Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/vDil3XGtvXKGhAKO5S38wcKN9Bk.roa
File: vDil3XGtvXKGhAKO5S38wcKN9Bk.roa (raw, json)
Hash identifier: sYHzjaQWL1m0jG8nEix25hO/qIxrl6jJVEugKg46smA=
Subject key identifier: BC:38:A5:DD:71:AD:BD:72:86:84:02:8E:E5:2D:FC:C1:C2:8D:F4:19
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 42ED
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/vDil3XGtvXKGhAKO5S38wcKN9Bk.roa
Signing time: Thu 10 Feb 2022 00:30:08 +0000
ROA not before: Thu 10 Feb 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17133 (0x42ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 10 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=BC38A5DD71ADBD728684028EE52DFCC1C28DF419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e8:13:d0:35:3f:d1:df:b9:6b:19:56:93:13:
da:c0:34:71:d4:52:65:28:8c:8f:f5:a9:2a:e5:9f:
ab:0f:bb:7b:5c:73:5c:24:9f:46:79:ee:c9:4a:4f:
32:c8:5f:c3:3e:13:a5:27:ee:c6:1b:31:1d:4b:ad:
34:5d:d0:68:d0:74:9c:bd:98:85:2b:18:d2:d2:c3:
e0:30:94:b2:cd:87:2c:6f:b0:fd:53:55:c9:d1:29:
4b:a5:f8:23:c2:51:4c:e6:c2:31:14:ea:18:fc:9e:
83:8c:fb:37:66:d5:bb:85:d5:8a:22:60:8d:b6:d9:
88:1a:e7:50:bd:44:a3:19:9e:2f:c2:a9:26:21:12:
d8:0e:ce:e3:ed:df:88:61:2c:0b:01:3c:92:ac:4c:
c5:3b:5d:30:78:68:b3:3c:62:1e:c5:5b:16:72:17:
17:27:ac:3d:eb:c1:49:b0:ef:cb:67:95:01:55:e9:
fb:1f:02:fe:66:8d:39:4f:76:27:8b:82:17:e4:90:
12:51:58:e1:e1:f2:a7:b3:fd:fb:63:21:fd:f7:25:
54:ef:9e:2e:0d:86:dd:45:c2:3c:4e:62:d0:72:50:
ce:94:49:c0:ed:0f:13:d7:b4:2e:6f:83:fd:a1:82:
9d:18:3a:ce:43:c5:43:2e:ff:44:fd:a0:a8:8a:a0:
79:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:38:A5:DD:71:AD:BD:72:86:84:02:8E:E5:2D:FC:C1:C2:8D:F4:19
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/vDil3XGtvXKGhAKO5S38wcKN9Bk.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
23:34:ac:82:5d:3a:9c:85:9b:7d:1b:0a:85:e0:74:e3:0f:76:
7b:27:6e:66:0b:9f:ce:ce:82:90:15:e0:c2:9c:01:25:a6:29:
9f:d8:0b:c7:2a:57:a9:ff:f4:60:71:48:ff:a5:cd:85:6b:5c:
1c:50:9a:52:4e:b6:c2:8d:ab:6e:4b:68:4f:b6:64:69:20:c3:
c1:3c:76:e7:aa:21:a4:80:f5:05:9b:f8:c4:59:cc:83:fe:43:
0e:eb:ec:b1:06:6c:96:9d:46:1d:d4:2e:02:3f:60:b3:ec:fa:
1c:75:45:92:db:e3:67:32:b0:61:d2:99:76:2e:c6:e5:c6:b9:
b9:c8:f5:4a:1e:39:ef:f1:1d:2e:d2:6e:be:89:ec:07:d0:7e:
f3:96:3c:f2:95:f4:63:08:6a:73:d3:c2:66:5c:38:cf:6e:8a:
78:cc:af:60:5b:70:22:d2:49:93:72:8c:64:e5:34:a2:59:2e:
a9:84:c7:ab:7a:1b:ef:1d:74:91:bd:12:52:27:80:5a:b0:e2:
d5:0c:d6:08:80:5b:a7:e8:07:5c:20:48:5e:3b:72:03:c3:46:
a2:77:23:3c:a6:4c:a6:74:b8:56:cd:ab:d8:d7:30:f7:36:ac:
57:ce:e3:db:63:40:aa:b2:f2:e7:8b:ce:ab:be:15:16:71:fb:
35:85:ba:1e
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICQu0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAyMTAw
MDMwMDhaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKEJDMzhBNURENzFBREJE
NzI4Njg0MDI4RUU1MkRGQ0MxQzI4REY0MTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCr6BPQNT/R37lrGVaTE9rANHHUUmUojI/1qSrln6sPu3tcc1wk
n0Z57slKTzLIX8M+E6Un7sYbMR1LrTRd0GjQdJy9mIUrGNLSw+AwlLLNhyxvsP1T
VcnRKUul+CPCUUzmwjEU6hj8noOM+zdm1buF1YoiYI222Yga51C9RKMZni/CqSYh
EtgOzuPt34hhLAsBPJKsTMU7XTB4aLM8Yh7FWxZyFxcnrD3rwUmw78tnlQFV6fsf
Av5mjTlPdieLghfkkBJRWOHh8qez/ftjIf33JVTvni4Nht1FwjxOYtByUM6UScDt
DxPXtC5vg/2hgp0YOs5DxUMu/0T9oKiKoHmVAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUvDil3XGtvXKGhAKO5S38wcKN9BkwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS92RGlsM1hHdHZYS0doQUtPNVMzOHdjS045Qmsucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAkwDQYJKoZIhvcNAQELBQADggEB
ACM0rIJdOpyFm30bCoXgdOMPdnsnbmYLn87OgpAV4MKcASWmKZ/YC8cqV6n/9GBx
SP+lzYVrXBxQmlJOtsKNq25LaE+2ZGkgw8E8dueqIaSA9QWb+MRZzIP+Qw7r7LEG
bJadRh3ULgI/YLPs+hx1RZLb42cysGHSmXYuxuXGubnI9UoeOe/xHS7Sbr6J7AfQ
fvOWPPKV9GMIanPTwmZcOM9uinjMr2BbcCLSSZNyjGTlNKJZLqmEx6t6G+8ddJG9
ElIngFqw4tUM1giAW6foB1wgSF47cgPDRqJ3IzymTKZ0uFbNq9jXMPc2rFfO49tj
QKqy8ueLzqu+FRZx+zWFuh4=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org