Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/i69-k_OKdyM2D6LyBAMiljS6Huk.roa
File: i69-k_OKdyM2D6LyBAMiljS6Huk.roa (raw, json)
Hash identifier: H0sU4M5Jd/95YFG7dxTwKvLDqapyhrxSVL70JZyihuI=
Subject key identifier: 8B:AF:7E:93:F3:8A:77:23:36:0F:A2:F2:04:03:22:96:34:BA:1E:E9
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4902
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/i69-k_OKdyM2D6LyBAMiljS6Huk.roa
Signing time: Wed 01 Jun 2022 00:30:07 +0000
ROA not before: Wed 01 Jun 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18690 (0x4902)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 1 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=8BAF7E93F38A7723360FA2F20403229634BA1EE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c9:ab:6b:e1:0d:4f:af:ae:ee:8f:55:e1:0b:
67:22:2b:50:f7:8c:d4:30:f7:14:5f:ab:22:6d:97:
ed:e4:c2:02:28:e8:7c:bd:b4:b4:b9:0c:b1:7f:8a:
93:c6:ab:28:12:26:a3:6a:bc:e9:49:8c:4d:6b:a7:
e8:4a:cd:59:72:18:49:71:84:c2:3c:8f:65:7e:14:
9f:d4:e9:8d:d5:82:49:23:df:46:7b:39:3f:d7:82:
13:c0:06:a6:cc:1f:e5:c8:41:ec:42:f9:03:a2:45:
83:c9:19:11:86:1d:30:4e:18:dc:5c:bf:83:a7:22:
4a:d5:da:b9:3d:5c:7c:47:ec:3a:d0:ac:5b:6c:fa:
ae:49:44:16:a6:d5:90:2b:00:e8:c3:f3:2c:c7:22:
e2:6d:ec:9d:a3:4b:39:98:dd:1d:f7:11:90:36:f7:
a9:9b:a6:9d:83:a5:9f:36:ab:65:07:5d:8d:0b:63:
e2:f9:b0:b4:42:36:8a:76:dc:21:64:82:28:05:44:
c3:a6:10:ca:ef:cb:20:f3:12:39:55:88:8b:74:87:
dc:98:ba:a8:1b:a6:a2:aa:88:2f:1f:65:f2:9e:0f:
79:15:30:52:bd:71:b2:bd:46:cd:d3:26:4d:e9:ef:
ee:5b:70:ab:bb:df:2a:fc:a7:ef:58:02:42:6a:3e:
10:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:AF:7E:93:F3:8A:77:23:36:0F:A2:F2:04:03:22:96:34:BA:1E:E9
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/i69-k_OKdyM2D6LyBAMiljS6Huk.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
68:84:44:99:78:27:14:7c:ff:42:70:73:87:2d:48:05:82:00:
13:db:e2:01:76:b7:11:d2:6b:7d:48:cb:4e:7b:94:42:6f:d5:
45:de:01:c8:53:3a:60:bb:c5:c7:61:cd:9f:5a:e0:34:9f:89:
cc:23:eb:6d:3d:e9:68:6d:a3:c6:63:0d:b0:a8:76:1e:53:9f:
2e:f7:4b:9e:eb:f8:be:00:86:89:f5:0f:85:2e:b5:9a:11:e2:
1d:6d:85:8a:96:3d:46:d6:8b:af:d6:50:ac:ad:8b:1e:3c:74:
5f:e7:5b:ca:73:09:62:8d:55:cc:60:d0:c5:9f:7c:b6:20:aa:
42:af:55:cf:7b:5a:21:57:9a:f8:23:1c:41:ba:61:fc:92:80:
a0:e3:58:ab:85:43:8f:c1:9e:d6:80:db:df:1c:b4:d2:29:3a:
c4:97:2e:eb:46:6c:5a:99:8d:61:3b:d2:b7:d8:ad:88:18:53:
98:43:72:45:00:cc:69:e9:bb:bb:94:88:d0:99:34:60:be:ba:
be:4c:d4:ba:88:54:06:b9:f9:d1:ed:27:ed:3e:5d:f6:e1:49:
08:d7:94:5f:a5:14:06:96:fa:7e:db:56:7e:a3:06:62:00:70:
43:2d:9c:02:b5:d5:dd:b2:71:a7:e0:10:30:b6:42:ca:d1:72:
1b:1f:46:7c
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICSQIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA2MDEw
MDMwMDdaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDhCQUY3RTkzRjM4QTc3
MjMzNjBGQTJGMjA0MDMyMjk2MzRCQTFFRTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXyatr4Q1Pr67uj1XhC2ciK1D3jNQw9xRfqyJtl+3kwgIo6Hy9
tLS5DLF/ipPGqygSJqNqvOlJjE1rp+hKzVlyGElxhMI8j2V+FJ/U6Y3Vgkkj30Z7
OT/XghPABqbMH+XIQexC+QOiRYPJGRGGHTBOGNxcv4OnIkrV2rk9XHxH7DrQrFts
+q5JRBam1ZArAOjD8yzHIuJt7J2jSzmY3R33EZA296mbpp2DpZ82q2UHXY0LY+L5
sLRCNop23CFkgigFRMOmEMrvyyDzEjlViIt0h9yYuqgbpqKqiC8fZfKeD3kVMFK9
cbK9Rs3TJk3p7+5bcKu73yr8p+9YAkJqPhC3AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUi69+k/OKdyM2D6LyBAMiljS6HukwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9pNjkta19PS2R5TTJENkx5QkFNaWxqUzZIdWsucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHA8wDQYJKoZIhvcNAQELBQADggEB
AGiERJl4JxR8/0Jwc4ctSAWCABPb4gF2txHSa31Iy057lEJv1UXeAchTOmC7xcdh
zZ9a4DSficwj62096Whto8ZjDbCodh5Tny73S57r+L4Ahon1D4UutZoR4h1thYqW
PUbWi6/WUKytix48dF/nW8pzCWKNVcxg0MWffLYgqkKvVc97WiFXmvgjHEG6YfyS
gKDjWKuFQ4/BntaA298ctNIpOsSXLutGbFqZjWE70rfYrYgYU5hDckUAzGnpu7uU
iNCZNGC+ur5M1LqIVAa5+dHtJ+0+XfbhSQjXlF+lFAaW+n7bVn6jBmIAcEMtnAK1
1d2ycafgEDC2QsrRchsfRnw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org