Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/6zslBIvV64LsKXaJgqSA5d4ljDw.roa
File: 6zslBIvV64LsKXaJgqSA5d4ljDw.roa (raw, json)
Hash identifier: yJ8ao71b0mg6y6IfwlFG2yPu2WNhi8bxtAo0SZnznSs=
Subject key identifier: EB:3B:25:04:8B:D5:EB:82:EC:29:76:89:82:A4:80:E5:DE:25:8C:3C
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 471A
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/6zslBIvV64LsKXaJgqSA5d4ljDw.roa
Signing time: Thu 28 Apr 2022 00:30:08 +0000
ROA not before: Thu 28 Apr 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18202 (0x471a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 28 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=EB3B25048BD5EB82EC29768982A480E5DE258C3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bb:6b:c5:16:7f:84:c3:92:53:a9:80:78:11:
56:a8:04:91:0b:73:4f:2d:0e:42:4a:f6:5c:c0:4c:
e2:ce:8a:78:69:f9:37:bd:45:75:bd:83:d3:7e:87:
9c:79:f1:34:51:5e:1d:a6:25:1a:b5:8d:39:0e:3b:
65:7f:2e:71:60:a4:f2:2b:cb:09:60:5b:a9:3c:24:
61:67:fe:2e:9e:88:d2:9b:ba:8e:7f:f9:61:e5:ae:
9a:83:9b:12:4e:8a:14:25:0d:42:64:d8:1f:f8:9d:
30:13:ce:1b:67:6f:af:12:de:41:cb:a6:d1:2c:77:
f2:a1:a7:53:2a:18:2b:7a:90:e0:66:68:7c:8e:16:
54:70:34:4e:8c:c7:82:84:cf:ef:18:d4:24:be:1a:
18:92:52:1d:49:c1:56:c3:dd:8d:77:14:a5:e6:1f:
97:77:43:81:cf:11:9a:56:a7:61:e2:3c:35:ff:e7:
e6:15:a1:e5:3d:6d:b3:b0:3d:e5:4f:5e:a2:4f:1f:
a0:34:32:78:53:ee:71:c7:a9:11:30:e8:77:00:72:
d9:19:cc:9a:88:32:de:76:f4:5d:16:5e:a0:56:ba:
8a:3a:21:7b:95:57:7b:08:bd:14:f1:a7:05:a4:93:
d6:53:87:c8:cf:c0:ad:03:aa:01:2b:8a:49:83:81:
81:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3B:25:04:8B:D5:EB:82:EC:29:76:89:82:A4:80:E5:DE:25:8C:3C
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/6zslBIvV64LsKXaJgqSA5d4ljDw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:e8:03:39:63:6c:d5:7d:54:3d:8e:ad:e2:3b:a1:d4:98:e5:
89:b4:ad:26:63:4d:d9:d1:2a:aa:99:1f:83:d0:b3:05:6f:8a:
7e:37:ce:8f:6a:f4:8b:b2:f8:f7:90:53:98:63:ed:b4:fd:67:
37:c7:d8:e3:d9:16:a4:8c:7d:6c:33:9e:23:46:19:df:25:e5:
1e:b3:79:3b:7c:8e:8f:59:67:93:c9:b6:09:58:5e:d1:39:e6:
8d:82:24:13:7c:2d:33:98:de:89:d5:aa:c5:8d:ba:10:0a:f1:
b5:dc:68:79:4e:c2:7a:c1:81:d0:bd:fd:15:1a:11:c4:cc:73:
9c:44:4c:4b:d5:6e:8f:58:bd:7e:be:2a:24:9f:2b:c7:5e:f1:
fd:aa:a4:77:3f:b8:69:5c:53:46:2a:cf:8e:a1:72:58:9d:fb:
a2:ec:94:0a:90:86:9b:49:3a:4e:ca:6e:85:da:b9:91:b4:80:
7e:69:ce:64:25:3d:9e:2f:ed:63:58:8a:55:83:ae:47:80:cf:
e1:30:bc:c4:2b:e4:15:8d:97:0e:91:d3:23:a7:d9:1e:e1:28:
33:08:53:ba:42:53:3f:37:d3:c8:83:17:d6:d9:df:c8:a4:de:
44:0d:a5:87:34:f0:d2:31:da:04:d5:a8:3b:6a:9c:2c:c6:6f:
a2:84:80:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org