Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/5zCeIiyjGYQvrirm-9-Srm_Ifw4.roa
File: 5zCeIiyjGYQvrirm-9-Srm_Ifw4.roa (raw, json)
Hash identifier: gfAdEcur70Gq+VmsVT7CuVBS40nBnk+B+Awmmuwh6I4=
Subject key identifier: E7:30:9E:22:2C:A3:19:84:2F:AE:2A:E6:FB:DF:92:AE:6F:C8:7F:0E
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 44E3
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/5zCeIiyjGYQvrirm-9-Srm_Ifw4.roa
Signing time: Fri 18 Mar 2022 01:07:27 +0000
ROA not before: Fri 18 Mar 2022 01:07:27 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17635 (0x44e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 18 01:07:27 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=E7309E222CA319842FAE2AE6FBDF92AE6FC87F0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f7:bb:5b:47:31:05:09:e7:65:b8:a1:9d:d4:
d9:86:a5:a9:d7:32:b8:53:de:06:1f:73:7c:d9:76:
13:7a:e0:e8:dd:b9:7a:62:6d:7a:97:de:c8:97:bf:
f5:d9:22:10:14:e5:6c:7e:f8:55:d8:ce:51:3b:97:
c9:a0:39:22:b3:63:e1:6e:2b:58:2e:cf:09:f6:0d:
f6:36:e0:85:80:9b:ea:8b:ba:f3:a0:b4:a6:b5:66:
cc:4d:52:70:81:66:4a:e9:2f:4a:53:13:35:f5:82:
db:08:10:fc:23:d9:30:b6:ec:f4:81:3f:77:f8:22:
1d:4e:f6:ae:25:30:15:52:e7:8f:2a:3c:d9:c2:aa:
28:fd:54:df:cf:b1:64:f2:ed:04:17:95:17:c2:b3:
92:15:08:55:16:51:e4:07:45:8e:2b:1b:c2:e9:c4:
65:80:d6:c2:6a:ee:0b:2b:c8:d2:fd:be:09:37:a0:
1e:04:b0:43:ab:d7:56:2b:4f:b4:5f:8a:bb:77:4e:
b5:30:95:c4:08:8c:81:71:f3:57:21:eb:54:a4:5c:
c0:50:e6:fc:60:aa:e8:42:74:fa:a3:cd:7e:51:a2:
87:04:39:ea:6f:5b:0c:a5:f5:69:2a:5d:ca:0d:16:
91:e3:76:fe:0c:aa:a0:92:ef:b6:61:99:e6:97:64:
95:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:30:9E:22:2C:A3:19:84:2F:AE:2A:E6:FB:DF:92:AE:6F:C8:7F:0E
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/5zCeIiyjGYQvrirm-9-Srm_Ifw4.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.10.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:3e:f2:7e:83:57:83:61:34:1e:89:a9:1b:ea:c4:70:e7:36:
64:62:81:ac:0c:9e:4e:cf:9b:42:a0:ad:13:c2:ea:b3:3b:ef:
81:84:36:88:2f:81:e8:d4:b7:63:a6:53:4d:f3:80:00:a4:1d:
9b:65:8e:23:fa:04:06:98:e9:a2:23:a7:17:0e:a3:20:8e:e2:
4d:bd:a4:9f:09:86:25:4e:a8:87:ae:4f:08:67:7d:6f:dd:e1:
d1:f8:c3:24:59:3f:cd:55:bc:ec:97:a7:0d:cd:c9:db:4f:81:
48:2b:d5:a8:b3:c0:ae:31:01:bf:7a:6f:83:81:4b:de:cd:15:
11:cd:4a:a4:31:a9:b9:5b:4c:4e:ec:ab:a8:f2:5b:40:2e:77:
bb:0a:3f:1e:03:65:b4:92:38:a6:ec:15:d0:68:1b:c9:0f:33:
96:20:b1:9d:21:d7:f7:e9:6c:02:45:7a:39:f8:d5:46:f0:fa:
9c:db:ad:fa:9e:12:9c:83:d6:e9:a8:cb:41:e1:f6:7a:87:65:
80:8d:ca:c6:71:8f:5d:9b:94:13:09:c9:ec:d6:1c:b1:24:cf:
09:2a:e6:3d:2a:16:62:9e:68:21:f9:a1:23:72:ff:da:62:94:
17:4d:a5:65:8d:a8:e3:d1:c0:de:d7:65:70:3b:cf:18:52:5d:
2c:e3:e9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org