Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/v--5GsPgi204hCM1E3r3W0JVxcU.roa
File: v--5GsPgi204hCM1E3r3W0JVxcU.roa (raw, json)
Hash identifier: g3A1A7E/bET5J6QQcAsLwoD2/wWj7vIBzwTAgS8m9lc=
Subject key identifier: BF:EF:B9:1A:C3:E0:8B:6D:38:84:23:35:13:7A:F7:5B:42:55:C5:C5
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 47C6
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/v--5GsPgi204hCM1E3r3W0JVxcU.roa
Signing time: Tue 10 May 2022 00:30:09 +0000
ROA not before: Tue 10 May 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18374 (0x47c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 10 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=BFEFB91AC3E08B6D38842335137AF75B4255C5C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e0:da:03:ec:ce:5b:c7:f2:ae:24:2e:38:6d:
9d:a7:0e:75:c2:1f:5e:d3:90:82:0a:f5:10:56:ad:
4d:c0:bf:62:14:85:e9:62:67:8f:78:df:de:a7:8e:
3a:d0:65:22:11:10:f7:c3:e5:a3:a5:2f:91:71:92:
14:a2:29:95:96:0a:6e:d4:40:2d:e8:6b:ea:91:91:
ba:2f:6b:eb:20:81:54:be:35:8a:f6:96:d7:87:33:
80:dc:59:55:aa:35:e7:d6:e0:27:16:b3:73:e5:ff:
25:75:d3:48:1a:ae:b0:db:d6:11:dc:dd:70:38:5c:
be:fc:91:67:c4:3b:13:77:71:e1:ac:fb:81:65:a4:
47:b0:52:b2:80:94:7c:86:ef:35:43:ee:4a:7f:92:
de:33:65:b0:24:bd:44:2a:c5:ca:b8:5a:4f:38:90:
70:52:93:ee:65:31:00:e4:f2:0e:ee:bb:66:6f:da:
db:eb:e9:ff:5c:cf:ca:be:98:5b:b2:04:d1:86:2f:
cf:df:36:9f:43:69:ca:f9:a6:ef:f9:36:41:97:60:
12:62:09:82:22:2e:45:87:ef:27:ac:ca:78:0e:bf:
5b:75:29:d5:b2:aa:31:86:16:bd:95:1b:f2:66:9f:
cd:31:d4:a8:c3:89:e8:38:04:12:1b:64:f4:26:b5:
ca:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:EF:B9:1A:C3:E0:8B:6D:38:84:23:35:13:7A:F7:5B:42:55:C5:C5
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/v--5GsPgi204hCM1E3r3W0JVxcU.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:b5:e6:f3:dd:e8:2c:15:55:5c:4f:5a:7e:db:11:6c:be:fe:
a2:e0:f0:1c:1a:14:38:1d:fe:72:ea:a6:ea:23:5e:fb:9a:fa:
8e:29:0e:66:8d:15:91:03:27:de:40:fb:40:50:14:34:8e:d3:
46:56:75:70:4f:7d:14:e7:76:34:bc:2f:6c:91:29:e2:c6:ca:
d0:bf:8c:1d:10:09:b2:ff:27:3d:b7:61:1b:64:23:e4:7c:1a:
ad:3e:76:54:a6:ef:33:af:d8:ff:8f:b3:1a:c7:1c:8f:ea:41:
d1:a0:3d:94:cd:ec:9b:b3:3d:b1:5f:b7:90:d5:05:ea:34:79:
d5:10:73:13:a1:e3:df:65:9d:af:a3:32:7c:91:f8:ec:0a:0c:
71:76:66:6d:0f:84:75:36:b3:cb:65:22:68:b7:54:98:39:6b:
00:0f:46:e9:ea:61:87:a2:4b:53:47:a4:d2:fd:89:a4:a8:d0:
61:1d:58:a0:18:fc:50:f4:c9:6b:c6:b6:c4:29:ac:e9:99:41:
1e:d6:c7:72:0a:62:d4:4f:83:ee:04:ad:aa:f4:5d:0d:6c:af:
bb:30:1f:54:bf:88:9e:00:98:a8:c0:45:3e:d7:2d:5e:c4:5c:
f4:03:92:01:a7:ad:97:da:c8:fc:d8:e4:27:7a:c4:ec:1f:c7:
07:55:39:54
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICR8YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA1MTAw
MDMwMDlaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKEJGRUZCOTFBQzNFMDhC
NkQzODg0MjMzNTEzN0FGNzVCNDI1NUM1QzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCy4NoD7M5bx/KuJC44bZ2nDnXCH17TkIIK9RBWrU3Av2IUheli
Z494396njjrQZSIREPfD5aOlL5FxkhSiKZWWCm7UQC3oa+qRkbova+sggVS+NYr2
lteHM4DcWVWqNefW4CcWs3Pl/yV100garrDb1hHc3XA4XL78kWfEOxN3ceGs+4Fl
pEewUrKAlHyG7zVD7kp/kt4zZbAkvUQqxcq4Wk84kHBSk+5lMQDk8g7uu2Zv2tvr
6f9cz8q+mFuyBNGGL8/fNp9Dacr5pu/5NkGXYBJiCYIiLkWH7yesyngOv1t1KdWy
qjGGFr2VG/Jmn80x1KjDieg4BBIbZPQmtcq7AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUv++5GsPgi204hCM1E3r3W0JVxcUwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS92LS01R3NQZ2kyMDRoQ00xRTNyM1cwSlZ4Y1Uucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHA0wDQYJKoZIhvcNAQELBQADggEB
AAu15vPd6CwVVVxPWn7bEWy+/qLg8BwaFDgd/nLqpuojXvua+o4pDmaNFZEDJ95A
+0BQFDSO00ZWdXBPfRTndjS8L2yRKeLGytC/jB0QCbL/Jz23YRtkI+R8Gq0+dlSm
7zOv2P+PsxrHHI/qQdGgPZTN7JuzPbFft5DVBeo0edUQcxOh499lna+jMnyR+OwK
DHF2Zm0PhHU2s8tlImi3VJg5awAPRunqYYeiS1NHpNL9iaSo0GEdWKAY/FD0yWvG
tsQprOmZQR7Wx3IKYtRPg+4Erar0XQ1sr7swH1S/iJ4AmKjART7XLV7EXPQDkgGn
rZfayPzY5Cd6xOwfxwdVOVQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org