Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/vP3BTrJWZThbO1CjephCQ6nf4GU.roa
File: vP3BTrJWZThbO1CjephCQ6nf4GU.roa (raw, json)
Hash identifier: 6ucRE9XUSCczJEddmVmlD/nvp0tVmn3Bm6UdUg5wFlE=
Subject key identifier: BC:FD:C1:4E:B2:56:65:38:5B:3B:50:A3:7A:98:42:43:A9:DF:E0:65
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 44A7
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/vP3BTrJWZThbO1CjephCQ6nf4GU.roa
Signing time: Mon 14 Mar 2022 00:30:09 +0000
ROA not before: Mon 14 Mar 2022 00:30:09 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17575 (0x44a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 14 00:30:09 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=BCFDC14EB25665385B3B50A37A984243A9DFE065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:16:8d:06:90:53:9e:b9:21:11:94:6f:9b:fe:
8d:a8:ef:2f:7e:4b:68:e7:ca:69:a7:7c:42:80:1e:
70:50:95:ec:d0:ca:29:3a:74:e0:ec:0c:62:58:6c:
fa:70:0e:80:5e:50:47:93:47:ab:19:2c:0f:b0:f7:
10:8b:26:2f:b0:ed:b2:44:f1:c0:1b:fe:bf:44:e1:
12:6e:08:80:5b:b3:af:89:64:11:8c:5f:3d:f1:3d:
43:d9:12:1a:33:4d:a6:cc:92:e4:f0:3f:be:8e:d0:
9d:1b:81:8b:06:5b:4d:fb:3c:6b:7c:fb:e7:da:dd:
5a:e4:70:aa:df:74:95:c6:a0:6b:d5:62:37:4b:0e:
bc:bc:94:e4:2c:bb:0f:3c:1a:02:f7:cb:5b:be:db:
93:9b:8a:c1:fc:b4:e2:fc:8b:17:5f:f8:1e:af:6b:
81:e2:4b:7a:26:8e:1c:ec:1f:ce:c7:8b:c9:84:28:
b4:84:15:f3:1b:bd:51:07:d1:3b:1e:e0:0e:d3:28:
17:13:24:18:2d:44:f8:56:e7:c8:e4:8b:66:fd:f5:
1f:8a:3f:0a:60:97:8c:4b:8f:0f:ca:a2:cc:e0:8e:
6d:5c:73:60:f6:f4:02:23:e7:3b:a8:91:ee:91:f2:
96:16:29:2b:18:25:c7:d2:1b:38:d6:22:f6:ec:d6:
84:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FD:C1:4E:B2:56:65:38:5B:3B:50:A3:7A:98:42:43:A9:DF:E0:65
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/vP3BTrJWZThbO1CjephCQ6nf4GU.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
90:f3:9a:be:2b:f7:6c:22:2a:2a:60:fc:fb:d2:9c:45:30:53:
e7:7c:36:19:f3:4d:da:b9:a2:af:f3:4d:e9:ea:3f:95:25:15:
5f:ce:c8:8c:ad:32:88:6e:7b:b4:97:08:ca:75:57:77:c7:4c:
e3:dc:59:9d:c9:96:2d:2f:eb:8e:30:e8:16:25:e5:3b:49:81:
88:39:0d:e4:3f:b7:34:2b:83:85:a2:e2:7e:36:8b:d8:fe:68:
07:c2:d4:a8:51:25:25:f2:4f:ae:99:54:ae:ae:e1:97:e0:95:
fd:28:7f:32:f4:ae:f7:d0:65:c3:ce:cc:06:b6:05:ba:bc:69:
90:d0:11:ef:05:1b:ac:52:f0:a3:5b:30:96:15:20:16:8e:cb:
d6:df:3c:c7:c7:6e:f2:09:58:f0:d7:2c:21:fb:ae:87:e9:a6:
0c:47:eb:34:6a:9a:10:57:b6:1f:e8:ff:9b:dc:61:3b:d9:28:
a1:0c:83:85:43:9a:c4:c4:8a:ec:69:75:f9:81:35:d7:91:0a:
f8:c9:25:6c:84:1a:ff:ed:7e:e8:74:2f:3c:d3:11:d4:1e:89:
fe:81:3d:74:24:9d:4d:b1:39:48:58:db:42:88:91:a6:6a:af:
d7:c7:5e:9f:e8:4f:cb:a0:8b:2b:3c:63:92:cf:a6:c7:09:38:
94:ae:5f:d4
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRKcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAzMTQw
MDMwMDlaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKEJDRkRDMTRFQjI1NjY1
Mzg1QjNCNTBBMzdBOTg0MjQzQTlERkUwNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPFo0GkFOeuSERlG+b/o2o7y9+S2jnymmnfEKAHnBQlezQyik6
dODsDGJYbPpwDoBeUEeTR6sZLA+w9xCLJi+w7bJE8cAb/r9E4RJuCIBbs6+JZBGM
Xz3xPUPZEhozTabMkuTwP76O0J0bgYsGW037PGt8++fa3VrkcKrfdJXGoGvVYjdL
Dry8lOQsuw88GgL3y1u+25ObisH8tOL8ixdf+B6va4HiS3omjhzsH87Hi8mEKLSE
FfMbvVEH0Tse4A7TKBcTJBgtRPhW58jki2b99R+KPwpgl4xLjw/Koszgjm1cc2D2
9AIj5zuoke6R8pYWKSsYJcfSGzjWIvbs1oQ/AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUvP3BTrJWZThbO1CjephCQ6nf4GUwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS92UDNCVHJKV1pUaGJPMUNqZXBoQ1E2bmY0R1Uucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAMwDQYJKoZIhvcNAQELBQADggEB
AJDzmr4r92wiKipg/PvSnEUwU+d8NhnzTdq5oq/zTenqP5UlFV/OyIytMohue7SX
CMp1V3fHTOPcWZ3Jli0v644w6BYl5TtJgYg5DeQ/tzQrg4Wi4n42i9j+aAfC1KhR
JSXyT66ZVK6u4Zfglf0ofzL0rvfQZcPOzAa2Bbq8aZDQEe8FG6xS8KNbMJYVIBaO
y9bfPMfHbvIJWPDXLCH7rofppgxH6zRqmhBXth/o/5vcYTvZKKEMg4VDmsTEiuxp
dfmBNdeRCvjJJWyEGv/tfuh0LzzTEdQeif6BPXQknU2xOUhY20KIkaZqr9fHXp/o
T8ugiys8Y5LPpscJOJSuX9Q=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org