Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/DISs0tGm0wWH2OUHmRDdfl_YF9w.roa
File: DISs0tGm0wWH2OUHmRDdfl_YF9w.roa (raw, json)
Hash identifier: SrgxMTbGcntjWvDsEMUu1a8RPb9JTKTt8QAF2G9OHOw=
Subject key identifier: 0C:84:AC:D2:D1:A6:D3:05:87:D8:E5:07:99:10:DD:7E:5F:D8:17:DC
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 427F
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/DISs0tGm0wWH2OUHmRDdfl_YF9w.roa
Signing time: Wed 02 Feb 2022 00:30:07 +0000
ROA not before: Wed 02 Feb 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17023 (0x427f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 2 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=0C84ACD2D1A6D30587D8E5079910DD7E5FD817DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fd:69:a8:59:ca:d3:b1:2e:3f:3d:52:b0:cc:
37:b2:53:5f:d8:52:c4:a0:48:1a:a2:81:03:eb:12:
4b:d7:a8:f7:05:a7:7a:bb:8b:f8:f2:20:0c:bd:e6:
b6:cf:9f:22:6a:89:48:5e:a3:f0:9b:a9:a4:90:be:
2c:0b:cd:42:a7:45:f3:c2:6e:30:11:cb:d3:d7:7f:
d0:23:6b:92:82:f1:4e:92:c0:c9:17:2e:99:33:ab:
4d:9c:fe:53:a5:4b:01:c9:09:c4:c1:1e:a8:4b:49:
0e:99:d2:94:21:cf:39:3d:2f:fc:24:21:2c:07:0e:
08:34:57:14:7e:16:b7:ba:09:b0:d7:9f:a5:42:89:
c3:61:14:2d:f4:00:97:41:77:c9:07:8a:9a:b9:61:
1e:a8:91:f7:61:a8:8f:22:bc:d3:c5:0e:cc:46:2f:
04:ac:88:0a:ca:36:2a:ce:6e:5f:e2:9f:3a:f6:11:
23:90:5e:f6:5c:7d:45:fc:c1:46:b2:56:4c:d7:87:
97:23:e1:49:92:04:31:54:c0:d7:3d:2a:32:11:3e:
d7:0c:b9:e0:9d:a7:16:8f:fd:fe:6e:bf:78:eb:ba:
02:fb:69:cd:41:81:c0:94:6d:63:44:24:e4:41:34:
4b:ae:48:9e:68:7a:dc:94:e0:aa:cd:79:ef:db:df:
4c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:84:AC:D2:D1:A6:D3:05:87:D8:E5:07:99:10:DD:7E:5F:D8:17:DC
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/DISs0tGm0wWH2OUHmRDdfl_YF9w.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:fa:65:8c:a7:a9:83:ea:36:cd:19:f3:43:65:b9:b6:c1:f9:
0d:c9:f9:12:42:3a:65:09:d1:49:87:be:a8:05:df:4a:79:6f:
a8:5f:53:3f:ba:c1:6e:94:11:ca:47:2e:55:e6:8c:63:4b:24:
56:28:a0:6e:8b:11:d9:d3:50:07:52:ed:ad:92:de:af:07:d7:
76:66:02:58:b1:1e:35:03:26:21:52:6f:1b:d3:8f:84:ef:2e:
60:bb:4b:39:97:21:9a:68:d2:18:83:f6:c6:3c:61:55:9b:09:
f0:7a:5c:90:5e:6a:6d:43:20:47:9e:79:81:ef:ac:7f:cf:8e:
3b:55:ab:44:aa:69:98:10:ea:6f:68:18:01:2d:62:61:e5:ed:
99:1b:e5:e3:60:bd:22:26:41:b1:ed:ae:3d:8e:85:7d:93:45:
cc:80:8d:c0:36:cb:2e:0f:87:ed:27:d6:7e:69:5f:4b:b1:1b:
3a:10:2e:4d:b7:89:bd:dc:d4:39:42:89:ce:4d:75:c6:d7:37:
eb:4c:90:62:77:d9:83:a9:92:c0:40:62:aa:0f:a2:ec:85:e7:
ca:75:b5:e6:c9:a9:71:bd:29:1d:e0:b4:f4:c0:b2:06:91:7c:
a2:43:ee:be:d7:d7:1f:0d:14:c3:f9:c3:f3:dc:21:c0:8d:d7:
75:ea:3f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org