Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/aBmhsnxhAyYDenFyerpSp8k9Zno.roa
File: aBmhsnxhAyYDenFyerpSp8k9Zno.roa (raw, json)
Hash identifier: JFIivNWE0ZPdu9moKEgt7/ATUosAFjaCb20CpBNv5tw=
Subject key identifier: 68:19:A1:B2:7C:61:03:26:03:7A:71:72:7A:BA:52:A7:C9:3D:66:7A
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4759
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/aBmhsnxhAyYDenFyerpSp8k9Zno.roa
Signing time: Mon 02 May 2022 00:30:12 +0000
ROA not before: Mon 02 May 2022 00:30:12 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18265 (0x4759)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 2 00:30:12 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=6819A1B27C610326037A71727ABA52A7C93D667A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:35:60:75:25:1a:2d:3a:5e:ee:4a:0a:1f:18:
9e:90:10:d0:38:ed:41:cb:08:9e:2a:38:07:21:dd:
3a:d5:75:56:a9:44:b1:36:ec:72:ba:42:79:06:00:
74:e8:4e:92:07:c3:75:35:cb:dc:89:e5:83:75:95:
e6:02:79:94:94:e4:a1:ad:0f:8f:d9:57:61:3f:92:
f6:da:57:80:23:ed:2f:b3:77:17:9b:39:40:bc:93:
18:ab:92:a8:18:b7:d9:50:fd:6f:dd:a9:ac:1c:91:
a0:92:f3:74:4f:e4:e2:8c:46:e4:85:d3:5d:b8:b2:
26:ea:03:5a:7d:e8:91:20:07:a4:25:86:27:9d:9b:
a7:08:79:0a:fb:d6:16:56:71:be:ed:cb:29:c0:7d:
2c:9a:2a:a6:cf:11:30:6e:f3:b3:12:f5:06:d1:52:
96:37:e1:e9:d2:e6:a0:71:6d:db:d9:25:b4:c3:26:
a4:6e:f8:da:29:8a:25:8a:60:7b:99:26:39:0f:c9:
44:6a:b4:b1:7a:7b:18:6d:23:1c:66:22:15:9c:af:
05:19:96:84:a9:22:7d:e2:02:3c:05:3b:eb:86:ee:
11:72:93:6c:19:dd:8a:d7:d9:89:09:0a:6b:fc:43:
75:6b:90:fa:cf:cf:35:1f:a2:56:1a:56:b9:72:b0:
d0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:19:A1:B2:7C:61:03:26:03:7A:71:72:7A:BA:52:A7:C9:3D:66:7A
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/aBmhsnxhAyYDenFyerpSp8k9Zno.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
83:75:9d:ba:d6:45:59:46:2e:cf:e7:54:93:d3:5b:24:e1:25:
b8:1d:39:ae:b3:3b:d5:68:22:24:95:dd:38:3b:3b:a0:5c:ae:
c5:75:bc:97:d7:40:8f:f3:83:e4:ab:c6:be:c2:6a:fc:6d:8e:
22:d0:6f:52:2b:31:b0:af:e0:bc:d7:69:55:1d:28:14:df:33:
42:4b:ac:fa:ad:03:08:85:a0:ac:32:68:6f:54:cc:d7:6e:60:
65:99:25:f9:d7:ed:5c:dc:1f:6b:1d:84:82:53:66:63:d9:b1:
d2:6a:5d:63:17:a8:b6:82:b9:a1:dc:70:dd:41:cf:2b:0c:2e:
5a:76:1a:c7:dd:b6:e5:82:55:41:f2:b2:56:cb:e3:e4:85:10:
36:fb:42:68:2b:45:e5:18:e0:77:41:2c:6a:ba:6a:9d:12:7c:
8f:6b:99:19:b4:80:37:9d:d6:41:29:ca:b8:ca:01:16:ec:91:
b3:cd:b3:cd:39:91:9e:5e:44:12:1a:cd:33:7d:1d:73:2a:5e:
3e:a4:e2:18:d6:b8:f3:a0:fc:fa:10:5c:69:d2:8e:64:c0:49:
25:76:64:0b:c9:51:64:a8:12:d6:ed:6d:28:0c:80:63:57:95:
1b:c9:71:2f:49:23:56:4d:c9:d7:e3:e8:e3:2b:8b:b2:b8:be:
60:ad:56:1b
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICR1kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA1MDIw
MDMwMTJaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDY4MTlBMUIyN0M2MTAz
MjYwMzdBNzE3MjdBQkE1MkE3QzkzRDY2N0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9NWB1JRotOl7uSgofGJ6QENA47UHLCJ4qOAch3TrVdVapRLE2
7HK6QnkGAHToTpIHw3U1y9yJ5YN1leYCeZSU5KGtD4/ZV2E/kvbaV4Aj7S+zdxeb
OUC8kxirkqgYt9lQ/W/dqawckaCS83RP5OKMRuSF0124sibqA1p96JEgB6Qlhied
m6cIeQr71hZWcb7tyynAfSyaKqbPETBu87MS9QbRUpY34enS5qBxbdvZJbTDJqRu
+NopiiWKYHuZJjkPyURqtLF6exhtIxxmIhWcrwUZloSpIn3iAjwFO+uG7hFyk2wZ
3YrX2YkJCmv8Q3VrkPrPzzUfolYaVrlysNCrAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUaBmhsnxhAyYDenFyerpSp8k9ZnowHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9hQm1oc254aEF5WURlbkZ5ZXJwU3A4azlabm8ucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAswDQYJKoZIhvcNAQELBQADggEB
AIN1nbrWRVlGLs/nVJPTWyThJbgdOa6zO9VoIiSV3Tg7O6BcrsV1vJfXQI/zg+Sr
xr7CavxtjiLQb1IrMbCv4LzXaVUdKBTfM0JLrPqtAwiFoKwyaG9UzNduYGWZJfnX
7VzcH2sdhIJTZmPZsdJqXWMXqLaCuaHccN1BzysMLlp2GsfdtuWCVUHyslbL4+SF
EDb7QmgrReUY4HdBLGq6ap0SfI9rmRm0gDed1kEpyrjKARbskbPNs805kZ5eRBIa
zTN9HXMqXj6k4hjWuPOg/PoQXGnSjmTASSV2ZAvJUWSoEtbtbSgMgGNXlRvJcS9J
I1ZNydfj6OMri7K4vmCtVhs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org