Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/J_98m2KQAe7NFXW99uFvaw7e8U4.roa
File: J_98m2KQAe7NFXW99uFvaw7e8U4.roa (raw, json)
Hash identifier: qUpRI7iIIAlAU+72NXD5rWr4h/Vu7pI3YPBFQmmmVsA=
Subject key identifier: 27:FF:7C:9B:62:90:01:EE:CD:15:75:BD:F6:E1:6F:6B:0E:DE:F1:4E
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 461F
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/J_98m2KQAe7NFXW99uFvaw7e8U4.roa
Signing time: Sun 10 Apr 2022 00:30:09 +0000
ROA not before: Sun 10 Apr 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17951 (0x461f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 10 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=27FF7C9B629001EECD1575BDF6E16F6B0EDEF14E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e2:08:fb:84:88:eb:a7:4f:8f:1c:11:d4:d6:
f6:ee:67:36:3b:1f:64:2d:74:d3:2d:c7:10:ce:70:
75:b1:d9:a5:cd:5b:6f:a8:99:74:14:a5:b3:49:f2:
79:35:47:8b:7c:34:e4:7a:e1:00:12:23:2e:69:59:
d6:35:42:5c:e0:9f:6f:36:82:9f:02:23:82:c0:4e:
d1:de:53:c1:e4:41:78:1e:f3:68:47:3a:af:30:bd:
56:8c:4d:1b:3b:2b:80:31:dc:23:f8:c1:fb:97:c7:
80:64:7f:77:e5:ab:7b:09:e6:c0:10:00:fd:64:8b:
23:22:f5:d0:97:2d:6d:ad:d0:ba:10:90:92:41:b3:
9a:e8:97:a5:e3:d2:3e:22:32:68:a2:83:fc:b4:c6:
0e:0e:0c:76:a6:da:fa:0a:c6:cf:33:14:db:41:f2:
9d:29:59:16:a3:32:73:bd:32:81:d1:8a:c9:19:ca:
42:9c:2d:5d:f1:be:77:fd:f1:f2:98:2b:eb:1b:8a:
6a:62:87:20:d1:9b:3f:70:2f:42:f8:69:4a:5c:34:
64:3a:75:c4:ca:3f:c0:26:03:e6:3b:b4:f6:b7:89:
a6:78:b7:08:ed:0f:45:17:c0:4e:c7:e3:5b:58:d6:
c0:b9:ce:bd:5c:c9:e5:41:0d:e3:c4:c4:96:01:a6:
ca:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FF:7C:9B:62:90:01:EE:CD:15:75:BD:F6:E1:6F:6B:0E:DE:F1:4E
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/J_98m2KQAe7NFXW99uFvaw7e8U4.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:85:e7:9e:86:b1:be:0b:4a:f5:6f:43:90:ba:b4:ce:79:a6:
89:a6:fa:ce:ba:87:74:07:b3:0d:5c:fd:f0:7a:db:67:e8:b7:
57:6c:32:0c:fd:1d:56:66:0d:cf:a4:e0:19:30:65:8e:72:77:
2f:a1:52:4b:7a:49:e7:f5:fc:ee:7e:e8:0a:89:4f:03:48:3f:
9b:4a:37:92:6c:81:72:72:f9:91:d6:49:f1:bb:46:8e:d3:d2:
44:1c:ce:05:e7:8f:06:03:2c:36:5f:74:f3:3f:c4:87:db:4c:
e2:2c:3c:4b:04:b6:41:64:62:38:b7:cd:bd:d5:da:c7:72:fc:
10:e7:52:eb:e8:68:e2:6d:9a:a7:ca:9f:b4:de:19:6e:98:91:
6b:13:21:8c:62:9d:cb:19:47:d0:11:55:6d:6a:a3:74:a6:98:
36:0f:3c:09:5d:33:04:35:5d:38:65:65:16:65:b5:f0:0f:e1:
11:80:92:16:af:89:1a:01:45:6f:3f:cb:fc:9c:a0:53:04:74:
d5:38:50:c5:d5:cb:a6:94:d3:5a:df:7c:32:8a:75:a9:45:0a:
f8:e9:49:43:d6:f0:d8:30:ea:75:7a:fc:62:fc:d0:ab:2a:3b:
60:40:46:0c:44:3b:a3:20:77:49:af:07:55:27:0e:a8:d6:b8:
e1:a2:8d:9e
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRh8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA0MTAw
MDMwMDlaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDI3RkY3QzlCNjI5MDAx
RUVDRDE1NzVCREY2RTE2RjZCMEVERUYxNEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDT4gj7hIjrp0+PHBHU1vbuZzY7H2QtdNMtxxDOcHWx2aXNW2+o
mXQUpbNJ8nk1R4t8NOR64QASIy5pWdY1Qlzgn282gp8CI4LATtHeU8HkQXge82hH
Oq8wvVaMTRs7K4Ax3CP4wfuXx4Bkf3flq3sJ5sAQAP1kiyMi9dCXLW2t0LoQkJJB
s5rol6Xj0j4iMmiig/y0xg4ODHam2voKxs8zFNtB8p0pWRajMnO9MoHRiskZykKc
LV3xvnf98fKYK+sbimpihyDRmz9wL0L4aUpcNGQ6dcTKP8AmA+Y7tPa3iaZ4twjt
D0UXwE7H41tY1sC5zr1cyeVBDePExJYBpsqfAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUJ/98m2KQAe7NFXW99uFvaw7e8U4wHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9KXzk4bTJLUUFlN05GWFc5OXVGdmF3N2U4VTQucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHA8wDQYJKoZIhvcNAQELBQADggEB
AHyF556Gsb4LSvVvQ5C6tM55pomm+s66h3QHsw1c/fB622fot1dsMgz9HVZmDc+k
4BkwZY5ydy+hUkt6Sef1/O5+6AqJTwNIP5tKN5JsgXJy+ZHWSfG7Ro7T0kQczgXn
jwYDLDZfdPM/xIfbTOIsPEsEtkFkYji3zb3V2sdy/BDnUuvoaOJtmqfKn7TeGW6Y
kWsTIYxincsZR9ARVW1qo3SmmDYPPAldMwQ1XThlZRZltfAP4RGAkhaviRoBRW8/
y/ycoFMEdNU4UMXVy6aU01rffDKKdalFCvjpSUPW8Ngw6nV6/GL80KsqO2BARgxE
O6Mgd0mvB1UnDqjWuOGijZ4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org