Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/GLy_C_ItZmFmQkzgNC_pa_kPYbg.roa
File: GLy_C_ItZmFmQkzgNC_pa_kPYbg.roa (raw, json)
Hash identifier: EY0fPFZddpHr51kt3LjxPnaFe9DJmzGmpov7oQ2EU+o=
Subject key identifier: 18:BC:BF:0B:F2:2D:66:61:66:42:4C:E0:34:2F:E9:6B:F9:0F:61:B8
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 49BE
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/GLy_C_ItZmFmQkzgNC_pa_kPYbg.roa
Signing time: Sun 12 Jun 2022 00:30:06 +0000
ROA not before: Sun 12 Jun 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18878 (0x49be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 12 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=18BCBF0BF22D666166424CE0342FE96BF90F61B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:94:f4:11:89:cf:9f:77:82:71:30:0a:a3:32:
51:7e:f6:23:79:8a:8f:75:a4:56:5a:3c:22:f6:8e:
0b:bb:53:11:eb:1d:45:6a:05:7f:07:33:b6:e4:ed:
a9:72:8f:a4:85:76:79:64:bc:a0:fc:c9:01:a7:1f:
94:bb:db:b7:6f:6c:c6:1d:31:51:13:de:cc:55:89:
d9:ef:d0:31:16:4c:b7:90:a8:56:d4:47:b2:06:25:
fa:ae:9a:e3:f2:1a:5d:dc:41:d4:d3:4f:7f:e1:57:
85:d2:8f:13:f8:a4:8e:a5:2f:fe:fd:4a:90:47:b3:
27:00:f2:42:a0:96:68:c2:15:46:96:25:6b:04:33:
7c:fb:7c:b5:d6:3f:bb:9a:b7:43:79:d2:f4:df:26:
c7:63:97:4f:f5:da:97:f8:e1:0f:b0:7e:5c:db:d0:
89:c2:67:47:ad:6f:9a:1d:4d:ee:b1:47:86:a7:8f:
da:60:82:c1:60:54:1f:26:ae:64:48:ff:b0:e2:36:
eb:a6:81:a0:6f:c8:a1:e0:05:89:a7:a6:eb:13:f6:
82:f0:f6:01:06:9f:9d:2f:8a:d8:27:61:ef:74:13:
0f:d8:20:22:06:dd:73:10:29:50:53:29:82:51:00:
f7:9b:a4:31:32:76:db:4a:76:87:19:f6:68:2a:d3:
1b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BC:BF:0B:F2:2D:66:61:66:42:4C:E0:34:2F:E9:6B:F9:0F:61:B8
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/GLy_C_ItZmFmQkzgNC_pa_kPYbg.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
55:10:81:63:3c:3e:46:da:14:0d:13:ba:fc:f7:5f:8f:17:86:
12:57:89:2e:ae:31:26:39:ed:3b:38:f3:8c:45:25:33:d8:53:
12:97:2c:36:b9:16:af:01:5d:cd:d4:b9:df:56:23:3a:21:21:
93:c2:6b:f9:f1:a7:2c:75:0a:c9:d5:19:95:70:f4:5e:af:02:
8d:ae:6c:cd:43:ad:8d:03:30:c8:ef:80:cc:85:d5:cb:c4:51:
70:d9:f8:ae:8a:57:da:fb:8c:fa:b5:c0:2d:2d:35:01:bd:82:
0b:bb:50:2b:86:31:df:6b:f3:de:f5:bd:90:f8:50:0f:ba:42:
be:f4:32:17:66:d2:c3:01:03:7f:1a:b9:1c:69:d4:ea:d4:37:
f0:d4:db:32:84:2a:69:39:9e:af:dc:9d:48:6e:e2:ca:b6:d6:
b5:83:09:01:35:37:48:2c:53:c7:cf:70:c2:67:bf:3e:59:da:
03:4a:63:b4:67:f5:00:d8:dc:c8:46:52:48:6f:55:11:92:04:
57:c4:c1:46:e8:d9:f1:1e:ae:85:44:da:48:f0:40:57:75:d3:
8a:57:2c:74:d2:8a:29:cb:2e:09:5c:bb:eb:18:37:55:02:d6:
9b:ca:18:3e:09:df:5d:f2:d3:de:eb:1f:47:7f:f9:20:5d:6b:
5b:f5:2d:02
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICSb4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA2MTIw
MDMwMDZaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDE4QkNCRjBCRjIyRDY2
NjE2NjQyNENFMDM0MkZFOTZCRjkwRjYxQjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCslPQRic+fd4JxMAqjMlF+9iN5io91pFZaPCL2jgu7UxHrHUVq
BX8HM7bk7alyj6SFdnlkvKD8yQGnH5S727dvbMYdMVET3sxVidnv0DEWTLeQqFbU
R7IGJfqumuPyGl3cQdTTT3/hV4XSjxP4pI6lL/79SpBHsycA8kKglmjCFUaWJWsE
M3z7fLXWP7uat0N50vTfJsdjl0/12pf44Q+wflzb0InCZ0etb5odTe6xR4anj9pg
gsFgVB8mrmRI/7DiNuumgaBvyKHgBYmnpusT9oLw9gEGn50vitgnYe90Ew/YICIG
3XMQKVBTKYJRAPebpDEydttKdocZ9mgq0xtLAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUGLy/C/ItZmFmQkzgNC/pa/kPYbgwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9HTHlfQ19JdFptRm1Ra3pnTkNfcGFfa1BZYmcucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHA8wDQYJKoZIhvcNAQELBQADggEB
AFUQgWM8PkbaFA0Tuvz3X48XhhJXiS6uMSY57Ts484xFJTPYUxKXLDa5Fq8BXc3U
ud9WIzohIZPCa/nxpyx1CsnVGZVw9F6vAo2ubM1DrY0DMMjvgMyF1cvEUXDZ+K6K
V9r7jPq1wC0tNQG9ggu7UCuGMd9r8971vZD4UA+6Qr70Mhdm0sMBA38auRxp1OrU
N/DU2zKEKmk5nq/cnUhu4sq21rWDCQE1N0gsU8fPcMJnvz5Z2gNKY7Rn9QDY3MhG
UkhvVRGSBFfEwUbo2fEeroVE2kjwQFd104pXLHTSiinLLglcu+sYN1UC1pvKGD4J
313y097rH0d/+SBda1v1LQI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org