Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/LbDsDj_lXkIEWC4YypZHJZdH_iQ.roa
File: LbDsDj_lXkIEWC4YypZHJZdH_iQ.roa (raw, json)
Hash identifier: UT2B7SJGY0I5jwk7M0YNP/g7akeKJzxxWA1q4aIEZdE=
Subject key identifier: 2D:B0:EC:0E:3F:E5:5E:42:04:58:2E:18:CA:96:47:25:97:47:FE:24
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 48B3
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/LbDsDj_lXkIEWC4YypZHJZdH_iQ.roa
Signing time: Fri 27 May 2022 00:30:08 +0000
ROA not before: Fri 27 May 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18611 (0x48b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 27 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=2DB0EC0E3FE55E4204582E18CA9647259747FE24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:47:b0:2a:c6:24:dd:a4:ed:b7:9d:8c:ca:94:
2b:08:a6:36:10:69:f3:b0:0a:83:ab:b2:e6:28:74:
71:08:ea:ac:41:6a:4e:3a:c6:4d:f5:a8:a1:76:21:
45:ec:02:56:7f:47:24:67:dc:31:d4:1f:96:db:49:
b7:ea:c2:3a:de:d8:9e:3a:a0:13:69:a6:c4:8f:99:
65:31:0f:f0:25:28:07:38:e8:3e:95:56:1a:dd:e1:
5b:15:7b:3e:7a:e4:c8:e7:ff:a0:76:f6:d1:98:d7:
22:1a:6e:31:ec:e1:dc:65:08:93:3d:42:28:49:a9:
4b:aa:61:d7:4b:64:54:c9:d2:99:15:39:17:9e:80:
da:7f:db:83:70:95:07:02:48:58:0e:b5:f8:fb:dd:
f9:b9:d8:75:e0:22:f2:04:c6:d4:68:ed:0f:bc:7d:
f3:21:b7:fd:9a:3d:86:64:f9:f8:1b:9c:46:a3:4a:
90:32:4c:15:65:71:c3:c3:ce:25:63:31:d4:76:0c:
28:db:b0:1f:c0:d5:1d:09:45:8d:8d:04:ae:b1:d8:
41:59:80:9c:c7:dd:96:ff:60:9e:74:2c:44:fc:65:
be:99:0e:4a:9d:1e:78:3a:a9:9f:f2:1b:f7:23:bc:
ca:49:0a:dd:84:b5:b1:4e:d6:88:d8:1d:be:ac:4e:
74:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B0:EC:0E:3F:E5:5E:42:04:58:2E:18:CA:96:47:25:97:47:FE:24
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/LbDsDj_lXkIEWC4YypZHJZdH_iQ.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
63:af:df:c7:a3:85:5e:a3:db:9e:61:bd:66:ef:9f:e6:04:7e:
c0:64:1b:af:c9:84:cf:c8:58:69:9f:4c:43:c7:56:d9:35:32:
49:c9:51:14:0f:d8:66:54:c0:bb:a4:88:bf:cf:0a:0b:5e:90:
6d:5b:41:02:3f:66:74:eb:4f:eb:b2:89:2a:81:20:99:91:18:
7f:31:cf:33:3e:8f:77:71:95:a5:55:7e:8b:ac:ff:12:63:14:
04:c1:3d:66:db:6c:4e:f2:3e:8e:e5:d3:c8:51:e6:72:3a:bf:
09:2c:60:50:c9:03:11:ec:7e:c2:6d:b4:9d:8a:fc:a6:02:d1:
00:27:32:d5:3e:92:06:1c:fc:95:a1:a5:40:7e:2a:41:c7:ea:
be:2a:d6:2a:e7:62:60:ee:7f:b0:ed:bf:3e:39:05:bf:98:ef:
5c:c6:1e:e5:4b:a6:21:93:f0:5c:20:72:44:99:4c:71:87:fe:
6b:4f:a0:b2:ea:05:47:bb:f3:5e:41:12:4f:73:19:02:6f:ca:
27:5f:de:a5:d8:d2:96:d0:2c:d4:c3:d9:b3:df:39:39:06:a2:
59:cf:69:b7:f6:95:a1:a8:31:f1:54:62:dd:33:0b:45:7f:15:
e9:88:90:14:73:f6:ff:b1:26:2c:73:ab:e0:3a:d5:ae:93:a5:
15:8a:db:71
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICSLMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA1Mjcw
MDMwMDhaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDJEQjBFQzBFM0ZFNTVF
NDIwNDU4MkUxOENBOTY0NzI1OTc0N0ZFMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQR7AqxiTdpO23nYzKlCsIpjYQafOwCoOrsuYodHEI6qxBak46
xk31qKF2IUXsAlZ/RyRn3DHUH5bbSbfqwjre2J46oBNppsSPmWUxD/AlKAc46D6V
Vhrd4VsVez565Mjn/6B29tGY1yIabjHs4dxlCJM9QihJqUuqYddLZFTJ0pkVORee
gNp/24NwlQcCSFgOtfj73fm52HXgIvIExtRo7Q+8ffMht/2aPYZk+fgbnEajSpAy
TBVlccPDziVjMdR2DCjbsB/A1R0JRY2NBK6x2EFZgJzH3Zb/YJ50LET8Zb6ZDkqd
Hng6qZ/yG/cjvMpJCt2EtbFO1ojYHb6sTnRVAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQULbDsDj/lXkIEWC4YypZHJZdH/iQwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9MYkRzRGpfbFhrSUVXQzRZeXBaSEpaZEhfaVEucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAkwDQYJKoZIhvcNAQELBQADggEB
AGOv38ejhV6j255hvWbvn+YEfsBkG6/JhM/IWGmfTEPHVtk1MknJURQP2GZUwLuk
iL/PCgtekG1bQQI/ZnTrT+uyiSqBIJmRGH8xzzM+j3dxlaVVfous/xJjFATBPWbb
bE7yPo7l08hR5nI6vwksYFDJAxHsfsJttJ2K/KYC0QAnMtU+kgYc/JWhpUB+KkHH
6r4q1irnYmDuf7Dtvz45Bb+Y71zGHuVLpiGT8FwgckSZTHGH/mtPoLLqBUe7815B
Ek9zGQJvyidf3qXY0pbQLNTD2bPfOTkGolnPabf2laGoMfFUYt0zC0V/FemIkBRz
9v+xJixzq+A61a6TpRWK23E=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org