Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/2T0V1iyU-7mPw_Q5eBTsvUPer74.roa
File: 2T0V1iyU-7mPw_Q5eBTsvUPer74.roa (raw, json)
Hash identifier: 61L5hmnlwff5kYmJ0W/ksFG7B2av45iz+mlN0dbVZLQ=
Subject key identifier: D9:3D:15:D6:2C:94:FB:B9:8F:C3:F4:39:78:14:EC:BD:43:DE:AF:BE
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 49A4
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/2T0V1iyU-7mPw_Q5eBTsvUPer74.roa
Signing time: Fri 10 Jun 2022 00:30:07 +0000
ROA not before: Fri 10 Jun 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18852 (0x49a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 10 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=D93D15D62C94FBB98FC3F4397814ECBD43DEAFBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2e:df:c9:63:27:9b:66:9e:a3:3b:23:6e:8e:
6f:89:03:68:91:e7:ce:3b:17:03:c0:91:8a:64:5b:
e0:84:75:58:b2:c4:cc:ea:83:a7:bd:b8:91:d4:8e:
42:81:f9:30:82:18:54:c0:c4:88:04:b1:eb:34:a4:
8b:db:7d:5a:7b:21:db:8c:eb:2e:f6:5c:9e:59:69:
f0:f1:68:e0:0d:ff:57:38:bd:5c:3f:f0:a2:c4:fe:
94:04:e7:3c:b2:e8:19:44:53:2b:1b:88:0e:53:f1:
bc:e0:58:5a:e2:fd:59:6c:5f:bd:58:3e:db:0c:83:
01:47:b5:ab:f4:88:54:1b:a5:35:85:f9:ea:42:75:
49:f3:16:72:45:ff:94:d9:9d:78:9a:3a:dd:7b:8c:
cd:86:7d:96:4c:f9:b7:e0:14:7f:24:e0:18:84:22:
b9:40:fe:3e:5f:79:32:73:d1:fa:35:85:65:75:66:
b5:a6:2c:1e:4d:1e:20:8f:04:88:c6:e0:38:8d:d4:
e2:02:f0:67:ff:c9:26:d9:42:14:ea:ef:62:45:b9:
8a:34:7f:e2:18:0f:29:0b:9b:f8:1a:e1:d5:b3:ba:
6f:83:91:9e:4c:6b:5b:d0:e0:bb:86:99:5b:ba:11:
50:72:71:13:39:3f:36:94:29:ab:9f:31:f5:34:16:
23:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3D:15:D6:2C:94:FB:B9:8F:C3:F4:39:78:14:EC:BD:43:DE:AF:BE
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/2T0V1iyU-7mPw_Q5eBTsvUPer74.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
17:b1:17:8a:a6:73:55:ae:b4:4e:cd:88:8f:aa:6e:4a:20:c0:
53:d2:3d:dd:d2:15:7d:0f:54:57:e2:20:b4:a9:46:17:82:f2:
dd:eb:98:cc:15:8e:ba:ee:37:40:e0:8d:54:2e:54:bb:2d:78:
bf:9f:5f:1d:b1:ad:b4:df:86:e8:f6:d5:6a:cb:eb:57:9b:d4:
1a:5c:b4:bc:56:41:e7:32:2e:1f:23:aa:b7:03:6b:39:12:d4:
17:d7:f3:42:ce:49:f4:5a:22:06:a0:bc:2a:f8:98:d7:44:1e:
b1:f3:6c:53:f3:1d:63:72:f5:87:0e:3a:28:70:3b:bb:c1:3d:
66:11:56:68:31:2b:a8:fb:6b:84:b3:21:1c:84:e8:a4:3c:bf:
66:85:5b:29:be:6c:79:55:5a:47:9b:1d:da:10:82:1d:06:d1:
82:f9:49:3f:12:1a:ec:40:23:e0:a5:e9:f0:94:b8:c3:71:3b:
99:d6:09:3a:70:77:08:57:fd:5a:98:d1:16:f6:48:09:29:77:
7b:44:28:5e:7c:ab:a7:b6:de:0c:b2:32:ff:3c:9b:f5:9a:fc:
c3:c7:a5:03:fc:c1:a5:f5:7f:7f:97:a3:67:03:c6:6f:b2:a7:
fa:50:68:e2:1f:48:90:dc:0c:01:d6:92:06:3b:07:e9:31:f9:
8d:d8:f4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org