Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/3Wm8plVKPu0C1LAkDEUBoEksVL0.roa
File: 3Wm8plVKPu0C1LAkDEUBoEksVL0.roa (raw, json)
Hash identifier: 0ZhXCMb/6Uj0K4oNbm04eZz/V3bcPaBGUFpXHBWwdr8=
Subject key identifier: DD:69:BC:A6:55:4A:3E:ED:02:D4:B0:24:0C:45:01:A0:49:2C:54:BD
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4265
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/3Wm8plVKPu0C1LAkDEUBoEksVL0.roa
Signing time: Mon 31 Jan 2022 00:45:09 +0000
ROA not before: Mon 31 Jan 2022 00:45:09 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16997 (0x4265)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jan 31 00:45:09 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=DD69BCA6554A3EED02D4B0240C4501A0492C54BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:97:04:49:53:bc:16:c4:9c:65:f8:c2:fb:23:
5b:bb:8d:74:55:6c:43:5c:9d:f0:c8:f2:e1:4e:c4:
ee:77:71:26:9a:e1:36:97:6d:11:86:ca:f4:4f:41:
29:d6:67:a6:42:46:e5:48:51:24:98:9c:a4:a0:06:
2d:f1:82:10:f4:61:d8:95:b3:e0:78:50:92:00:89:
1b:68:80:07:22:6a:09:d2:12:04:1a:8d:e6:7b:6c:
ae:ce:64:a8:cb:34:51:68:08:78:56:1d:cc:6f:e8:
60:be:ea:ed:a7:ea:e4:c6:8c:48:03:f5:50:7c:b9:
81:34:b6:a4:c4:dd:34:9c:09:d8:a8:59:5e:83:41:
ef:36:c9:51:a1:16:65:09:92:76:3b:ac:83:9b:44:
eb:16:9b:6e:64:99:bd:26:e4:9b:36:ea:27:21:df:
71:31:05:e8:67:3f:e2:32:05:bf:ab:87:a1:ee:8b:
f0:ee:0e:b5:37:3e:42:d5:a3:44:7a:84:cd:bc:63:
8d:ae:0d:64:8f:57:1a:d3:ca:bf:50:2a:be:e8:20:
6b:28:fe:83:36:e2:17:92:33:95:9e:a0:13:78:5b:
6e:55:d1:8f:52:1d:69:9c:9f:c2:ec:e0:52:37:19:
8f:80:2e:3d:20:f7:d2:ff:44:00:fa:d1:11:60:c5:
95:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:69:BC:A6:55:4A:3E:ED:02:D4:B0:24:0C:45:01:A0:49:2C:54:BD
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/3Wm8plVKPu0C1LAkDEUBoEksVL0.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:d1:9f:6e:1b:73:03:86:b5:dd:80:48:03:ba:d1:2f:6c:50:
2a:f5:e2:31:a0:c4:a1:f7:7a:f0:28:ca:e0:51:5b:d5:da:6f:
e3:0e:a5:2a:df:0b:b0:a2:ec:d5:33:36:0a:93:1b:a9:23:d8:
52:65:2f:17:b1:a0:70:89:a3:e1:73:b9:8c:a4:15:43:3e:54:
f7:f7:18:40:2c:ad:aa:68:06:4c:33:98:a8:79:65:6d:95:ed:
72:33:ac:5c:cc:7c:0b:2b:a4:48:a2:2a:9f:8f:c1:ba:4d:c0:
f4:00:86:64:c2:26:30:98:1f:85:a8:80:31:ca:66:40:af:99:
37:f7:73:c2:0a:23:17:dd:8c:c4:9b:c3:a1:d8:38:55:a0:a8:
00:8d:85:6b:94:51:4c:a1:1a:cf:88:72:04:99:37:43:a5:48:
2b:bf:2f:74:08:67:e8:53:ea:0e:bf:48:c8:5a:49:37:d1:f1:
37:59:67:e2:66:d6:a9:6d:e3:f6:58:99:00:2e:bd:b2:33:e0:
59:3b:a9:b6:80:97:2c:ed:ed:06:90:44:b8:b2:61:be:b5:ea:
b9:4c:c8:a0:b1:25:03:a3:ba:b5:b5:0e:a3:c0:ab:6a:6b:c3:
73:54:4b:57:70:3d:13:07:0a:e9:5d:19:07:e4:18:44:8d:c3:
8e:dc:8d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org