Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/pef5GJmkwxdPoaXXG4lZ6D-gJZg.roa
File: pef5GJmkwxdPoaXXG4lZ6D-gJZg.roa (raw, json)
Hash identifier: QBw3WQv3+8Sutytf+y5rilyOrDr+0COoty0PeWGjujo=
Subject key identifier: A5:E7:F9:18:99:A4:C3:17:4F:A1:A5:D7:1B:89:59:E8:3F:A0:25:98
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 46D4
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/pef5GJmkwxdPoaXXG4lZ6D-gJZg.roa
Signing time: Sat 23 Apr 2022 00:30:07 +0000
ROA not before: Sat 23 Apr 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18132 (0x46d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 23 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=A5E7F91899A4C3174FA1A5D71B8959E83FA02598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:97:be:e1:b9:c6:9b:a6:71:f7:ee:25:0e:c5:
fb:31:2f:c0:95:91:7f:f4:56:a3:1f:02:80:3e:1f:
dd:51:93:b9:2d:99:a6:18:2f:bc:c0:c3:d9:bb:eb:
09:d7:73:55:a1:ed:bd:19:0a:a8:91:83:3f:b0:18:
b0:dd:17:2c:b6:6f:5e:37:61:7e:c8:7e:9d:92:6c:
b5:87:d0:5b:7c:c3:3d:ce:9f:69:d2:88:91:3c:6b:
97:31:fe:94:0d:04:2e:8f:8e:f7:4c:d6:e1:b7:3f:
4f:cb:4d:ce:7f:54:36:0b:02:8d:a1:e1:0a:79:b1:
f9:ca:f6:80:37:ff:bc:18:1f:ef:1a:5e:09:20:01:
15:12:f4:45:31:98:28:57:5d:24:2b:66:47:fc:fb:
31:79:d5:00:92:5b:68:d0:b5:8b:10:74:48:05:82:
b8:78:4d:d2:7d:1c:cc:93:46:b7:58:c1:67:dd:61:
d1:03:ca:7a:83:4a:88:50:e2:98:4e:b7:a7:1d:14:
bd:d1:4c:ef:cb:af:77:5e:16:04:f3:c2:55:b7:b1:
79:79:88:29:52:ca:99:12:3d:81:6d:77:3d:98:cb:
23:6e:eb:ec:60:d2:0e:06:f3:e0:15:2e:81:79:a0:
1e:8c:00:85:5b:dc:21:f8:06:20:98:a1:a0:d5:ed:
b0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E7:F9:18:99:A4:C3:17:4F:A1:A5:D7:1B:89:59:E8:3F:A0:25:98
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/pef5GJmkwxdPoaXXG4lZ6D-gJZg.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
34:7a:91:cb:db:a7:d3:d1:c4:ca:aa:29:0a:8d:99:2e:44:5c:
2a:be:e8:f2:66:98:70:4a:27:26:8f:e9:a5:9a:fd:62:54:86:
18:04:09:60:11:9a:68:39:9e:2f:82:26:2d:c2:4c:c1:58:44:
bf:cd:72:8b:13:1b:ae:6c:54:36:ea:32:84:0b:d6:01:05:70:
03:62:8a:22:95:b3:22:f4:3c:ec:71:4c:52:12:16:87:7e:0e:
8e:11:6a:5c:ae:7c:fe:60:36:52:1b:09:fe:b8:68:09:64:30:
cf:12:85:4b:f6:78:2f:41:53:8a:01:39:35:31:2e:8c:4a:35:
d8:49:c2:c6:4f:03:9b:89:67:94:45:97:ec:bd:be:c6:21:ca:
45:3f:ea:99:9c:40:40:e0:d3:8f:73:5c:95:e9:71:97:c9:cd:
95:c3:37:e5:23:cb:60:a8:eb:f7:70:5a:4b:ea:71:a5:41:20:
4c:b9:97:71:87:a0:32:75:18:ad:e5:50:0c:6f:21:2c:13:77:
fa:a0:27:63:46:07:12:c1:4d:b9:7d:2d:08:b7:3a:29:93:91:
6b:8d:10:c4:45:f1:b0:a4:80:cc:58:43:fe:98:5a:28:98:ca:
4d:75:38:18:70:a6:b5:eb:b6:13:a8:8d:e0:ae:41:ae:c9:8c:
bd:6f:e4:60
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRtQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA0MjMw
MDMwMDdaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKEE1RTdGOTE4OTlBNEMz
MTc0RkExQTVENzFCODk1OUU4M0ZBMDI1OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGl77hucabpnH37iUOxfsxL8CVkX/0VqMfAoA+H91Rk7ktmaYY
L7zAw9m76wnXc1Wh7b0ZCqiRgz+wGLDdFyy2b143YX7Ifp2SbLWH0Ft8wz3On2nS
iJE8a5cx/pQNBC6PjvdM1uG3P0/LTc5/VDYLAo2h4Qp5sfnK9oA3/7wYH+8aXgkg
ARUS9EUxmChXXSQrZkf8+zF51QCSW2jQtYsQdEgFgrh4TdJ9HMyTRrdYwWfdYdED
ynqDSohQ4phOt6cdFL3RTO/Lr3deFgTzwlW3sXl5iClSypkSPYFtdz2YyyNu6+xg
0g4G8+AVLoF5oB6MAIVb3CH4BiCYoaDV7bDTAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUpef5GJmkwxdPoaXXG4lZ6D+gJZgwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9wZWY1R0pta3d4ZFBvYVhYRzRsWjZELWdKWmcucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAUwDQYJKoZIhvcNAQELBQADggEB
ADR6kcvbp9PRxMqqKQqNmS5EXCq+6PJmmHBKJyaP6aWa/WJUhhgECWARmmg5ni+C
Ji3CTMFYRL/NcosTG65sVDbqMoQL1gEFcANiiiKVsyL0POxxTFISFod+Do4Ralyu
fP5gNlIbCf64aAlkMM8ShUv2eC9BU4oBOTUxLoxKNdhJwsZPA5uJZ5RFl+y9vsYh
ykU/6pmcQEDg049zXJXpcZfJzZXDN+Ujy2Co6/dwWkvqcaVBIEy5l3GHoDJ1GK3l
UAxvISwTd/qgJ2NGBxLBTbl9LQi3OimTkWuNEMRF8bCkgMxYQ/6YWiiYyk11OBhw
prXrthOojeCuQa7JjL1v5GA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org