Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/-E2VYUFto4YdIfxX6b0FaAdX6cw.roa
File: -E2VYUFto4YdIfxX6b0FaAdX6cw.roa (raw, json)
Hash identifier: hUt5wltAspgQ939UbXZ2w91wlnSdd8K91Jevhpzd84Y=
Subject key identifier: F8:4D:95:61:41:6D:A3:86:1D:21:FC:57:E9:BD:05:68:07:57:E9:CC
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 46E6
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/-E2VYUFto4YdIfxX6b0FaAdX6cw.roa
Signing time: Sun 24 Apr 2022 00:30:09 +0000
ROA not before: Sun 24 Apr 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18150 (0x46e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 24 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=F84D9561416DA3861D21FC57E9BD05680757E9CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:df:c0:aa:5b:18:5c:ea:89:cc:af:83:3b:ac:
58:39:57:02:cf:0a:03:18:7d:1e:16:40:f6:48:6c:
4b:f7:57:40:84:7c:92:47:70:71:7a:34:27:d0:95:
be:3d:af:69:b5:64:e7:2a:4b:b3:65:57:19:52:3c:
3f:f3:8b:85:6b:63:7b:2f:0a:c0:89:6e:a9:88:44:
9e:6e:e6:f2:d3:ef:f8:67:83:71:d6:31:ad:ff:2b:
91:22:3e:41:64:b4:0f:1a:7e:97:85:84:8d:a8:81:
57:8f:03:44:fa:fe:c6:ee:99:61:c3:69:c3:23:ab:
39:e1:6a:be:65:ae:3f:dc:9a:1a:03:19:6f:03:88:
4a:a0:5b:d5:32:55:8f:b4:31:c9:4e:8b:b2:bd:ce:
ff:a2:6b:6b:1c:7d:f1:a2:87:79:01:c7:9e:10:b2:
b3:d7:b0:a2:90:03:f1:59:8d:f6:99:da:4b:77:7d:
81:2b:f0:ae:81:3f:ab:35:2a:82:cd:62:50:ca:dd:
15:bb:e1:6b:23:b3:0a:40:8a:b9:3e:1d:58:3e:8a:
e7:90:1b:b8:66:1c:b4:be:4d:b7:02:1b:06:9d:0d:
2f:1f:f0:96:16:67:7f:4a:70:56:a6:49:3b:4e:d7:
9e:a2:c3:e3:ea:85:fb:ec:b8:52:bc:5a:69:3d:d0:
fd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:4D:95:61:41:6D:A3:86:1D:21:FC:57:E9:BD:05:68:07:57:E9:CC
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/-E2VYUFto4YdIfxX6b0FaAdX6cw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:9a:50:eb:1c:b0:78:1f:a5:a5:5e:c2:87:72:9d:51:6b:43:
f5:8b:27:c3:1b:67:e0:9e:b1:80:ae:59:37:6b:74:fa:d2:02:
d1:60:47:2d:2a:20:ac:bb:a3:a8:a6:52:50:72:a9:ab:23:99:
bd:42:2e:ac:d8:de:0c:df:18:db:b2:52:8b:3e:92:e7:b2:a9:
d2:2e:3d:0c:2c:fe:ba:2e:ce:41:9d:60:44:18:11:4d:b1:f1:
f0:b4:2c:e1:64:a8:be:38:40:6e:97:b9:7a:39:5f:76:9b:cd:
37:d4:29:b8:ba:4f:b6:0b:65:9c:dd:7b:2e:91:8d:6d:3f:77:
77:2b:7a:45:62:e3:1c:3a:e5:b2:5b:87:4d:0e:0d:08:70:58:
9d:67:7c:a1:c9:30:c3:70:3d:f8:ad:0d:7c:67:68:6c:38:e6:
1f:b1:b2:9e:67:ef:5c:97:ef:e5:ef:52:f0:eb:3b:8d:fd:8f:
e4:56:41:68:ea:24:f3:d9:cd:1d:43:6d:62:42:ee:ba:a9:fc:
d0:78:a4:95:87:85:27:98:09:94:35:b1:9d:0a:61:0f:b8:bd:
ea:25:9e:3b:de:0e:05:db:3a:18:27:cb:20:03:02:d8:90:f8:
8c:e0:62:b3:87:34:2b:e6:b4:fb:33:4f:d2:8a:9d:af:fe:d5:
6d:9e:8b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org