Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/9PNEv9jRfRNF6dVW67p1V-hyDu4.roa
File: 9PNEv9jRfRNF6dVW67p1V-hyDu4.roa (raw, json)
Hash identifier: MV0KlJKZSMcOW0/jDdwiqpqqndXP1g5NAG/DacEM05E=
Subject key identifier: F4:F3:44:BF:D8:D1:7D:13:45:E9:D5:56:EB:BA:75:57:E8:72:0E:EE
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 48D3
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/9PNEv9jRfRNF6dVW67p1V-hyDu4.roa
Signing time: Sun 29 May 2022 00:30:08 +0000
ROA not before: Sun 29 May 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18643 (0x48d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 29 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=F4F344BFD8D17D1345E9D556EBBA7557E8720EEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2a:82:cf:eb:07:a9:f9:d0:cf:dc:7d:78:b1:
00:34:50:c0:92:1b:03:33:6e:5e:a7:db:c7:ad:c3:
f5:6e:75:f4:28:2b:b3:a2:03:22:e8:47:e8:3e:fb:
45:52:26:60:b7:72:b9:36:d1:bb:65:51:eb:82:07:
af:14:d0:c0:51:21:92:f0:8a:6b:56:f5:18:42:2b:
d9:43:cb:b7:9c:c5:17:e0:e4:0c:97:9d:92:9a:e5:
b2:fc:3e:36:e4:d5:3b:6c:7a:f0:6b:b5:69:6b:88:
99:97:52:00:ba:9e:d9:f7:7e:39:11:85:9c:43:cd:
0a:8a:06:47:10:d0:1d:04:be:f8:e9:a9:98:25:0d:
dd:30:52:8d:96:e3:31:8d:a2:24:ad:6f:3d:d8:99:
82:61:75:db:a5:89:9b:76:b0:ef:85:0c:54:5b:fa:
44:3c:60:1e:b2:d9:87:06:05:33:96:ba:8f:e3:7a:
36:a5:4c:85:e8:89:e3:d2:ff:30:d3:0e:8c:dc:dc:
dc:f9:2a:d7:3d:02:2d:b8:ac:4f:0c:44:3a:3c:a7:
fb:49:dd:d9:28:b0:fe:aa:35:69:bd:a5:9e:53:67:
29:1e:e0:63:9b:2c:09:8b:8e:c0:b0:0f:7b:31:b8:
50:60:7d:dc:f2:cf:65:ae:c6:62:be:1d:5d:a0:e9:
c3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F3:44:BF:D8:D1:7D:13:45:E9:D5:56:EB:BA:75:57:E8:72:0E:EE
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/9PNEv9jRfRNF6dVW67p1V-hyDu4.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:ca:f7:84:2f:33:ae:ab:ad:04:e5:51:8f:81:4d:ae:ce:e4:
e9:9b:6f:c8:15:de:2b:e5:3b:f4:e0:1d:f3:a3:3e:92:f7:6e:
87:8a:ce:29:1c:83:4d:f6:bc:01:e0:fb:30:ae:f4:bc:a3:82:
35:74:7d:7f:4b:a1:21:22:75:3b:39:ad:8b:cf:f8:c8:3f:47:
95:75:d0:10:ea:52:cb:03:b3:3a:f5:aa:a8:8e:e2:10:0e:b7:
e9:2e:d8:02:97:42:71:e4:06:6b:c8:9f:18:ac:e0:02:ff:3f:
c9:08:74:fe:cf:75:37:7d:87:04:7b:0c:f8:1f:de:d6:42:23:
51:de:ca:dd:b0:00:46:40:b5:3b:90:65:4c:06:91:31:45:23:
06:a0:43:97:93:7a:c4:cd:15:60:20:5e:10:47:bc:a9:a9:c0:
65:7d:c0:6d:23:47:66:9d:9d:11:28:7e:27:64:71:09:90:b0:
b2:11:2b:56:d6:1b:64:67:a2:98:46:91:3f:ff:f3:11:75:c7:
0f:d7:83:17:85:8e:cb:b7:50:f8:f4:e9:b1:32:4e:81:89:79:
d4:c1:d0:52:5e:93:f6:57:d4:95:2d:48:b3:f9:d1:f7:30:ee:
a8:1d:3f:55:f3:3e:13:2d:20:10:bb:a6:b0:91:2e:19:29:6c:
8b:9c:af:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org