Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/bmH4q97_IcwOyNdxG7H2DEAUYiU.roa
File: bmH4q97_IcwOyNdxG7H2DEAUYiU.roa (raw, json)
Hash identifier: 2S5kjEE6JepCSGnUpV2mnLFo7xiBKE0P/i/UI7OYMMA=
Subject key identifier: 6E:61:F8:AB:DE:FF:21:CC:0E:C8:D7:71:1B:B1:F6:0C:40:14:62:25
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4853
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/bmH4q97_IcwOyNdxG7H2DEAUYiU.roa
Signing time: Fri 20 May 2022 00:30:09 +0000
ROA not before: Fri 20 May 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18515 (0x4853)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 20 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=6E61F8ABDEFF21CC0EC8D7711BB1F60C40146225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:85:e1:f9:14:8a:09:d5:c8:0d:ab:8a:bc:35:
54:c7:8d:ca:0d:a4:a2:0b:81:59:7f:76:b9:b7:1d:
46:5d:42:9a:24:49:0c:43:96:23:d0:bb:14:e3:d9:
23:8b:b9:18:e0:ee:f4:7b:65:2f:c3:2d:03:91:39:
d9:87:c1:ce:56:55:f8:73:80:40:9b:43:8b:39:a5:
f5:ec:f2:89:71:04:26:36:f6:50:76:4d:e1:9f:cd:
5d:d7:d1:ce:df:25:f3:79:ef:b5:6f:ac:a4:b6:35:
0e:9e:bd:94:be:e6:3d:9e:d3:6f:5a:99:d8:d5:b8:
9f:ee:95:3d:bc:b6:dd:00:58:74:b3:38:73:54:3b:
2c:a7:37:a7:25:0a:fc:33:f3:7d:a5:fc:06:3d:a7:
43:82:90:03:b7:6d:a9:47:ed:e8:08:1b:13:c5:dd:
4e:df:78:93:73:af:88:5f:ab:7c:f2:5a:cd:38:8f:
85:b6:a7:b2:7a:28:1a:0c:cf:f4:e3:64:17:90:62:
31:1f:c1:d4:39:45:2c:1f:8f:3b:90:80:c8:ab:35:
3b:f2:46:bb:ec:fd:70:3f:a9:5f:71:09:99:46:ec:
10:8f:ea:34:68:7c:68:6e:a4:a9:72:23:1e:8f:76:
95:ce:2a:b9:f0:29:32:95:2a:8e:b0:b1:30:e6:5f:
f8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:61:F8:AB:DE:FF:21:CC:0E:C8:D7:71:1B:B1:F6:0C:40:14:62:25
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/bmH4q97_IcwOyNdxG7H2DEAUYiU.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
64:8c:e6:55:23:5a:cd:4f:2d:58:cc:1a:46:ab:10:b2:16:07:
5b:d7:b0:72:7f:6f:2c:36:03:6e:c9:a8:8f:60:a8:6d:db:1b:
9c:65:14:e4:61:94:87:45:85:b0:25:09:c9:1a:e5:8e:42:38:
5f:e2:c4:ec:b3:6f:50:98:fe:9e:be:f5:fd:7d:7f:5f:49:13:
bd:57:c4:e7:f6:04:9c:97:2f:14:c0:7c:15:eb:33:8c:c9:f8:
29:9f:6d:f8:b1:31:38:67:fa:b5:96:22:86:b8:a9:80:49:f7:
22:ee:a1:b3:c0:4f:1a:ac:63:f8:79:7b:42:f3:43:9f:08:3e:
00:4a:29:27:72:45:f0:b2:64:6d:1e:d8:ee:3b:18:d6:7c:b9:
df:f6:c8:69:ef:44:b3:d2:8c:3f:d8:42:c8:b7:ae:41:d2:74:
4e:b4:f4:55:1c:3a:7f:75:1d:12:6e:d9:ba:d1:69:3e:17:69:
55:c2:4c:23:96:ea:9b:1e:85:81:18:8d:37:0b:9f:9e:99:46:
cc:85:51:f2:6b:6b:10:08:5b:87:56:a0:e6:96:2d:e2:ed:cb:
ef:af:9a:58:9a:6f:a5:50:e3:e1:e6:63:d0:4c:fb:6b:d1:22:
48:d8:7f:fd:74:71:5d:02:fc:85:43:e1:b4:bf:ca:a6:33:12:
50:97:11:7d
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICSFMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA1MjAw
MDMwMDlaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDZFNjFGOEFCREVGRjIx
Q0MwRUM4RDc3MTFCQjFGNjBDNDAxNDYyMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCaheH5FIoJ1cgNq4q8NVTHjcoNpKILgVl/drm3HUZdQpokSQxD
liPQuxTj2SOLuRjg7vR7ZS/DLQOROdmHwc5WVfhzgECbQ4s5pfXs8olxBCY29lB2
TeGfzV3X0c7fJfN577VvrKS2NQ6evZS+5j2e029amdjVuJ/ulT28tt0AWHSzOHNU
OyynN6clCvwz832l/AY9p0OCkAO3balH7egIGxPF3U7feJNzr4hfq3zyWs04j4W2
p7J6KBoMz/TjZBeQYjEfwdQ5RSwfjzuQgMirNTvyRrvs/XA/qV9xCZlG7BCP6jRo
fGhupKlyIx6PdpXOKrnwKTKVKo6wsTDmX/h9AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUbmH4q97/IcwOyNdxG7H2DEAUYiUwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9ibUg0cTk3X0ljd095TmR4RzdIMkRFQVVZaVUucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAMwDQYJKoZIhvcNAQELBQADggEB
AGSM5lUjWs1PLVjMGkarELIWB1vXsHJ/byw2A27JqI9gqG3bG5xlFORhlIdFhbAl
Ccka5Y5COF/ixOyzb1CY/p6+9f19f19JE71XxOf2BJyXLxTAfBXrM4zJ+Cmfbfix
MThn+rWWIoa4qYBJ9yLuobPATxqsY/h5e0LzQ58IPgBKKSdyRfCyZG0e2O47GNZ8
ud/2yGnvRLPSjD/YQsi3rkHSdE609FUcOn91HRJu2brRaT4XaVXCTCOW6psehYEY
jTcLn56ZRsyFUfJraxAIW4dWoOaWLeLty++vmliab6VQ4+HmY9BM+2vRIkjYf/10
cV0C/IVD4bS/yqYzElCXEX0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org