Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/Dtoz3z9b5bSAkAKZkNPu9l_DoZI.roa
File: Dtoz3z9b5bSAkAKZkNPu9l_DoZI.roa (raw, json)
Hash identifier: GvhH5HLtuIcZK4V9NQawJvuoUlUSW8c/eWf8NFcT6Yk=
Subject key identifier: 0E:DA:33:DF:3F:5B:E5:B4:80:90:02:99:90:D3:EE:F6:5F:C3:A1:92
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 45CF
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Dtoz3z9b5bSAkAKZkNPu9l_DoZI.roa
Signing time: Mon 04 Apr 2022 00:30:09 +0000
ROA not before: Mon 04 Apr 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17871 (0x45cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 4 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=0EDA33DF3F5BE5B48090029990D3EEF65FC3A192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:32:40:eb:a6:4c:3e:be:84:4e:16:a0:b3:c0:
58:0a:2e:cb:f9:3a:66:d8:f6:5d:8c:a6:7b:76:10:
5e:5a:bd:25:13:96:23:e9:83:3e:48:c0:81:09:68:
90:06:e1:dd:f1:b2:95:c9:fb:9e:9a:a1:f1:d5:a8:
b8:84:05:f0:62:4b:c0:14:24:15:07:1d:81:ff:5d:
c5:21:b7:d6:ae:48:07:c8:f6:b6:8e:d8:a3:97:41:
24:d2:d4:58:a0:ac:31:c3:67:e0:a2:ba:37:96:76:
1c:61:8b:92:24:87:6c:d1:4f:2e:7b:d8:db:cc:3d:
36:b0:7d:3e:20:be:8e:6d:96:93:05:55:fe:23:62:
e0:cb:64:07:d1:53:96:d9:49:c2:d1:e6:4a:46:25:
62:58:49:3d:f6:43:51:45:5c:aa:f7:8a:ce:d6:28:
bb:70:43:c7:11:c7:0f:48:c0:4c:1a:cb:4f:af:65:
3d:41:62:3b:6c:53:8e:09:d3:3d:3a:cb:15:66:d8:
eb:09:a3:1b:ee:81:57:88:30:ba:0f:41:b1:b3:f4:
b6:99:67:07:d2:0d:73:5d:b7:a6:c5:82:4f:c5:86:
4c:4a:23:db:18:e4:85:36:6e:7e:3b:ff:23:83:15:
52:78:92:fe:32:5c:b6:bb:3f:38:77:9b:3c:8f:fb:
a4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DA:33:DF:3F:5B:E5:B4:80:90:02:99:90:D3:EE:F6:5F:C3:A1:92
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Dtoz3z9b5bSAkAKZkNPu9l_DoZI.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:ed:02:0c:94:a9:63:38:3c:d4:d1:e4:e5:8f:2e:5f:fd:b1:
c6:77:38:60:3b:cf:22:0a:b5:19:32:b2:d8:0e:0e:47:11:8c:
bf:56:c4:21:b7:b8:d0:7f:8d:b4:f3:b6:7f:3e:a8:17:43:a0:
90:e4:4f:9c:de:4a:a4:da:79:2a:3c:9b:24:96:e8:e6:5e:69:
a6:5d:d8:b1:fa:4f:e5:2e:86:a9:77:31:e9:12:63:fb:e5:b9:
49:75:0e:ca:0c:94:90:60:10:1d:d0:e7:2a:59:51:4a:4c:16:
67:00:c7:18:4b:25:77:cd:4a:22:60:29:09:9b:a5:99:84:e9:
d4:39:e6:cb:43:f3:29:35:5e:f7:15:64:41:64:64:25:c0:ad:
87:e6:0a:dc:1f:9f:27:5a:ed:d3:47:fe:bd:cd:ac:e6:8b:55:
52:a8:ba:48:71:06:74:ca:8e:99:a1:79:de:7a:f0:f2:79:c3:
8c:4c:40:60:ee:54:ac:a9:48:a6:89:d5:27:aa:7d:2d:46:2f:
01:f4:76:cc:60:3c:08:b2:5d:85:ef:61:e6:33:9f:40:39:0f:
23:6c:e7:83:cb:ec:af:e5:04:a3:15:a7:5e:8d:07:ed:d2:d9:
3a:80:0c:7b:c2:fe:b2:93:cd:5a:f3:18:30:b1:42:68:b4:e2:
65:4c:69:fb
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRc8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA0MDQw
MDMwMDlaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDBFREEzM0RGM0Y1QkU1
QjQ4MDkwMDI5OTkwRDNFRUY2NUZDM0ExOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOMkDrpkw+voROFqCzwFgKLsv5OmbY9l2Mpnt2EF5avSUTliPp
gz5IwIEJaJAG4d3xspXJ+56aofHVqLiEBfBiS8AUJBUHHYH/XcUht9auSAfI9raO
2KOXQSTS1FigrDHDZ+CiujeWdhxhi5Ikh2zRTy572NvMPTawfT4gvo5tlpMFVf4j
YuDLZAfRU5bZScLR5kpGJWJYST32Q1FFXKr3is7WKLtwQ8cRxw9IwEway0+vZT1B
YjtsU44J0z06yxVm2OsJoxvugVeIMLoPQbGz9LaZZwfSDXNdt6bFgk/FhkxKI9sY
5IU2bn47/yODFVJ4kv4yXLa7Pzh3mzyP+6SfAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUDtoz3z9b5bSAkAKZkNPu9l/DoZIwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9EdG96M3o5YjViU0FrQUtaa05QdTlsX0RvWkkucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAMwDQYJKoZIhvcNAQELBQADggEB
AMDtAgyUqWM4PNTR5OWPLl/9scZ3OGA7zyIKtRkystgODkcRjL9WxCG3uNB/jbTz
tn8+qBdDoJDkT5zeSqTaeSo8mySW6OZeaaZd2LH6T+Uuhql3MekSY/vluUl1DsoM
lJBgEB3Q5ypZUUpMFmcAxxhLJXfNSiJgKQmbpZmE6dQ55stD8yk1XvcVZEFkZCXA
rYfmCtwfnyda7dNH/r3NrOaLVVKoukhxBnTKjpmhed568PJ5w4xMQGDuVKypSKaJ
1SeqfS1GLwH0dsxgPAiyXYXvYeYzn0A5DyNs54PL7K/lBKMVp16NB+3S2TqADHvC
/rKTzVrzGDCxQmi04mVMafs=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org