Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/7pKEZWPL1fXEJy5VI_6fh36hmKY.roa
File: 7pKEZWPL1fXEJy5VI_6fh36hmKY.roa (raw, json)
Hash identifier: lIDVUjtU7Lep3dhTnDAFQQUmrsmiTE/ZGww60HMn+5s=
Subject key identifier: EE:92:84:65:63:CB:D5:F5:C4:27:2E:55:23:FE:9F:87:7E:A1:98:A6
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4669
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/7pKEZWPL1fXEJy5VI_6fh36hmKY.roa
Signing time: Fri 15 Apr 2022 00:30:09 +0000
ROA not before: Fri 15 Apr 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18025 (0x4669)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 15 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=EE92846563CBD5F5C4272E5523FE9F877EA198A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:36:eb:71:15:d6:79:91:f6:9a:6b:ec:f3:90:
2f:30:00:fb:78:7b:da:5d:ee:f2:ea:47:3a:9e:14:
3c:d1:b2:0e:d9:2f:36:54:6d:b3:14:ce:2b:5d:03:
7c:5b:4c:71:60:e6:ac:b4:27:97:18:66:fb:93:83:
37:e0:e1:d9:11:37:12:29:e6:5a:3c:4e:8f:ba:c4:
de:fd:6b:e1:4a:fa:9c:5b:3a:a3:07:6e:53:27:ed:
ff:8b:4f:64:84:0b:f8:aa:75:c1:b0:ce:2e:19:a4:
53:70:c2:5c:db:ab:3d:d5:69:a3:6b:f7:19:af:28:
9a:11:03:be:be:c4:3a:ea:db:27:01:18:f5:48:0d:
65:c8:b1:6d:6c:93:f6:a8:ec:a2:fb:a1:b6:9a:27:
a1:76:21:18:c0:b8:9e:72:c2:59:d4:07:67:84:41:
0e:01:a4:96:f8:e8:a7:92:f3:9e:1a:db:7f:05:23:
47:98:c7:4f:1b:15:31:5f:f4:24:78:25:ad:38:86:
ec:9a:6e:d2:38:60:a4:eb:14:5f:ee:b4:a4:31:04:
e8:ae:b5:e8:b0:d5:c3:62:b6:87:a0:3d:6b:75:84:
0a:08:02:d8:f4:32:92:1a:df:31:ad:fb:d0:f8:31:
29:6d:df:f8:88:59:a6:71:5f:8d:d8:7a:57:a5:61:
3c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:92:84:65:63:CB:D5:F5:C4:27:2E:55:23:FE:9F:87:7E:A1:98:A6
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/7pKEZWPL1fXEJy5VI_6fh36hmKY.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:cb:ed:42:73:82:0e:74:dc:25:cf:56:52:6d:29:f9:ef:c7:
03:b9:ee:c7:39:34:be:83:66:c7:39:5e:55:71:bd:91:72:e1:
68:09:1d:76:01:31:c1:29:1b:7d:ec:62:a0:45:e1:66:fa:91:
da:02:c2:9b:a3:62:90:d1:22:33:e2:68:32:49:4b:00:ce:59:
81:a0:b3:72:b2:ce:59:62:25:8e:b1:37:c7:da:bb:0c:37:b7:
49:5a:2e:3a:8b:fb:44:f4:e5:27:ec:cb:e2:37:09:bd:24:4e:
c6:77:63:db:d4:24:6c:18:59:8b:e4:4e:ef:5f:de:bc:2c:08:
1c:8a:bd:b7:ab:93:f0:ae:04:84:fe:ef:da:9e:c7:61:c4:97:
b7:a6:22:ff:aa:5a:a4:c1:dc:94:51:35:1a:32:ab:63:d6:75:
9d:01:75:0c:82:7b:c0:2c:37:81:82:6c:7c:42:2a:1f:5f:54:
45:5c:09:6d:31:1d:d9:d5:cf:a0:53:e2:1e:ab:36:65:22:07:
c5:3d:5e:1e:fa:81:58:e7:0e:a5:5d:79:c7:99:4c:ac:26:79:
b5:fa:48:7f:1d:5d:87:87:98:37:c3:60:6f:c9:fc:09:09:72:
c4:b0:e0:df:d1:cf:3d:15:51:3b:f4:e2:f6:b4:38:e5:3e:c7:
9b:b0:a0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org