Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/KB15CsZojdLB_LLjTUSvEaVlHOw.roa
File: KB15CsZojdLB_LLjTUSvEaVlHOw.roa (raw, json)
Hash identifier: Smd6wG14PsFABjZiwrjF+QprtZPy92eNJRv8NrXVh1Y=
Subject key identifier: 28:1D:79:0A:C6:68:8D:D2:C1:FC:B2:E3:4D:44:AF:11:A5:65:1C:EC
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4322
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/KB15CsZojdLB_LLjTUSvEaVlHOw.roa
Signing time: Mon 14 Feb 2022 00:30:05 +0000
ROA not before: Mon 14 Feb 2022 00:30:05 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17186 (0x4322)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 14 00:30:05 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=281D790AC6688DD2C1FCB2E34D44AF11A5651CEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a5:c3:fb:48:a6:89:b8:a6:54:f9:50:06:f8:
77:97:3e:7f:d1:76:61:08:b8:fa:d7:17:99:31:87:
b1:9a:91:b5:45:2a:3c:61:68:f3:3d:3a:93:73:6d:
a8:cc:7e:37:d5:68:ff:bc:d0:5f:8d:53:01:4d:b1:
c4:6c:88:fd:bf:d0:67:ba:5d:a4:ba:a9:a5:45:c7:
30:dd:eb:c4:13:13:33:58:20:d7:c0:75:d1:ac:b4:
1c:60:88:a7:b6:b0:65:32:a2:79:c4:36:e5:12:ed:
0f:72:54:08:07:fe:4a:a0:9e:5f:b0:28:4c:da:84:
3b:42:80:10:55:6e:42:31:3d:a1:8e:9e:1b:37:d9:
c0:7e:70:bb:30:5c:f0:71:92:9c:cd:2c:2b:a9:8b:
7e:a4:12:0b:19:a4:c3:da:05:cf:c0:ea:12:28:dd:
f0:af:86:1f:20:41:56:75:b4:3e:2a:ce:66:f4:53:
44:79:19:44:7a:13:50:86:a3:76:80:5a:35:98:2a:
2b:b7:0f:7c:79:e4:50:3c:9e:1e:61:d2:b9:4d:54:
be:37:fa:60:f5:24:5d:9a:46:19:af:60:32:00:a4:
e2:89:bc:2d:98:a7:75:9e:83:81:16:65:00:33:df:
04:9e:5d:ba:f2:f9:e1:fa:3c:65:b6:bd:31:b0:69:
83:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:1D:79:0A:C6:68:8D:D2:C1:FC:B2:E3:4D:44:AF:11:A5:65:1C:EC
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/KB15CsZojdLB_LLjTUSvEaVlHOw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:52:fd:bb:e5:f8:ea:8a:d0:f7:14:56:c5:34:f6:41:b4:d3:
54:ab:81:fc:c1:eb:ed:3d:16:46:49:00:e8:2a:21:f4:fb:87:
83:3a:5d:ea:36:f6:88:9e:6d:83:ae:ff:29:34:97:de:05:d0:
cb:61:ec:73:38:c6:5a:66:55:ea:4e:59:36:02:99:20:8c:0e:
b0:98:fc:84:8e:79:e3:ed:f0:5d:10:91:9c:d0:ab:0f:32:2c:
40:d0:9d:11:c2:3f:91:f8:6d:18:4e:32:f4:3b:5d:92:18:8f:
21:d4:6a:43:43:f9:57:26:9a:73:b6:85:a7:70:5c:d6:79:49:
28:2e:26:17:7d:b8:a2:b1:d6:29:ee:ae:7b:ff:74:81:b3:7e:
31:e1:9f:60:4f:75:5a:dc:78:f9:af:be:cf:63:f0:18:5c:8b:
42:5b:53:2a:c7:a4:18:50:44:cb:c2:f0:ae:a2:f6:41:ec:2f:
29:ea:00:aa:3d:4e:01:7d:42:3d:f5:bc:12:24:75:3c:54:b3:
03:d5:2d:9f:a1:41:7d:e5:a8:a4:8a:72:e9:92:87:54:8a:09:
77:ce:08:77:71:38:31:a9:4b:3a:34:c9:c0:2f:b0:99:d2:64:
5c:d1:a9:79:a3:5a:f4:32:16:de:2a:92:11:a4:ca:38:04:d4:
17:d9:4a:65
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICQyIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAyMTQw
MDMwMDVaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKDI4MUQ3OTBBQzY2ODhE
RDJDMUZDQjJFMzRENDRBRjExQTU2NTFDRUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6pcP7SKaJuKZU+VAG+HeXPn/RdmEIuPrXF5kxh7GakbVFKjxh
aPM9OpNzbajMfjfVaP+80F+NUwFNscRsiP2/0Ge6XaS6qaVFxzDd68QTEzNYINfA
ddGstBxgiKe2sGUyonnENuUS7Q9yVAgH/kqgnl+wKEzahDtCgBBVbkIxPaGOnhs3
2cB+cLswXPBxkpzNLCupi36kEgsZpMPaBc/A6hIo3fCvhh8gQVZ1tD4qzmb0U0R5
GUR6E1CGo3aAWjWYKiu3D3x55FA8nh5h0rlNVL43+mD1JF2aRhmvYDIApOKJvC2Y
p3Weg4EWZQAz3wSeXbry+eH6PGW2vTGwaYOzAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUKB15CsZojdLB/LLjTUSvEaVlHOwwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9LQjE1Q3Nab2pkTEJfTExqVFVTdkVhVmxIT3cucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAUwDQYJKoZIhvcNAQELBQADggEB
AKFS/bvl+OqK0PcUVsU09kG001SrgfzB6+09FkZJAOgqIfT7h4M6Xeo29oiebYOu
/yk0l94F0Mth7HM4xlpmVepOWTYCmSCMDrCY/ISOeePt8F0QkZzQqw8yLEDQnRHC
P5H4bRhOMvQ7XZIYjyHUakND+VcmmnO2hadwXNZ5SSguJhd9uKKx1inurnv/dIGz
fjHhn2BPdVrcePmvvs9j8Bhci0JbUyrHpBhQRMvC8K6i9kHsLynqAKo9TgF9Qj31
vBIkdTxUswPVLZ+hQX3lqKSKcumSh1SKCXfOCHdxODGpSzo0ycAvsJnSZFzRqXmj
WvQyFt4qkhGkyjgE1BfZSmU=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org