Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/Y8vowVljYl05Xn9Mx-h-eobSzEs.roa
File: Y8vowVljYl05Xn9Mx-h-eobSzEs.roa (raw, json)
Hash identifier: hVzxfuEfRw+5Oi28aDTSBoCp4iNgeTy2/bYJFa49WkA=
Subject key identifier: 63:CB:E8:C1:59:63:62:5D:39:5E:7F:4C:C7:E8:7E:7A:86:D2:CC:4B
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 478F
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Y8vowVljYl05Xn9Mx-h-eobSzEs.roa
Signing time: Fri 06 May 2022 00:30:07 +0000
ROA not before: Fri 06 May 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18319 (0x478f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 6 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=63CBE8C15963625D395E7F4CC7E87E7A86D2CC4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:65:e3:3c:7c:10:a5:64:88:a6:4c:ed:c6:80:
cb:c2:fa:4a:46:47:6f:a0:81:94:07:4a:57:ab:43:
e3:30:00:83:c3:87:a8:d9:60:32:ea:81:de:97:94:
cf:f5:f6:e2:82:6d:b8:e9:e9:38:03:b6:87:0d:43:
45:82:18:7e:b1:e4:a9:2b:06:0d:5a:7a:3a:53:18:
a4:03:e9:e0:53:03:c9:b7:f1:93:77:6a:42:bf:40:
11:04:83:a0:04:b8:8c:99:4c:5a:4c:e5:5a:f8:7e:
39:1e:9a:b4:75:4b:b1:04:2a:96:7a:07:aa:1e:16:
31:d6:0f:d4:c0:9a:a0:cd:34:d8:64:43:a3:45:b2:
8f:19:5f:a5:f1:c0:10:b8:e1:05:74:20:a1:7d:35:
aa:d4:37:d6:7b:8f:ca:5f:78:b6:a3:4f:1c:72:a8:
53:e5:15:db:24:23:4a:4c:d1:16:50:0b:78:6e:53:
43:b4:72:6d:87:43:dc:33:73:7d:63:63:56:0d:6e:
d1:d1:b0:c1:f9:4e:df:80:73:88:6c:bd:35:51:df:
8b:88:68:94:23:e1:5e:2f:b6:e1:1c:a6:8e:87:19:
15:d1:5d:05:5a:6c:ff:49:c6:57:67:d6:ef:96:d6:
4f:1d:f6:c8:37:86:02:d7:47:e7:16:0c:64:a2:48:
50:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CB:E8:C1:59:63:62:5D:39:5E:7F:4C:C7:E8:7E:7A:86:D2:CC:4B
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Y8vowVljYl05Xn9Mx-h-eobSzEs.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
95:56:07:6b:1d:fd:f6:b0:21:03:da:d4:d8:01:8f:5b:e9:ba:
4f:44:4f:7b:ee:fe:b4:1c:91:1c:85:4e:63:b3:9e:ce:d4:8f:
f8:02:27:37:50:3b:6a:b4:a0:3c:8d:94:c3:b2:5f:b4:65:d4:
6c:5b:12:d8:fa:3d:3a:d4:43:f5:fe:98:47:79:c8:a5:1e:a6:
02:13:83:0c:9f:98:c8:fd:60:db:db:8a:20:04:45:9b:a7:75:
63:31:75:05:c9:d1:be:a2:f8:d9:88:48:4a:b2:c0:31:78:84:
03:3d:9a:c2:6e:c1:09:92:c9:70:df:19:17:66:b9:b6:61:dc:
6b:40:30:32:83:80:86:fd:cb:80:aa:d7:fd:d6:a1:fc:08:6e:
b0:9f:42:01:aa:53:18:21:ac:2b:12:0e:34:5d:ed:66:10:f8:
53:f7:d5:8d:81:35:91:d3:2e:91:b8:d8:00:6e:cd:33:4e:f0:
65:76:ef:c1:c9:e6:92:83:f0:c2:e2:40:fa:ee:d5:34:82:dc:
86:58:05:98:79:a8:3d:83:94:4a:b6:12:c2:29:13:ef:7b:fc:
4a:04:45:63:52:df:8a:71:81:96:43:e3:e5:91:f7:04:ab:c9:
22:42:06:e8:0a:c1:67:ea:ca:2b:74:ae:f4:86:6d:b6:7f:ec:
e9:b8:45:50
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICR48wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA1MDYw
MDMwMDdaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDYzQ0JFOEMxNTk2MzYy
NUQzOTVFN0Y0Q0M3RTg3RTdBODZEMkNDNEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJZeM8fBClZIimTO3GgMvC+kpGR2+ggZQHSlerQ+MwAIPDh6jZ
YDLqgd6XlM/19uKCbbjp6TgDtocNQ0WCGH6x5KkrBg1aejpTGKQD6eBTA8m38ZN3
akK/QBEEg6AEuIyZTFpM5Vr4fjkemrR1S7EEKpZ6B6oeFjHWD9TAmqDNNNhkQ6NF
so8ZX6XxwBC44QV0IKF9NarUN9Z7j8pfeLajTxxyqFPlFdskI0pM0RZQC3huU0O0
cm2HQ9wzc31jY1YNbtHRsMH5Tt+Ac4hsvTVR34uIaJQj4V4vtuEcpo6HGRXRXQVa
bP9Jxldn1u+W1k8d9sg3hgLXR+cWDGSiSFCNAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUY8vowVljYl05Xn9Mx+h+eobSzEswHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9ZOHZvd1ZsallsMDVYbjlNeC1oLWVvYlN6RXMucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAMwDQYJKoZIhvcNAQELBQADggEB
AJVWB2sd/fawIQPa1NgBj1vpuk9ET3vu/rQckRyFTmOzns7Uj/gCJzdQO2q0oDyN
lMOyX7Rl1GxbEtj6PTrUQ/X+mEd5yKUepgITgwyfmMj9YNvbiiAERZundWMxdQXJ
0b6i+NmISEqywDF4hAM9msJuwQmSyXDfGRdmubZh3GtAMDKDgIb9y4Cq1/3WofwI
brCfQgGqUxghrCsSDjRd7WYQ+FP31Y2BNZHTLpG42ABuzTNO8GV278HJ5pKD8MLi
QPru1TSC3IZYBZh5qD2DlEq2EsIpE+97/EoERWNS34pxgZZD4+WR9wSrySJCBugK
wWfqyit0rvSGbbZ/7Om4RVA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org