Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/6cT2YO13lUHl87SL7nz8UAKYD_g.roa
File: 6cT2YO13lUHl87SL7nz8UAKYD_g.roa (raw, json)
Hash identifier: IYXHadIbaEt8Gbazxtm2Reb2ktlwDPsdtayAOlvitFU=
Subject key identifier: E9:C4:F6:60:ED:77:95:41:E5:F3:B4:8B:EE:7C:FC:50:02:98:0F:F8
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4337
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/6cT2YO13lUHl87SL7nz8UAKYD_g.roa
Signing time: Tue 15 Feb 2022 00:30:08 +0000
ROA not before: Tue 15 Feb 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17207 (0x4337)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 15 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=E9C4F660ED779541E5F3B48BEE7CFC5002980FF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1b:aa:de:9e:84:3e:e1:4b:d8:48:77:1e:4d:
60:64:3c:bd:e1:60:6a:63:d5:25:aa:dd:20:91:38:
4b:1b:53:d4:8d:36:35:40:29:dc:08:a8:bb:c0:d5:
91:68:de:f0:b4:86:92:39:3d:ff:3e:75:dd:64:ac:
48:ac:59:31:93:a9:c0:5d:c8:fb:3c:48:29:d1:63:
4e:76:c4:aa:a6:bf:ee:a5:29:05:67:33:c7:3b:db:
0a:40:25:69:5e:d9:bc:30:09:13:3c:82:b3:01:8e:
1d:67:3f:b7:81:cd:ab:8c:08:f7:c7:53:9b:3e:e1:
cd:8e:7f:35:54:35:91:77:fa:de:00:32:73:d6:05:
26:cd:77:99:16:ac:05:dd:13:2c:ce:46:97:99:b1:
da:3e:b5:74:b8:b6:83:9a:55:df:d4:f8:9e:f3:f5:
d3:6d:f8:63:c9:31:25:ae:fb:35:9c:32:59:59:01:
8a:fe:f8:5e:ea:a6:10:42:ad:d6:e0:8a:28:c7:f0:
40:6d:68:63:ab:bc:b8:1b:64:ef:10:dc:94:26:52:
85:57:ba:2d:58:f6:a7:dc:69:a9:aa:6a:60:3e:66:
bb:67:81:06:d2:33:0c:1f:8c:1d:58:a4:35:4d:94:
97:a7:ba:e4:2c:47:bb:5e:8c:51:d8:20:5b:79:19:
23:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C4:F6:60:ED:77:95:41:E5:F3:B4:8B:EE:7C:FC:50:02:98:0F:F8
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/6cT2YO13lUHl87SL7nz8UAKYD_g.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:0b:83:d7:3b:9d:06:e4:b2:2b:35:e0:09:63:00:a8:50:a9:
0b:b2:e7:49:81:22:bc:91:31:54:3d:90:8c:a7:ab:25:5a:43:
ea:9b:9c:7a:54:d6:c4:3f:01:a6:bc:77:94:c5:54:73:48:78:
e4:b9:d6:98:1a:62:22:b6:1e:c6:19:10:83:36:42:ee:0d:be:
0d:c9:56:82:79:a3:b0:d4:bc:e8:db:f6:42:79:bb:2c:7b:28:
27:87:af:64:8d:bb:7c:9d:17:47:73:45:ad:20:7f:03:ef:76:
1c:97:a1:d5:d1:86:e1:8e:ec:a7:1a:d9:8b:99:72:76:26:24:
bb:53:8f:f0:6a:39:ab:e3:d1:a7:57:9e:36:61:68:1e:24:2b:
8d:04:d8:13:96:81:0a:3b:af:8a:0f:8f:a4:7d:aa:2b:1c:ca:
f4:da:fb:cb:16:1e:26:76:2c:cb:b0:3e:29:f6:ab:ad:89:d1:
4c:fd:84:3b:8b:ef:3a:db:04:ec:67:17:d6:b1:12:b2:1f:12:
b5:9d:e0:9e:49:44:9c:de:78:ef:2e:67:22:cc:81:6e:e0:f1:
4f:09:23:96:aa:f8:03:ac:6c:7a:e0:e2:2d:1d:46:4e:da:98:
ca:8a:97:64:48:51:76:21:23:eb:cb:b3:97:58:3e:ab:29:1a:
ad:4c:2f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org