Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/WpfOERjvRCPqNswch3xLMSzfiSk.roa
File: WpfOERjvRCPqNswch3xLMSzfiSk.roa (raw, json)
Hash identifier: +tdpGuQCvrKZ9Wt39TQHixPptfqixXFiTYFT+NZ8XaQ=
Subject key identifier: 5A:97:CE:11:18:EF:44:23:EA:36:CC:1C:87:7C:4B:31:2C:DF:89:29
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4591
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WpfOERjvRCPqNswch3xLMSzfiSk.roa
Signing time: Thu 31 Mar 2022 00:30:05 +0000
ROA not before: Thu 31 Mar 2022 00:30:05 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17809 (0x4591)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 31 00:30:05 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=5A97CE1118EF4423EA36CC1C877C4B312CDF8929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6d:69:49:18:99:0c:f0:fd:c5:cc:8b:f5:81:
fe:af:91:98:0d:53:9e:dd:94:87:7b:e2:84:73:a0:
ec:03:55:5e:b0:d8:cd:58:14:8a:7b:90:29:97:f7:
4b:18:47:1b:bd:e4:f2:c9:c0:72:46:70:7c:26:b1:
84:0c:cb:0e:e8:d3:a4:0b:7f:48:ec:49:74:bd:34:
92:78:8c:be:54:0f:6f:fd:e2:f8:13:c0:e9:d9:51:
82:16:e9:63:03:96:7c:a5:fd:7b:4c:2a:50:dd:0e:
bd:57:c3:f2:c7:52:1f:3f:1e:c0:0b:a6:09:03:c1:
c2:94:38:69:7a:ed:27:a0:0e:b3:35:e6:8d:0c:a0:
c7:1f:cb:c8:97:38:0d:b5:37:4b:d0:5d:c5:7e:24:
84:a8:fa:09:c5:4b:4b:62:7c:86:94:ad:71:35:fb:
c4:77:50:74:b2:3b:8c:15:b2:77:86:bf:63:4a:f9:
39:01:5d:14:f5:20:9d:53:4a:ed:66:09:ce:90:ef:
a9:eb:d9:44:8c:e7:04:83:0b:25:fb:4a:dc:46:54:
4b:2e:63:17:8f:68:1d:cf:33:a2:98:91:3f:a5:b3:
36:04:dc:1f:98:88:2c:ab:0d:e4:9c:85:09:2c:a7:
49:5d:e8:ed:4e:95:1d:54:37:f2:3d:86:8a:c2:4b:
10:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:97:CE:11:18:EF:44:23:EA:36:CC:1C:87:7C:4B:31:2C:DF:89:29
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WpfOERjvRCPqNswch3xLMSzfiSk.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:a5:81:3a:05:fa:d3:40:88:6f:2c:47:ef:d8:c4:fe:c6:ef:
dc:59:0e:30:a4:df:44:ca:9f:b7:d2:f2:03:57:22:88:d6:cc:
a0:55:7b:18:6d:3c:c1:67:3a:65:8d:e7:ac:b2:f7:8b:85:fc:
e3:12:a4:dc:1e:89:45:f6:da:cc:6d:68:8a:06:8d:23:fe:02:
c4:74:5a:d0:e9:d6:30:13:16:52:09:f9:84:9f:74:54:21:60:
e1:1c:66:63:ef:fa:6e:2e:f2:4c:d2:2f:5f:31:63:97:05:08:
13:05:e5:fb:69:6c:a9:95:1a:b1:8f:e7:f9:d2:4f:14:3f:f0:
da:9b:05:8d:df:5c:d6:3b:c2:b2:6e:76:2e:34:e7:4b:5a:bd:
7e:08:16:81:b1:db:ec:e7:6d:ff:de:6b:b5:3b:4f:f9:9b:08:
ae:86:c7:ee:62:42:b3:90:2a:6c:af:35:89:be:ca:03:93:18:
77:ce:31:96:6c:c4:ae:36:61:8b:7f:4a:ef:ae:96:03:81:76:
ac:08:8f:56:99:b3:cc:8b:a0:2c:b8:9f:a0:a2:36:ce:95:9d:
b9:bf:6c:c4:e8:4f:1c:48:c3:db:0f:0b:8b:24:e4:74:ef:7d:
4e:33:ab:ce:09:09:46:73:94:56:df:0c:89:55:d0:53:76:95:
a6:1a:60:4f
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRZEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAzMzEw
MDMwMDVaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKDVBOTdDRTExMThFRjQ0
MjNFQTM2Q0MxQzg3N0M0QjMxMkNERjg5MjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDkbWlJGJkM8P3FzIv1gf6vkZgNU57dlId74oRzoOwDVV6w2M1Y
FIp7kCmX90sYRxu95PLJwHJGcHwmsYQMyw7o06QLf0jsSXS9NJJ4jL5UD2/94vgT
wOnZUYIW6WMDlnyl/XtMKlDdDr1Xw/LHUh8/HsALpgkDwcKUOGl67SegDrM15o0M
oMcfy8iXOA21N0vQXcV+JISo+gnFS0tifIaUrXE1+8R3UHSyO4wVsneGv2NK+TkB
XRT1IJ1TSu1mCc6Q76nr2USM5wSDCyX7StxGVEsuYxePaB3PM6KYkT+lszYE3B+Y
iCyrDeSchQksp0ld6O1OlR1UN/I9horCSxBNAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUWpfOERjvRCPqNswch3xLMSzfiSkwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9XcGZPRVJqdlJDUHFOc3djaDN4TE1TemZpU2sucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAUwDQYJKoZIhvcNAQELBQADggEB
AIulgToF+tNAiG8sR+/YxP7G79xZDjCk30TKn7fS8gNXIojWzKBVexhtPMFnOmWN
56yy94uF/OMSpNweiUX22sxtaIoGjSP+AsR0WtDp1jATFlIJ+YSfdFQhYOEcZmPv
+m4u8kzSL18xY5cFCBMF5ftpbKmVGrGP5/nSTxQ/8NqbBY3fXNY7wrJudi4050ta
vX4IFoGx2+znbf/ea7U7T/mbCK6Gx+5iQrOQKmyvNYm+ygOTGHfOMZZsxK42YYt/
Su+ulgOBdqwIj1aZs8yLoCy4n6CiNs6Vnbm/bMToTxxIw9sPC4sk5HTvfU4zq84J
CUZzlFbfDIlV0FN2laYaYE8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org