Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/bCLMaOGX8vFCHEHRxVd5vQy67Sg.roa
File: bCLMaOGX8vFCHEHRxVd5vQy67Sg.roa (raw, json)
Hash identifier: KDS/OTSbQ1uF/hhgA9PloDUPR+t+7opc0tc6TiuwdhM=
Subject key identifier: 6C:22:CC:68:E1:97:F2:F1:42:1C:41:D1:C5:57:79:BD:0C:BA:ED:28
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4841
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/bCLMaOGX8vFCHEHRxVd5vQy67Sg.roa
Signing time: Thu 19 May 2022 00:30:06 +0000
ROA not before: Thu 19 May 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18497 (0x4841)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 19 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=6C22CC68E197F2F1421C41D1C55779BD0CBAED28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3b:d4:bf:f5:98:7c:ef:5f:72:9d:7c:a2:f9:
6e:18:c5:b9:a0:a1:f6:c8:40:8d:c1:b6:66:f2:2c:
bd:44:67:99:b4:64:ed:76:26:d8:ad:b1:5b:23:6f:
50:e7:29:d1:35:c8:ad:5e:81:d1:87:72:f4:8b:ac:
5c:5e:b6:c7:57:a9:73:43:24:06:64:a7:86:e0:59:
50:ec:d0:22:dd:c9:e6:27:5c:56:8c:f3:6e:6e:fd:
37:27:8d:5f:54:b2:10:c2:86:9e:49:97:98:8e:20:
49:4a:27:b2:62:21:80:54:a1:8f:f6:e4:60:57:62:
60:9e:f5:95:1a:b2:ed:1a:c5:15:27:b4:2f:b2:3e:
2b:81:70:b6:d5:ef:45:41:68:5e:ae:6d:33:f2:5e:
28:c8:28:f9:60:d5:5c:17:b2:56:54:94:28:13:3f:
25:58:cf:9d:0e:f3:5b:c0:9c:1a:97:48:07:7e:d5:
01:e6:80:41:25:bf:f3:b3:0c:08:db:ea:42:ad:c4:
f3:94:ba:86:83:aa:eb:c8:77:f2:ac:44:ee:bb:61:
07:65:3d:2b:f4:a0:80:b3:c4:4f:12:19:65:cd:6d:
e1:d7:a2:15:01:9a:3f:33:3e:53:fc:96:41:00:8f:
35:b6:b9:4a:53:3c:28:ef:fe:32:d8:4c:8b:52:dc:
6c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:22:CC:68:E1:97:F2:F1:42:1C:41:D1:C5:57:79:BD:0C:BA:ED:28
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/bCLMaOGX8vFCHEHRxVd5vQy67Sg.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
05:1b:45:42:a2:8f:2c:1b:d0:07:5c:0d:a0:21:f9:a9:b5:f8:
67:d5:4e:ff:1c:e0:12:e1:bc:56:b4:a0:c2:39:e7:a7:ab:08:
d1:98:91:c3:6a:04:c4:3c:63:9f:a9:d4:35:b2:0e:16:3c:01:
85:17:06:5d:b3:a4:0f:b7:7e:43:79:10:40:19:df:5c:42:1a:
da:9c:da:cc:6a:08:82:33:60:d1:e7:c6:f4:ae:3e:b4:c8:45:
28:72:bf:02:6e:31:36:71:49:d8:ce:72:95:cd:bd:ea:dd:e0:
46:c2:7d:fd:ce:75:4e:06:e8:5c:99:93:47:51:e5:db:ad:ab:
07:8b:13:71:8b:7e:b5:e1:11:cf:40:6a:8f:37:73:58:52:e9:
b8:71:26:39:76:c2:4d:7a:a7:e7:9c:ea:b7:9d:5d:d6:d5:bd:
9b:10:d9:fa:10:94:19:48:b8:b6:9b:db:66:68:e8:cf:4e:ca:
56:54:f2:fa:ae:2f:e7:8f:56:1f:dd:5f:12:f7:6d:b1:3a:d3:
4c:71:78:b7:d3:f3:89:3b:a3:db:d4:4a:9e:78:6b:08:42:fe:
05:fc:23:85:57:1d:f0:0b:41:02:0f:14:96:4e:4c:15:99:3e:
c6:91:5b:fa:0b:a1:35:b0:0b:5a:96:89:a0:ed:72:01:17:2c:
4d:b8:d3:71
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICSEEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA1MTkw
MDMwMDZaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDZDMjJDQzY4RTE5N0Yy
RjE0MjFDNDFEMUM1NTc3OUJEMENCQUVEMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGO9S/9Zh8719ynXyi+W4YxbmgofbIQI3BtmbyLL1EZ5m0ZO12
JtitsVsjb1DnKdE1yK1egdGHcvSLrFxetsdXqXNDJAZkp4bgWVDs0CLdyeYnXFaM
825u/TcnjV9UshDChp5Jl5iOIElKJ7JiIYBUoY/25GBXYmCe9ZUasu0axRUntC+y
PiuBcLbV70VBaF6ubTPyXijIKPlg1VwXslZUlCgTPyVYz50O81vAnBqXSAd+1QHm
gEElv/OzDAjb6kKtxPOUuoaDquvId/KsRO67YQdlPSv0oICzxE8SGWXNbeHXohUB
mj8zPlP8lkEAjzW2uUpTPCjv/jLYTItS3GwTAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUbCLMaOGX8vFCHEHRxVd5vQy67SgwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9iQ0xNYU9HWDh2RkNIRUhSeFZkNXZReTY3U2cucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHA8wDQYJKoZIhvcNAQELBQADggEB
AAUbRUKijywb0AdcDaAh+am1+GfVTv8c4BLhvFa0oMI556erCNGYkcNqBMQ8Y5+p
1DWyDhY8AYUXBl2zpA+3fkN5EEAZ31xCGtqc2sxqCIIzYNHnxvSuPrTIRShyvwJu
MTZxSdjOcpXNverd4EbCff3OdU4G6FyZk0dR5dutqweLE3GLfrXhEc9Aao83c1hS
6bhxJjl2wk16p+ec6redXdbVvZsQ2foQlBlIuLab22Zo6M9OylZU8vquL+ePVh/d
XxL3bbE600xxeLfT84k7o9vUSp54awhC/gX8I4VXHfALQQIPFJZOTBWZPsaRW/oL
oTWwC1qWiaDtcgEXLE2403E=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org