCnGAqEWwNflJhEv2YpAa3JYuQ/nSd3r9x9
J+zHFdftjylySt0rhiW8D7+HAcZFdBuT9ZuJA6S1TDTO9FgGG08uQqzoVInbS9yL
NrDg3TpV66oQ1N8sXIySzQ1Qys+Uo+0oR4UjR8bH7DSyyt4iRd0O34nPBJujb/t0
c0HNu+7LcmByDXvW1u4cBqWStthfhu/JRE4W/tdcdmeVbD7SWtI0AIqlf7ht4Snn
0Ph95eXwWoUDwA6i17yqcjs=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org