Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/NbeThlb5FHzsdGXAMBBQO0C8AOc.roa
File: NbeThlb5FHzsdGXAMBBQO0C8AOc.roa (raw, json)
Hash identifier: rxzZXe9Em8db9K5fJSXLhQvSaA8LR4cIqD91LPp6xqs=
Subject key identifier: 35:B7:93:86:56:F9:14:7C:EC:74:65:C0:30:10:50:3B:40:BC:00:E7
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 48CD
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/NbeThlb5FHzsdGXAMBBQO0C8AOc.roa
Signing time: Sun 29 May 2022 00:30:05 +0000
ROA not before: Sun 29 May 2022 00:30:05 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18637 (0x48cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 29 00:30:05 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=35B7938656F9147CEC7465C03010503B40BC00E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:44:2f:98:d1:e1:94:68:ca:4e:57:24:dc:19:
c0:00:bf:11:5e:b8:83:c7:09:28:b2:6e:73:51:cd:
c2:34:9b:21:b2:bb:65:e2:42:f1:e5:6b:56:9c:aa:
f7:12:33:30:76:95:12:15:c0:e9:39:77:b5:c0:d6:
a2:d5:bf:85:66:27:a5:36:56:88:d7:92:de:2d:f4:
bc:01:89:a3:2a:0e:1e:39:91:c0:b4:f1:62:c3:03:
5d:91:8d:10:75:46:df:43:7e:88:3a:3d:f1:05:37:
1c:77:98:8f:0f:aa:63:6f:21:f2:82:45:a3:cc:d4:
2f:3f:0a:36:71:12:1b:59:cc:d3:2a:b0:14:1f:85:
09:a7:ba:1e:47:a2:02:7c:ae:ed:8d:c6:ab:f3:e0:
13:a5:4c:0f:13:9b:58:6e:d5:76:2f:74:46:ec:90:
91:f1:dc:9c:cf:7d:dd:0e:22:ed:bf:ef:21:b8:35:
91:f9:d6:97:62:78:1b:d5:71:1a:62:52:85:fe:62:
99:e8:de:35:a8:33:45:e9:28:ae:5f:36:1c:fc:40:
5b:02:de:5d:40:88:a6:32:eb:34:01:46:2b:3e:2f:
9b:51:e2:e3:9d:eb:1b:bb:03:39:a0:01:91:3c:0a:
7e:62:ea:04:ff:e4:43:36:fa:87:61:52:ff:95:42:
97:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B7:93:86:56:F9:14:7C:EC:74:65:C0:30:10:50:3B:40:BC:00:E7
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/NbeThlb5FHzsdGXAMBBQO0C8AOc.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:c7:93:06:f1:8a:f9:f2:b2:2d:ea:36:22:95:30:61:a7:c9:
b3:bd:41:5f:8a:f9:4a:8b:99:8a:d9:a5:9a:ef:ca:3a:4a:b4:
82:99:5d:e0:44:07:6d:47:9b:1f:3e:5b:ed:39:e2:2f:cc:7e:
25:2a:f2:1c:b0:04:05:f8:ab:17:ad:90:00:02:4c:d6:1b:09:
c9:ec:42:98:be:84:ec:64:cc:d1:4d:c8:78:af:42:78:94:76:
ea:78:cd:1b:95:f3:15:ff:ae:eb:bc:9f:94:ca:8f:85:4f:16:
08:fa:71:2e:4f:04:90:46:ae:1b:ce:4c:07:57:a3:61:d5:e1:
3d:ce:0d:a3:3a:ab:dc:b4:ea:dd:30:26:89:87:3a:07:24:19:
5a:2d:92:ae:5f:71:f5:e1:16:a7:79:6e:58:b6:0f:f8:50:77:
e1:74:5c:40:c9:db:72:4e:3d:9c:23:a4:25:a7:d7:b2:e5:28:
e3:19:40:ac:bb:7a:e2:ba:05:97:f5:7c:77:53:37:3e:33:ee:
a6:af:f8:ae:ac:36:29:3a:e7:e2:7e:d3:fd:2b:40:fc:c4:61:
70:28:95:43:85:05:08:12:34:f4:c8:22:37:7b:a2:7c:ba:6f:
88:d8:45:91:29:90:55:e8:9b:89:05:ff:6b:06:c1:e1:23:8c:
93:a8:af:af
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICSM0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA1Mjkw
MDMwMDVaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDM1Qjc5Mzg2NTZGOTE0
N0NFQzc0NjVDMDMwMTA1MDNCNDBCQzAwRTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCRRC+Y0eGUaMpOVyTcGcAAvxFeuIPHCSiybnNRzcI0myGyu2Xi
QvHla1acqvcSMzB2lRIVwOk5d7XA1qLVv4VmJ6U2VojXkt4t9LwBiaMqDh45kcC0
8WLDA12RjRB1Rt9Dfog6PfEFNxx3mI8PqmNvIfKCRaPM1C8/CjZxEhtZzNMqsBQf
hQmnuh5HogJ8ru2Nxqvz4BOlTA8Tm1hu1XYvdEbskJHx3JzPfd0OIu2/7yG4NZH5
1pdieBvVcRpiUoX+Ypno3jWoM0XpKK5fNhz8QFsC3l1AiKYy6zQBRis+L5tR4uOd
6xu7AzmgAZE8Cn5i6gT/5EM2+odhUv+VQpfdAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUNbeThlb5FHzsdGXAMBBQO0C8AOcwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9OYmVUaGxiNUZIenNkR1hBTUJCUU8wQzhBT2Mucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHA8wDQYJKoZIhvcNAQELBQADggEB
AE/Hkwbxivnysi3qNiKVMGGnybO9QV+K+UqLmYrZpZrvyjpKtIKZXeBEB21Hmx8+
W+054i/MfiUq8hywBAX4qxetkAACTNYbCcnsQpi+hOxkzNFNyHivQniUdup4zRuV
8xX/ruu8n5TKj4VPFgj6cS5PBJBGrhvOTAdXo2HV4T3ODaM6q9y06t0wJomHOgck
GVotkq5fcfXhFqd5bli2D/hQd+F0XEDJ23JOPZwjpCWn17LlKOMZQKy7euK6BZf1
fHdTNz4z7qav+K6sNik65+J+0/0rQPzEYXAolUOFBQgSNPTIIjd7ony6b4jYRZEp
kFXom4kF/2sGweEjjJOor68=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org