Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/seQFxhczHOYX2cLIA6G5fMTIZv4.roa
File: seQFxhczHOYX2cLIA6G5fMTIZv4.roa (raw, json)
Hash identifier: /xzxXYbO8JTO58XsYE0piK2nVlAZxQ9Z8NDWzmJkJS8=
Subject key identifier: B1:E4:05:C6:17:33:1C:E6:17:D9:C2:C8:03:A1:B9:7C:C4:C8:66:FE
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 441E
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/seQFxhczHOYX2cLIA6G5fMTIZv4.roa
Signing time: Fri 04 Mar 2022 00:30:09 +0000
ROA not before: Fri 04 Mar 2022 00:30:09 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17438 (0x441e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 4 00:30:09 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=B1E405C617331CE617D9C2C803A1B97CC4C866FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:22:6d:f3:2f:87:fc:7e:82:82:45:99:a8:74:
c9:87:90:49:9f:af:ef:ba:b5:f0:01:fc:3c:5e:9c:
35:07:61:49:79:7a:02:f4:39:1c:f2:0f:43:65:e4:
99:3f:f1:d0:4a:c0:51:cf:48:cf:c9:13:9e:fb:3e:
25:5b:ab:23:27:57:36:50:b0:30:30:14:22:04:45:
27:07:6c:c0:5e:29:d9:4f:82:fa:93:37:84:25:26:
50:51:6a:27:ca:29:71:1a:9e:ec:23:c2:21:77:ae:
eb:e5:65:d2:1c:e7:3f:3b:be:bc:fc:f8:45:d8:19:
1d:af:22:2e:9a:5e:c5:7d:ef:c4:da:08:55:43:34:
f0:26:b9:da:f2:24:f2:a0:9f:61:a3:90:2a:e3:f1:
a7:27:a1:85:50:94:38:61:0b:67:01:a1:99:86:f8:
5e:4f:62:44:4a:3d:89:95:8a:57:fa:34:a1:cd:dd:
b3:32:6b:9c:f9:f5:31:7f:50:cf:6e:14:18:85:68:
c1:8a:10:bc:91:e9:b2:3e:db:a3:f1:c6:ae:a9:fe:
40:6b:80:7e:f1:a0:2b:4c:d8:be:fc:18:28:98:ef:
23:4c:8d:5e:50:29:c7:47:90:92:c2:fe:64:c4:56:
be:0e:4c:f5:e5:8b:ff:ed:6d:f3:fd:8e:80:19:ee:
7d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E4:05:C6:17:33:1C:E6:17:D9:C2:C8:03:A1:B9:7C:C4:C8:66:FE
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/seQFxhczHOYX2cLIA6G5fMTIZv4.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:7c:49:2f:2f:9d:41:30:3d:46:c0:db:5d:b8:a3:9c:a9:c4:
bb:96:b8:97:f8:28:60:21:3f:7b:ea:a9:d2:56:b8:98:09:8b:
80:39:c3:08:df:14:ab:d1:65:ee:0c:c1:0e:51:24:6c:4f:0f:
a2:73:56:73:6b:96:33:8e:b6:cc:33:11:c8:e3:73:41:53:8f:
f3:b3:2a:a5:96:fe:41:7d:34:d6:09:e3:1a:59:e9:fa:29:95:
4c:4d:8e:19:7e:78:ad:21:a8:b5:56:64:77:f2:01:87:24:0d:
12:d2:d1:f4:a6:2c:b7:65:6b:fc:13:af:d3:38:f5:32:5c:b5:
79:04:77:4a:9e:b9:a8:46:aa:16:b0:44:ec:0f:9e:72:3e:69:
27:dc:5c:89:ce:71:5d:56:02:74:21:55:c1:dd:9b:51:c4:69:
a8:1a:ac:40:c7:eb:d1:ab:60:d4:84:9e:7c:4b:8e:39:18:2a:
e0:0c:dd:0e:36:50:86:9f:7c:39:2f:93:b1:ab:de:65:e2:6f:
e1:8b:53:19:9a:1a:b2:90:52:30:a6:1b:89:63:b9:d4:61:99:
9e:a5:89:ac:0c:c8:5b:85:b2:0b:7f:83:ff:31:01:7f:a4:c5:
98:52:b0:8a:56:41:50:63:1c:d0:d5:f0:1d:4f:6f:fa:cb:9d:
08:dd:7e:33
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRB4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAzMDQw
MDMwMDlaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKEIxRTQwNUM2MTczMzFD
RTYxN0Q5QzJDODAzQTFCOTdDQzRDODY2RkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFIm3zL4f8foKCRZmodMmHkEmfr++6tfAB/DxenDUHYUl5egL0
ORzyD0Nl5Jk/8dBKwFHPSM/JE577PiVbqyMnVzZQsDAwFCIERScHbMBeKdlPgvqT
N4QlJlBRaifKKXEanuwjwiF3ruvlZdIc5z87vrz8+EXYGR2vIi6aXsV978TaCFVD
NPAmudryJPKgn2GjkCrj8acnoYVQlDhhC2cBoZmG+F5PYkRKPYmVilf6NKHN3bMy
a5z59TF/UM9uFBiFaMGKELyR6bI+26Pxxq6p/kBrgH7xoCtM2L78GCiY7yNMjV5Q
KcdHkJLC/mTEVr4OTPXli//tbfP9joAZ7n1zAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUseQFxhczHOYX2cLIA6G5fMTIZv4wHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9zZVFGeGhjekhPWVgyY0xJQTZHNWZNVEladjQucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAMwDQYJKoZIhvcNAQELBQADggEB
AJ98SS8vnUEwPUbA2124o5ypxLuWuJf4KGAhP3vqqdJWuJgJi4A5wwjfFKvRZe4M
wQ5RJGxPD6JzVnNrljOOtswzEcjjc0FTj/OzKqWW/kF9NNYJ4xpZ6foplUxNjhl+
eK0hqLVWZHfyAYckDRLS0fSmLLdla/wTr9M49TJctXkEd0qeuahGqhawROwPnnI+
aSfcXInOcV1WAnQhVcHdm1HEaagarEDH69GrYNSEnnxLjjkYKuAM3Q42UIaffDkv
k7Gr3mXib+GLUxmaGrKQUjCmG4ljudRhmZ6liawMyFuFsgt/g/8xAX+kxZhSsIpW
QVBjHNDV8B1Pb/rLnQjdfjM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org