Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/cx_ZAU_z2pgDWcnRcrHtb7PJNG0.roa
File: cx_ZAU_z2pgDWcnRcrHtb7PJNG0.roa (raw, json)
Hash identifier: 1sy2X+IyYUrx6NSlo1gh4CjnaC/+kRU9ztOzbIY29+s=
Subject key identifier: 73:1F:D9:01:4F:F3:DA:98:03:59:C9:D1:72:B1:ED:6F:B3:C9:34:6D
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4621
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/cx_ZAU_z2pgDWcnRcrHtb7PJNG0.roa
Signing time: Sun 10 Apr 2022 00:30:10 +0000
ROA not before: Sun 10 Apr 2022 00:30:10 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17953 (0x4621)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 10 00:30:10 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=731FD9014FF3DA980359C9D172B1ED6FB3C9346D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8d:ae:b5:8b:69:87:22:29:82:73:19:56:19:
cd:50:ec:c6:72:51:3c:5d:0f:18:de:61:3f:9b:21:
6a:07:53:26:e9:45:fe:7e:e9:de:11:2a:59:47:9d:
6f:25:7e:7e:f5:b2:21:80:37:b0:45:9b:c5:71:ca:
d2:0f:fc:2d:c5:00:36:55:19:48:e0:cf:aa:04:1e:
83:17:63:c6:8c:68:74:84:fc:35:36:fc:e5:c3:6e:
a5:8f:e9:2d:7d:3b:9d:40:d1:01:06:94:00:ab:b9:
1a:6f:f5:63:22:25:a5:8c:34:bb:18:c3:ae:ae:58:
6c:5c:a5:aa:7c:47:83:cb:4f:20:0e:b5:ca:f3:55:
cb:c8:00:7a:25:bd:c6:cf:53:bc:88:eb:d8:4e:e5:
87:95:20:89:b4:3b:63:7d:5c:20:dc:d9:c6:77:27:
d1:f8:61:ab:16:6e:a5:4c:02:56:3b:f2:cb:bc:92:
1a:e0:05:54:2e:0f:d1:cc:c7:be:b1:2a:4d:d7:7f:
ca:fa:b2:01:4a:74:8b:37:64:4c:25:67:97:fb:67:
b3:44:74:ef:fd:59:2a:bd:0d:fe:a9:4f:e5:1a:e9:
6c:97:4a:13:ac:90:33:b5:e8:24:bb:de:ee:c2:8f:
1f:22:12:20:a6:30:c9:f4:94:17:e0:66:7d:c7:a5:
96:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1F:D9:01:4F:F3:DA:98:03:59:C9:D1:72:B1:ED:6F:B3:C9:34:6D
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/cx_ZAU_z2pgDWcnRcrHtb7PJNG0.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:4a:52:3f:60:e1:23:c3:4e:46:68:88:9a:65:0a:dc:ac:03:
94:3d:d1:cb:52:40:a2:5b:f1:fb:a9:12:9d:12:e5:cb:0d:93:
36:5a:08:7f:a0:b6:60:08:7c:39:8f:1f:a7:fc:d1:36:66:0f:
03:f0:ca:3d:df:56:b4:0b:df:6f:06:49:04:82:08:51:c0:aa:
40:7c:e9:47:21:bb:0d:04:3b:61:27:c4:6c:e0:c9:46:f9:b2:
de:06:90:c5:12:6e:67:96:11:d8:21:93:bc:d0:00:aa:15:3b:
9d:5b:e2:f6:c8:d7:44:e7:0b:32:1f:02:c3:ad:c7:da:85:bc:
d9:bb:a2:71:e6:27:9d:2d:14:f5:a2:49:60:ca:54:f2:6d:8b:
54:cf:2a:91:a7:a4:7d:ec:96:81:11:77:f2:16:91:aa:53:cc:
ca:f5:40:2f:c4:79:12:29:5d:a0:5e:66:19:fa:1b:13:87:ca:
e9:31:db:e0:6d:6a:97:91:ab:e7:0f:d0:57:5d:e5:7b:a2:96:
7c:d5:b6:9d:7f:7a:d4:7b:43:4e:74:eb:cd:14:d6:3a:d3:a4:
c7:7e:55:1e:3f:14:13:3e:71:11:1d:f9:77:4c:23:2b:58:1f:
7b:6d:6c:d7:86:61:0f:e6:19:0d:80:2f:6d:6b:35:56:65:f8:
f5:f3:4e:bb
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRiEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA0MTAw
MDMwMTBaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDczMUZEOTAxNEZGM0RB
OTgwMzU5QzlEMTcyQjFFRDZGQjNDOTM0NkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3ja61i2mHIimCcxlWGc1Q7MZyUTxdDxjeYT+bIWoHUybpRf5+
6d4RKllHnW8lfn71siGAN7BFm8VxytIP/C3FADZVGUjgz6oEHoMXY8aMaHSE/DU2
/OXDbqWP6S19O51A0QEGlACruRpv9WMiJaWMNLsYw66uWGxcpap8R4PLTyAOtcrz
VcvIAHolvcbPU7yI69hO5YeVIIm0O2N9XCDc2cZ3J9H4YasWbqVMAlY78su8khrg
BVQuD9HMx76xKk3Xf8r6sgFKdIs3ZEwlZ5f7Z7NEdO/9WSq9Df6pT+Ua6WyXShOs
kDO16CS73u7Cjx8iEiCmMMn0lBfgZn3HpZYHAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUcx/ZAU/z2pgDWcnRcrHtb7PJNG0wHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9jeF9aQVVfejJwZ0RXY25SY3JIdGI3UEpORzAucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAkwDQYJKoZIhvcNAQELBQADggEB
AF5KUj9g4SPDTkZoiJplCtysA5Q90ctSQKJb8fupEp0S5csNkzZaCH+gtmAIfDmP
H6f80TZmDwPwyj3fVrQL328GSQSCCFHAqkB86Uchuw0EO2EnxGzgyUb5st4GkMUS
bmeWEdghk7zQAKoVO51b4vbI10TnCzIfAsOtx9qFvNm7onHmJ50tFPWiSWDKVPJt
i1TPKpGnpH3sloERd/IWkapTzMr1QC/EeRIpXaBeZhn6GxOHyukx2+BtapeRq+cP
0Fdd5XuilnzVtp1/etR7Q050680U1jrTpMd+VR4/FBM+cREd+XdMIytYH3ttbNeG
YQ/mGQ2AL21rNVZl+PXzTrs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org