Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/7juwuoDmR7l1FOFN1D2vzTBNCK8.roa
File: 7juwuoDmR7l1FOFN1D2vzTBNCK8.roa (raw, json)
Hash identifier: 4k2wk8q/tD3KUFkBAF3JXdnYOmk/OlluZ7t/WnC5tco=
Subject key identifier: EE:3B:B0:BA:80:E6:47:B9:75:14:E1:4D:D4:3D:AF:CD:30:4D:08:AF
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 42C5
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/7juwuoDmR7l1FOFN1D2vzTBNCK8.roa
Signing time: Mon 07 Feb 2022 00:30:08 +0000
ROA not before: Mon 07 Feb 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17093 (0x42c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 7 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=EE3BB0BA80E647B97514E14DD43DAFCD304D08AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:61:8d:6a:d8:08:e3:18:4b:02:da:bb:6b:95:
09:e7:eb:a2:71:a2:9c:e7:d6:f5:f2:d9:95:5a:25:
63:b3:06:b5:48:33:1a:1d:91:48:ad:e3:9f:9b:be:
69:52:0f:f6:cf:99:df:9f:8f:f9:68:fd:18:52:7d:
eb:13:e6:73:f5:ea:11:b3:f1:4f:f5:45:25:e9:78:
82:83:4e:99:fa:ac:b2:a9:bf:4f:e0:97:87:4e:10:
40:4d:2d:43:34:85:10:d8:0b:a3:63:4e:d7:89:cd:
06:e5:03:ce:e6:b8:69:f5:b0:77:39:7a:bd:a6:1e:
b0:2a:ce:d7:28:55:b3:98:bf:80:e7:37:08:b0:3e:
fa:c1:a3:87:a3:31:af:bf:7a:93:93:06:d7:7e:33:
fc:72:a3:d8:92:90:bf:f4:7b:9f:2e:4c:f0:d5:03:
03:81:c2:d4:82:43:df:05:ed:fd:ed:1f:cf:3e:46:
e5:c1:9a:6f:cc:34:4c:c6:4c:8d:8a:f0:c3:b4:ad:
ea:ae:dc:f1:03:6a:c8:c6:2a:fa:7e:a7:33:29:55:
6c:86:52:1f:4f:3e:bc:2e:3a:b4:3c:f6:92:71:16:
79:58:01:fc:4f:ea:8f:4b:0e:df:9d:63:8c:08:5e:
5b:1e:95:13:74:73:d6:59:00:e1:b3:b8:46:ac:5c:
ed:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3B:B0:BA:80:E6:47:B9:75:14:E1:4D:D4:3D:AF:CD:30:4D:08:AF
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/7juwuoDmR7l1FOFN1D2vzTBNCK8.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
21:80:29:08:66:20:89:1e:d2:d2:7c:31:dd:11:9f:1d:ce:92:
d2:b1:08:cd:85:5b:d6:8b:2a:67:c4:85:e7:5e:f8:02:b0:c0:
2c:df:0e:6d:78:e4:b4:24:57:5b:f6:af:99:e9:1c:82:9f:c7:
6b:df:8c:b0:ce:13:e1:be:12:af:dc:26:7d:99:95:aa:f1:6f:
d8:8b:26:ef:72:8e:cd:80:66:a0:b8:05:7f:0a:e4:a0:42:aa:
32:76:ae:42:b8:8f:47:49:be:c2:66:56:23:ee:bb:95:6c:a4:
ad:db:2d:0d:d7:9a:a3:e6:e0:7e:70:be:af:30:9b:77:b9:bf:
63:81:5e:31:83:99:47:1d:a6:c4:e8:ac:47:6c:64:59:e4:bb:
f0:7c:a3:c2:76:b6:ac:08:5a:cd:e1:51:91:bb:cc:d0:6f:3a:
37:37:36:6a:88:65:36:55:be:17:c0:b9:bb:56:b2:d0:3d:9d:
41:23:03:24:65:db:b0:df:9f:17:c6:b3:43:99:a6:3d:f6:19:
3f:5a:1f:c7:15:ce:e8:1d:d3:20:a2:e7:03:3e:38:57:71:81:
cf:3a:47:e7:f4:c1:5e:54:52:c1:c8:72:bf:ea:b1:61:bf:f3:
65:3e:f8:8c:d6:84:65:8c:a6:5d:4c:db:4d:42:06:56:f2:bc:
d5:00:0e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org