Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/lwFFZG-w05jjDV4hkCnK7ii9Ujg.roa
File: lwFFZG-w05jjDV4hkCnK7ii9Ujg.roa (raw, json)
Hash identifier: XdSDu8njWUfYWQeYXGeMafGMOkBV4uaGj6+5234zReU=
Subject key identifier: 97:01:45:64:6F:B0:D3:98:E3:0D:5E:21:90:29:CA:EE:28:BD:52:38
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 48F3
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/lwFFZG-w05jjDV4hkCnK7ii9Ujg.roa
Signing time: Tue 31 May 2022 00:30:11 +0000
ROA not before: Tue 31 May 2022 00:30:11 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18675 (0x48f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 31 00:30:11 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=970145646FB0D398E30D5E219029CAEE28BD5238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:51:88:9b:c2:90:05:c8:4d:e3:cc:13:47:1d:
99:b0:07:97:c1:d0:d8:1f:46:9c:b1:2b:d0:38:0d:
95:83:56:8f:fd:a8:49:ee:44:6c:7a:a6:a3:f4:75:
54:ef:18:c1:e8:0b:67:c1:df:8e:ec:58:78:12:a6:
bb:05:a5:d2:02:f2:d7:22:28:f8:84:c4:90:e3:62:
19:e3:ae:ce:19:b7:c8:36:7e:10:78:64:22:c6:11:
6f:44:80:87:47:55:20:60:10:68:3c:25:37:67:22:
43:79:6a:88:bf:78:fc:8f:27:6d:a8:43:e2:32:c2:
09:0d:7f:04:5a:32:2b:a3:da:b4:1c:cd:80:fa:fb:
31:93:b0:c1:fe:67:d2:fe:19:91:d9:37:89:87:93:
b1:58:2b:86:25:cd:aa:f5:a1:20:b9:1f:47:02:d3:
fb:2f:19:5d:5b:c7:eb:dc:1f:5e:05:9f:53:75:26:
dc:73:4c:cf:44:72:64:5a:c9:09:47:c1:1f:db:00:
5a:65:1d:9c:58:45:27:80:39:13:2a:44:df:6d:3c:
95:13:df:0e:08:b1:91:8e:01:44:b7:dc:7b:2d:59:
52:b5:7a:f0:36:a3:7c:33:ff:1b:d2:73:6c:f8:2d:
d7:95:b0:38:e1:d3:12:f1:e0:08:3c:41:49:ec:75:
b3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:01:45:64:6F:B0:D3:98:E3:0D:5E:21:90:29:CA:EE:28:BD:52:38
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/lwFFZG-w05jjDV4hkCnK7ii9Ujg.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.8.0/24
Signature Algorithm: sha256WithRSAEncryption
88:0b:d3:fc:f3:5a:ff:fb:5f:f9:af:a5:e6:1d:f5:45:9e:9a:
ca:a5:5e:4d:7a:25:25:9e:bf:e9:83:35:31:b2:c4:58:e8:f6:
66:46:3e:eb:bb:78:ce:5c:b6:27:ff:59:cc:0c:ee:9b:0e:0d:
11:9e:01:1c:d2:6e:da:7a:83:68:74:9a:e9:e4:b1:0e:f4:28:
f5:b8:83:23:83:f6:b1:c8:f3:6a:eb:b6:e2:4b:72:46:4e:77:
1c:c2:00:ac:21:45:e1:a2:dc:8b:c5:d5:02:82:f1:a5:86:87:
f3:b4:07:20:20:50:de:ba:6b:20:99:e6:d2:68:48:e4:63:0c:
7c:25:df:fd:75:93:32:2e:eb:a0:9a:02:78:8c:62:20:10:ab:
bd:34:c3:8c:dc:b4:df:fa:c9:85:80:22:e9:83:68:ce:b9:98:
af:a9:24:e3:dc:94:c8:64:6a:2a:5a:55:4e:34:87:d7:77:c3:
28:75:f1:82:37:b2:13:45:65:cf:a7:c7:d6:72:ed:7d:0a:bb:
70:8d:d3:77:c4:90:da:47:82:1e:71:51:25:9b:6c:e4:f1:67:
4c:e5:f9:23:89:78:3a:bf:4a:8c:d1:d2:48:0b:c2:85:fb:ed:
42:02:a0:f8:b1:0d:f1:da:71:62:a8:8e:bb:42:38:6d:af:4d:
29:90:42:b4
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICSPMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA1MzEw
MDMwMTFaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDk3MDE0NTY0NkZCMEQz
OThFMzBENUUyMTkwMjlDQUVFMjhCRDUyMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+UYibwpAFyE3jzBNHHZmwB5fB0NgfRpyxK9A4DZWDVo/9qEnu
RGx6pqP0dVTvGMHoC2fB347sWHgSprsFpdIC8tciKPiExJDjYhnjrs4Zt8g2fhB4
ZCLGEW9EgIdHVSBgEGg8JTdnIkN5aoi/ePyPJ22oQ+IywgkNfwRaMiuj2rQczYD6
+zGTsMH+Z9L+GZHZN4mHk7FYK4Ylzar1oSC5H0cC0/svGV1bx+vcH14Fn1N1Jtxz
TM9EcmRayQlHwR/bAFplHZxYRSeAORMqRN9tPJUT3w4IsZGOAUS33HstWVK1evA2
o3wz/xvSc2z4LdeVsDjh0xLx4Ag8QUnsdbO1AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUlwFFZG+w05jjDV4hkCnK7ii9UjgwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9sd0ZGWkctdzA1ampEVjRoa0NuSzdpaTlVamcucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAgwDQYJKoZIhvcNAQELBQADggEB
AIgL0/zzWv/7X/mvpeYd9UWemsqlXk16JSWev+mDNTGyxFjo9mZGPuu7eM5ctif/
WcwM7psODRGeARzSbtp6g2h0munksQ70KPW4gyOD9rHI82rrtuJLckZOdxzCAKwh
ReGi3IvF1QKC8aWGh/O0ByAgUN66ayCZ5tJoSORjDHwl3/11kzIu66CaAniMYiAQ
q700w4zctN/6yYWAIumDaM65mK+pJOPclMhkaipaVU40h9d3wyh18YI3shNFZc+n
x9Zy7X0Ku3CN03fEkNpHgh5xUSWbbOTxZ0zl+SOJeDq/SozR0kgLwoX77UICoPix
DfHacWKojrtCOG2vTSmQQrQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org