Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/HK2kvKxLXV-SlHYs4iqdk5vrmZU.roa
File: HK2kvKxLXV-SlHYs4iqdk5vrmZU.roa (raw, json)
Hash identifier: FAbSwQPusCaexmEB97iUnBCstS8olV1P+i2dLjmi7NI=
Subject key identifier: 1C:AD:A4:BC:AC:4B:5D:5F:92:94:76:2C:E2:2A:9D:93:9B:EB:99:95
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 49B2
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/HK2kvKxLXV-SlHYs4iqdk5vrmZU.roa
Signing time: Sat 11 Jun 2022 00:30:08 +0000
ROA not before: Sat 11 Jun 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18866 (0x49b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 11 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=1CADA4BCAC4B5D5F9294762CE22A9D939BEB9995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:80:cc:22:89:f5:be:43:13:06:36:38:76:91:
fb:cc:68:b4:b9:29:c9:14:cf:01:1f:53:73:10:0d:
fa:6a:e7:ce:43:d2:4a:fb:cd:57:b9:36:f0:15:83:
7d:33:ba:da:4c:fd:5c:25:ff:46:b0:91:e4:e5:80:
1f:95:04:2e:cb:d8:c7:39:b4:91:b0:6c:cc:31:41:
45:8b:0d:8f:51:06:14:0d:a5:27:a3:4e:00:68:3d:
e7:fb:f3:77:fc:be:17:39:06:08:34:37:57:5a:8a:
d2:d9:52:bc:5e:5c:03:fb:bf:ff:90:bc:3a:01:9e:
11:3a:b7:90:62:3b:cd:63:88:6b:cd:60:de:2d:aa:
b7:88:f6:75:74:65:ff:4a:4d:1d:f5:00:c6:46:30:
c0:38:b4:9e:60:99:ab:66:be:0c:63:5e:ae:54:97:
b0:68:4c:6b:f3:e0:77:49:39:f9:a9:25:20:61:d7:
45:27:47:66:b6:9d:6f:b1:f1:08:95:e0:db:2a:29:
47:7a:5f:09:48:c6:a0:c3:f9:d5:2e:7d:eb:eb:aa:
03:ec:2d:43:bb:03:65:2f:80:9a:2e:6c:32:54:aa:
bc:42:d7:82:4a:dd:98:51:5e:14:e4:5d:3a:83:12:
11:05:8f:0d:71:2d:ae:ea:ec:ad:52:a1:a2:a2:59:
cf:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AD:A4:BC:AC:4B:5D:5F:92:94:76:2C:E2:2A:9D:93:9B:EB:99:95
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/HK2kvKxLXV-SlHYs4iqdk5vrmZU.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:14:32:61:5c:be:d7:ed:1e:c9:7d:24:cf:75:ac:be:84:f7:
b1:50:84:40:10:4d:b2:39:6c:21:9b:24:7c:9e:bf:cc:79:e7:
b8:02:49:2c:38:97:cb:eb:51:d1:0c:4d:2a:32:1f:f3:8f:43:
13:b5:55:8c:7b:fd:42:e6:bf:f1:25:7c:ec:e3:31:3d:c9:89:
47:b6:29:70:61:1c:34:76:b1:62:f8:60:c1:1c:c1:1e:79:0c:
1d:30:22:bf:c3:68:b2:94:b2:d7:03:04:24:22:c8:96:9f:e0:
4b:38:39:26:59:81:72:58:5c:d0:7a:64:73:72:3e:a0:cf:e1:
a2:a8:71:db:da:c8:43:fa:65:97:c1:6c:27:8b:42:ba:6b:5a:
d3:4a:13:8c:c7:92:af:93:66:d3:a0:7f:7e:94:fd:89:67:0f:
70:8a:e2:d8:57:b3:30:26:fe:9d:fd:b7:f0:9f:2d:13:14:1b:
d5:57:5a:01:13:46:2b:8c:cc:dd:81:e8:75:8f:46:b7:dd:64:
66:46:1d:e5:45:37:dd:45:99:1e:8e:96:ea:61:33:a7:88:1b:
07:21:ea:ab:2d:0a:c5:27:c8:e9:3e:c0:5c:da:9d:91:2b:79:
8c:7d:dc:04:88:6e:c2:b2:c7:8b:7e:59:25:16:27:4e:2d:f4:
dd:18:39:53
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICSbIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA2MTEw
MDMwMDhaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDFDQURBNEJDQUM0QjVE
NUY5Mjk0NzYyQ0UyMkE5RDkzOUJFQjk5OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCogMwiifW+QxMGNjh2kfvMaLS5KckUzwEfU3MQDfpq585D0kr7
zVe5NvAVg30zutpM/Vwl/0awkeTlgB+VBC7L2Mc5tJGwbMwxQUWLDY9RBhQNpSej
TgBoPef783f8vhc5Bgg0N1daitLZUrxeXAP7v/+QvDoBnhE6t5BiO81jiGvNYN4t
qreI9nV0Zf9KTR31AMZGMMA4tJ5gmatmvgxjXq5Ul7BoTGvz4HdJOfmpJSBh10Un
R2a2nW+x8QiV4NsqKUd6XwlIxqDD+dUufevrqgPsLUO7A2UvgJoubDJUqrxC14JK
3ZhRXhTkXTqDEhEFjw1xLa7q7K1SoaKiWc/VAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUHK2kvKxLXV+SlHYs4iqdk5vrmZUwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9ISzJrdkt4TFhWLVNsSFlzNGlxZGs1dnJtWlUucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAkwDQYJKoZIhvcNAQELBQADggEB
AFoUMmFcvtftHsl9JM91rL6E97FQhEAQTbI5bCGbJHyev8x557gCSSw4l8vrUdEM
TSoyH/OPQxO1VYx7/ULmv/ElfOzjMT3JiUe2KXBhHDR2sWL4YMEcwR55DB0wIr/D
aLKUstcDBCQiyJaf4Es4OSZZgXJYXNB6ZHNyPqDP4aKocdvayEP6ZZfBbCeLQrpr
WtNKE4zHkq+TZtOgf36U/YlnD3CK4thXszAm/p39t/CfLRMUG9VXWgETRiuMzN2B
6HWPRrfdZGZGHeVFN91FmR6OluphM6eIGwch6qstCsUnyOk+wFzanZEreYx93ASI
bsKyx4t+WSUWJ04t9N0YOVM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org