Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/MrWH73bj8E1Nmia0QCI1Og5SUj0.roa
File: MrWH73bj8E1Nmia0QCI1Og5SUj0.roa (raw, json)
Hash identifier: UHSe9bvJ1kohIFffKRJGFEMXbVeWYpdo906bYD5x4ts=
Subject key identifier: 32:B5:87:EF:76:E3:F0:4D:4D:9A:26:B4:40:22:35:3A:0E:52:52:3D
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 490C
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/MrWH73bj8E1Nmia0QCI1Og5SUj0.roa
Signing time: Wed 01 Jun 2022 00:30:12 +0000
ROA not before: Wed 01 Jun 2022 00:30:12 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18700 (0x490c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 1 00:30:12 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=32B587EF76E3F04D4D9A26B44022353A0E52523D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:9a:ab:fd:22:4c:97:c2:1a:3f:51:bc:8d:5e:
74:bb:58:72:e0:e0:6c:fc:f3:f6:fa:0f:75:13:b9:
c0:1f:9e:73:64:38:dd:42:53:11:4e:e6:ab:51:05:
2d:3f:67:3d:38:ba:d3:81:5f:2b:41:92:40:e2:b2:
2e:14:2f:4d:4e:7e:f5:4c:0a:e9:05:4a:b6:e0:0c:
ed:86:9b:c0:26:db:1f:c9:38:bc:cf:83:3a:7a:6b:
b7:a0:f0:a4:f7:b6:fa:2e:b8:a1:e3:cf:6d:1b:8f:
c0:7c:60:ed:8e:47:c0:64:37:23:c8:7b:3a:32:ae:
d0:76:e1:be:ab:31:c2:ab:e4:5c:ec:b1:54:21:13:
06:21:c7:60:fc:4a:a1:56:13:9e:1d:0a:1c:53:c2:
3a:df:a9:e5:f1:73:6e:1d:3e:d0:0a:30:b9:72:d5:
25:7c:3b:1c:fe:f3:b7:d1:7b:93:d3:6f:ab:ee:97:
31:b7:22:2f:87:65:08:35:fe:f9:0f:c6:3a:8a:07:
18:3a:d8:8c:02:81:91:45:57:65:b7:a5:a7:25:ec:
0a:28:16:6e:23:e0:47:d9:08:3a:0e:e5:ba:e8:22:
e1:2a:a1:03:67:69:4d:6d:2b:10:75:1d:26:f0:75:
aa:f7:f7:55:0c:6f:07:8a:54:8e:10:0f:66:7f:a9:
03:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B5:87:EF:76:E3:F0:4D:4D:9A:26:B4:40:22:35:3A:0E:52:52:3D
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/MrWH73bj8E1Nmia0QCI1Og5SUj0.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.10.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:01:0f:8e:33:d1:38:10:98:03:2c:11:dc:2c:dd:3f:56:97:
82:2a:a5:93:99:b3:f6:f8:91:4f:fa:72:62:30:8f:c4:30:c0:
6a:db:09:ed:c0:4f:63:5d:e5:26:c6:a6:dd:b9:d1:c0:d5:d6:
78:e1:70:d9:13:e7:a2:93:0f:60:bd:e0:e0:26:2f:6d:ea:20:
34:fd:fd:a4:39:21:e4:9b:74:ee:26:42:b3:41:06:19:7e:1b:
3d:a2:c9:83:68:d0:4e:ca:30:10:7b:26:27:53:4d:c4:58:78:
58:7c:ae:e7:11:bc:63:1f:88:e0:cd:a3:d4:4f:08:92:35:0f:
d2:c8:71:c5:47:15:3d:9e:b7:b9:4c:d1:10:de:50:00:c1:d7:
61:50:9e:54:dc:a2:a3:6b:86:0b:bc:e2:fd:18:a4:c5:2a:fa:
64:c1:86:58:a4:62:26:7d:00:a0:1b:50:4e:35:b3:ef:ae:48:
4d:bf:fe:b4:e2:05:7f:b1:1e:2c:be:9a:08:32:23:26:b4:95:
4c:eb:24:c5:e9:44:07:82:68:4c:16:19:80:a1:96:e1:73:2a:
6a:e8:a6:79:8c:cb:75:c5:7f:a1:68:21:9e:a4:12:63:bf:78:
97:c8:c4:67:8f:b4:c9:9f:c6:20:ea:98:09:86:2b:16:35:ac:
75:9a:1c:97
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICSQwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA2MDEw
MDMwMTJaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDMyQjU4N0VGNzZFM0Yw
NEQ0RDlBMjZCNDQwMjIzNTNBMEU1MjUyM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDymqv9IkyXwho/UbyNXnS7WHLg4Gz88/b6D3UTucAfnnNkON1C
UxFO5qtRBS0/Zz04utOBXytBkkDisi4UL01OfvVMCukFSrbgDO2Gm8Am2x/JOLzP
gzp6a7eg8KT3tvouuKHjz20bj8B8YO2OR8BkNyPIezoyrtB24b6rMcKr5FzssVQh
EwYhx2D8SqFWE54dChxTwjrfqeXxc24dPtAKMLly1SV8Oxz+87fRe5PTb6vulzG3
Ii+HZQg1/vkPxjqKBxg62IwCgZFFV2W3pacl7AooFm4j4EfZCDoO5broIuEqoQNn
aU1tKxB1HSbwdar391UMbweKVI4QD2Z/qQP3AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUMrWH73bj8E1Nmia0QCI1Og5SUj0wHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9NcldINzNiajhFMU5taWEwUUNJMU9nNVNVajAucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAowDQYJKoZIhvcNAQELBQADggEB
AHoBD44z0TgQmAMsEdws3T9Wl4IqpZOZs/b4kU/6cmIwj8QwwGrbCe3AT2Nd5SbG
pt250cDV1njhcNkT56KTD2C94OAmL23qIDT9/aQ5IeSbdO4mQrNBBhl+Gz2iyYNo
0E7KMBB7JidTTcRYeFh8rucRvGMfiODNo9RPCJI1D9LIccVHFT2et7lM0RDeUADB
12FQnlTcoqNrhgu84v0YpMUq+mTBhlikYiZ9AKAbUE41s++uSE2//rTiBX+xHiy+
mggyIya0lUzrJMXpRAeCaEwWGYChluFzKmropnmMy3XFf6FoIZ6kEmO/eJfIxGeP
tMmfxiDqmAmGKxY1rHWaHJc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org