Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/w_YdHKQ2vHchSTSMTF_KhOFd5AE.roa
File: w_YdHKQ2vHchSTSMTF_KhOFd5AE.roa (raw, json)
Hash identifier: zVQqMsvuoXptBntIG8sygbP84JrKOZ7CU0j2mA9wXjA=
Subject key identifier: C3:F6:1D:1C:A4:36:BC:77:21:49:34:8C:4C:5F:CA:84:E1:5D:E4:01
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 47B9
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/w_YdHKQ2vHchSTSMTF_KhOFd5AE.roa
Signing time: Mon 09 May 2022 00:30:12 +0000
ROA not before: Mon 09 May 2022 00:30:12 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18361 (0x47b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 9 00:30:12 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=C3F61D1CA436BC772149348C4C5FCA84E15DE401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c0:f0:a1:e1:46:71:e9:c6:d9:04:3b:1e:42:
b4:4b:f9:06:83:f9:ab:3a:47:4f:e0:5b:c0:a9:5b:
ac:d6:1a:dc:b7:94:c3:32:ef:d0:12:2d:c0:35:f1:
b3:4a:48:83:a5:36:12:4e:95:11:8a:db:5a:f2:16:
1e:54:e4:4a:92:f3:23:f1:05:06:2d:7d:91:96:7c:
3f:5b:90:12:2b:b5:56:da:0a:c9:da:e4:fe:66:09:
04:c3:60:2c:68:3f:ff:d8:d4:74:43:6c:93:b3:93:
53:ec:a9:50:fe:cd:d7:d1:09:46:0e:bb:6e:69:a5:
7f:68:9f:52:fd:cb:ee:20:41:d1:c1:87:86:e4:b1:
5c:4d:73:8e:82:c7:f0:bf:5a:ac:f3:b2:38:2c:f3:
91:bf:5f:ed:9b:37:2f:36:9a:4b:11:d5:52:02:f1:
63:d8:f0:ea:ae:68:3c:62:fa:45:ea:24:34:70:b0:
74:75:7e:ad:c1:e8:eb:53:b5:e5:28:d3:32:d5:05:
2d:40:39:16:17:48:93:2f:20:d5:bd:51:9c:50:da:
b1:51:1a:85:e0:c6:80:4b:3d:86:67:64:c8:9e:57:
04:4f:c0:1d:61:07:35:9a:1c:f4:43:9c:59:4c:3e:
ee:ca:ad:97:c5:06:d3:b1:5f:aa:60:7f:5b:ae:bf:
02:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F6:1D:1C:A4:36:BC:77:21:49:34:8C:4C:5F:CA:84:E1:5D:E4:01
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/w_YdHKQ2vHchSTSMTF_KhOFd5AE.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
03:a0:58:da:55:e4:c2:19:a2:a7:39:50:82:3b:f9:43:b5:72:
63:95:c4:33:9b:1c:74:5c:92:a3:0f:65:c1:42:f1:2a:8c:7d:
eb:bf:42:f0:a6:57:32:21:29:0c:90:54:5a:6c:2f:d8:40:76:
bb:78:19:b7:0e:79:19:11:6c:67:ac:26:20:1f:21:0d:e2:23:
1e:6a:78:70:52:1f:29:88:eb:6b:cb:cd:8d:2b:4b:2d:95:27:
fa:59:08:16:6c:1d:b2:b8:e7:19:e4:92:34:fe:2b:e0:0d:cf:
62:54:ed:fc:f4:98:a5:c8:ab:39:1c:d1:18:6f:d2:43:59:ce:
ac:8d:57:c9:51:9a:00:23:8e:14:fb:b9:46:e7:6a:62:e4:8d:
49:4e:60:4c:a0:50:ea:60:02:62:18:1e:a8:9d:d2:fc:70:4b:
58:01:de:4f:82:c1:f3:16:c4:28:e6:de:f7:44:a6:e0:ff:9e:
13:b3:6a:df:1b:46:95:ab:02:8a:22:0e:d0:95:2b:47:ee:d4:
b6:46:fe:23:db:c3:9d:a8:e8:d0:e1:bf:89:ce:25:72:ed:ac:
3d:ea:ed:1f:9f:7d:97:fe:af:49:97:4c:00:46:c1:83:50:e7:
e1:0a:9c:36:f2:46:dc:36:ee:b6:95:77:03:b6:ff:83:26:86:
a4:e9:38:18
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICR7kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA1MDkw
MDMwMTJaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKEMzRjYxRDFDQTQzNkJD
NzcyMTQ5MzQ4QzRDNUZDQTg0RTE1REU0MDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDcwPCh4UZx6cbZBDseQrRL+QaD+as6R0/gW8CpW6zWGty3lMMy
79ASLcA18bNKSIOlNhJOlRGK21ryFh5U5EqS8yPxBQYtfZGWfD9bkBIrtVbaCsna
5P5mCQTDYCxoP//Y1HRDbJOzk1PsqVD+zdfRCUYOu25ppX9on1L9y+4gQdHBh4bk
sVxNc46Cx/C/Wqzzsjgs85G/X+2bNy82mksR1VIC8WPY8OquaDxi+kXqJDRwsHR1
fq3B6OtTteUo0zLVBS1AORYXSJMvINW9UZxQ2rFRGoXgxoBLPYZnZMieVwRPwB1h
BzWaHPRDnFlMPu7KrZfFBtOxX6pgf1uuvwL9AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUw/YdHKQ2vHchSTSMTF/KhOFd5AEwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS93X1lkSEtRMnZIY2hTVFNNVEZfS2hPRmQ1QUUucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAMwDQYJKoZIhvcNAQELBQADggEB
AAOgWNpV5MIZoqc5UII7+UO1cmOVxDObHHRckqMPZcFC8SqMfeu/QvCmVzIhKQyQ
VFpsL9hAdrt4GbcOeRkRbGesJiAfIQ3iIx5qeHBSHymI62vLzY0rSy2VJ/pZCBZs
HbK45xnkkjT+K+ANz2JU7fz0mKXIqzkc0Rhv0kNZzqyNV8lRmgAjjhT7uUbnamLk
jUlOYEygUOpgAmIYHqid0vxwS1gB3k+CwfMWxCjm3vdEpuD/nhOzat8bRpWrAooi
DtCVK0fu1LZG/iPbw52o6NDhv4nOJXLtrD3q7R+ffZf+r0mXTABGwYNQ5+EKnDby
Rtw27raVdwO2/4MmhqTpOBg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org