Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/jM5_o7HjWCQD4dFDCsYSFhzffXg.roa
File: jM5_o7HjWCQD4dFDCsYSFhzffXg.roa (raw, json)
Hash identifier: giVLYeiH6O/Hx8bFrHy3TY+oJNtlCUSxbHFrQrELZwI=
Subject key identifier: 8C:CE:7F:A3:B1:E3:58:24:03:E1:D1:43:0A:C6:12:16:1C:DF:7D:78
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 43A2
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/jM5_o7HjWCQD4dFDCsYSFhzffXg.roa
Signing time: Wed 23 Feb 2022 00:30:09 +0000
ROA not before: Wed 23 Feb 2022 00:30:09 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17314 (0x43a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 23 00:30:09 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=8CCE7FA3B1E3582403E1D1430AC612161CDF7D78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:13:d7:d7:25:ab:bd:6d:4e:9d:b8:2e:91:c1:
a1:44:05:e6:71:c2:4d:90:ef:9e:e9:ad:ee:85:01:
7e:c7:59:a9:a6:b8:1e:26:c8:4d:b1:78:98:e9:e3:
3e:5f:e9:aa:84:ea:c7:84:9b:93:70:3e:14:6e:b1:
ce:dd:3f:d1:14:51:2c:9e:1e:65:60:71:77:13:ab:
76:bf:94:76:65:7f:39:bd:45:7b:e4:a3:d9:b9:63:
ae:0d:32:14:81:f8:6d:d6:cc:6a:95:2f:08:88:ff:
5b:e6:6c:34:b3:9d:22:88:92:6b:56:fb:fb:b0:41:
8a:04:ff:d7:05:db:38:22:97:63:27:79:eb:48:3a:
3a:cc:65:a0:5f:b4:24:83:42:c4:bb:8d:d8:ef:2e:
80:a1:fc:67:e9:17:29:83:d1:9f:70:b5:d7:1e:d1:
bb:63:7e:f2:d1:51:31:42:2a:3b:d6:50:9d:a5:63:
cc:ba:a4:05:ce:0e:83:52:36:19:6a:a3:8f:c9:e9:
4e:11:be:34:43:85:8a:af:f4:d2:24:9b:14:3e:56:
90:1b:fa:ea:dd:6f:75:63:17:67:63:4b:52:b1:0b:
a0:3a:91:b7:60:ac:fd:30:3a:a7:ba:46:09:f8:e7:
19:cb:ac:89:74:07:81:3f:be:77:a8:ef:a2:79:48:
42:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CE:7F:A3:B1:E3:58:24:03:E1:D1:43:0A:C6:12:16:1C:DF:7D:78
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/jM5_o7HjWCQD4dFDCsYSFhzffXg.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:93:89:1c:a9:94:df:63:65:b7:2a:59:4d:4e:d9:2a:e0:67:
d8:28:32:c6:a7:2d:85:79:d8:f4:19:00:1d:04:65:1d:aa:f6:
07:e7:c0:5c:9b:f8:44:7a:80:b2:02:64:3b:74:86:dd:b3:95:
eb:7b:51:e5:11:17:73:26:5d:13:97:97:e6:c3:bd:28:05:52:
35:2e:f4:e1:82:90:93:f7:59:d7:ec:62:cf:65:54:2a:9a:98:
60:0f:5f:36:96:7a:53:a4:64:e2:20:a8:4d:0a:a3:83:b1:a4:
4a:b2:01:fd:b5:8a:bd:c1:6e:19:85:0b:07:0f:de:ac:2c:15:
d0:31:2c:c1:3c:93:a6:ca:13:78:f2:97:1c:31:62:ff:0b:99:
9a:6b:82:6f:99:ee:24:31:cf:6c:aa:19:c5:da:5b:d2:ec:94:
bd:83:99:32:57:63:d8:3c:26:8b:0e:b8:29:ef:20:89:56:08:
58:45:50:3a:c3:53:e7:ba:48:45:8e:76:d2:0d:d5:94:9f:f1:
03:77:ac:83:0c:a2:2b:e4:1b:0b:3b:1d:9c:0c:ab:18:a2:c5:
c4:95:53:74:b3:88:01:19:00:68:2e:f4:eb:44:a4:54:01:66:
45:3f:85:61:a4:27:ae:c6:92:75:9f:01:4a:cc:67:7b:f1:2e:
9d:5d:8b:a5
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICQ6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAyMjMw
MDMwMDlaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKDhDQ0U3RkEzQjFFMzU4
MjQwM0UxRDE0MzBBQzYxMjE2MUNERjdENzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAE9fXJau9bU6duC6RwaFEBeZxwk2Q757pre6FAX7HWammuB4m
yE2xeJjp4z5f6aqE6seEm5NwPhRusc7dP9EUUSyeHmVgcXcTq3a/lHZlfzm9RXvk
o9m5Y64NMhSB+G3WzGqVLwiI/1vmbDSznSKIkmtW+/uwQYoE/9cF2zgil2MneetI
OjrMZaBftCSDQsS7jdjvLoCh/GfpFymD0Z9wtdce0btjfvLRUTFCKjvWUJ2lY8y6
pAXODoNSNhlqo4/J6U4RvjRDhYqv9NIkmxQ+VpAb+urdb3VjF2djS1KxC6A6kbdg
rP0wOqe6Rgn45xnLrIl0B4E/vneo76J5SEJ1AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUjM5/o7HjWCQD4dFDCsYSFhzffXgwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9qTTVfbzdIaldDUUQ0ZEZEQ3NZU0ZoemZmWGcucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAkwDQYJKoZIhvcNAQELBQADggEB
AEqTiRyplN9jZbcqWU1O2SrgZ9goMsanLYV52PQZAB0EZR2q9gfnwFyb+ER6gLIC
ZDt0ht2zlet7UeURF3MmXROXl+bDvSgFUjUu9OGCkJP3WdfsYs9lVCqamGAPXzaW
elOkZOIgqE0Ko4OxpEqyAf21ir3BbhmFCwcP3qwsFdAxLME8k6bKE3jylxwxYv8L
mZprgm+Z7iQxz2yqGcXaW9LslL2DmTJXY9g8JosOuCnvIIlWCFhFUDrDU+e6SEWO
dtIN1ZSf8QN3rIMMoivkGws7HZwMqxiixcSVU3SziAEZAGgu9OtEpFQBZkU/hWGk
J67GknWfAUrMZ3vxLp1di6U=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org