Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/E1UjUX1N0PkAxDcLA3hsSUUJMIo.roa
File: E1UjUX1N0PkAxDcLA3hsSUUJMIo.roa (raw, json)
Hash identifier: jeOFZNQ5MX2VGg+k9FdtnQStrdwmGyM68YmK1kW+7iY=
Subject key identifier: 13:55:23:51:7D:4D:D0:F9:00:C4:37:0B:03:78:6C:49:45:09:30:8A
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4271
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/E1UjUX1N0PkAxDcLA3hsSUUJMIo.roa
Signing time: Tue 01 Feb 2022 00:30:07 +0000
ROA not before: Tue 01 Feb 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17009 (0x4271)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 1 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=135523517D4DD0F900C4370B03786C494509308A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c2:e7:7b:20:21:fe:c3:c2:7e:d8:26:8b:21:
4f:b9:74:a0:f7:fc:2b:38:18:7d:50:a4:17:b7:c6:
b0:d3:34:e4:c6:e6:f0:61:03:d0:21:dd:bb:43:a7:
62:54:6d:3a:f2:a7:f2:59:17:cf:a5:7c:08:5b:20:
f3:03:c3:8a:38:03:b1:e4:90:b9:f8:42:ec:87:bb:
0d:52:04:b7:fe:d2:8f:9e:1e:03:ea:50:63:75:53:
b3:6f:8c:c4:98:66:4b:83:b0:e2:7d:7c:c1:65:90:
6a:f8:f4:5a:95:80:68:b3:4e:c0:13:2f:1a:bf:d9:
38:59:e5:89:fe:be:3a:ad:5d:a7:1c:6c:57:a3:63:
84:8a:ea:5f:14:e0:5b:00:70:5b:52:70:c1:32:13:
a4:e4:25:81:d0:69:8d:7d:f0:b6:2d:a9:b5:77:5d:
4f:f3:9e:70:a2:6a:56:ac:be:62:c7:21:87:ef:af:
bf:5f:d5:9c:86:f1:3a:6e:48:0e:c0:34:42:68:ef:
b2:97:7f:d3:3c:ea:e5:9f:18:ae:7b:4a:e5:62:79:
0d:e0:89:11:97:0b:b3:ed:7c:0f:0d:74:7c:f8:af:
7e:fd:63:87:21:53:16:e3:cc:26:e1:b0:f0:17:77:
66:bd:74:26:c3:7e:f2:c7:08:64:f8:94:05:2e:1f:
52:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:55:23:51:7D:4D:D0:F9:00:C4:37:0B:03:78:6C:49:45:09:30:8A
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/E1UjUX1N0PkAxDcLA3hsSUUJMIo.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:57:6a:6a:3c:31:f8:22:10:46:04:45:0d:98:9f:03:18:32:
38:32:56:4a:bd:58:73:0b:ee:88:f1:ab:ba:63:c4:7a:cd:b2:
06:99:e7:e0:37:0e:8b:db:00:be:56:c2:6b:85:43:b9:97:a2:
f8:b3:1e:ec:35:36:10:22:c6:bd:81:d7:aa:4e:3f:14:05:32:
ec:73:fe:b1:23:a5:75:09:8c:b6:3f:5e:4a:eb:86:24:91:ac:
5e:1b:d4:d9:51:ac:8f:44:05:a4:8b:73:3c:d9:00:9f:56:a4:
a4:05:23:6a:98:29:63:41:0d:85:47:a9:5a:61:46:54:76:f7:
f8:89:d7:25:3f:f3:f1:34:ee:29:7e:e7:69:8a:af:80:6f:eb:
9d:bd:49:61:4d:11:c7:67:43:a2:3b:bc:09:cf:9f:24:6b:d1:
a9:90:62:d9:f9:bd:e5:5d:1b:e7:01:2e:f1:1a:cb:0f:ff:4e:
45:31:c1:56:4b:f4:40:02:ed:19:ec:b4:f2:44:2a:11:06:74:
89:9c:ef:aa:99:d0:f3:b0:40:ad:09:db:e9:1a:1a:63:93:fa:
88:06:64:0a:3f:97:e9:81:06:eb:6f:d5:c2:a7:9c:63:b3:97:
8d:fd:04:1a:44:4a:09:07:de:40:67:a4:de:30:a2:0f:7f:cd:
15:d5:d8:02
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICQnEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAyMDEw
MDMwMDdaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKDEzNTUyMzUxN0Q0REQw
RjkwMEM0MzcwQjAzNzg2QzQ5NDUwOTMwOEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBwud7ICH+w8J+2CaLIU+5dKD3/Cs4GH1QpBe3xrDTNOTG5vBh
A9Ah3btDp2JUbTryp/JZF8+lfAhbIPMDw4o4A7HkkLn4QuyHuw1SBLf+0o+eHgPq
UGN1U7NvjMSYZkuDsOJ9fMFlkGr49FqVgGizTsATLxq/2ThZ5Yn+vjqtXaccbFej
Y4SK6l8U4FsAcFtScMEyE6TkJYHQaY198LYtqbV3XU/znnCialasvmLHIYfvr79f
1ZyG8TpuSA7ANEJo77KXf9M86uWfGK57SuVieQ3giRGXC7PtfA8NdHz4r379Y4ch
UxbjzCbhsPAXd2a9dCbDfvLHCGT4lAUuH1LpAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUE1UjUX1N0PkAxDcLA3hsSUUJMIowHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9FMVVqVVgxTjBQa0F4RGNMQTNoc1NVVUpNSW8ucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAMwDQYJKoZIhvcNAQELBQADggEB
AH9Xamo8MfgiEEYERQ2YnwMYMjgyVkq9WHML7ojxq7pjxHrNsgaZ5+A3DovbAL5W
wmuFQ7mXovizHuw1NhAixr2B16pOPxQFMuxz/rEjpXUJjLY/XkrrhiSRrF4b1NlR
rI9EBaSLczzZAJ9WpKQFI2qYKWNBDYVHqVphRlR29/iJ1yU/8/E07il+52mKr4Bv
6529SWFNEcdnQ6I7vAnPnyRr0amQYtn5veVdG+cBLvEayw//TkUxwVZL9EAC7Rns
tPJEKhEGdImc76qZ0POwQK0J2+kaGmOT+ogGZAo/l+mBButv1cKnnGOzl439BBpE
SgkH3kBnpN4wog9/zRXV2AI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org