Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/F94VeVFqhT_uzMw1EYn_RyMqVJ0.roa
File: F94VeVFqhT_uzMw1EYn_RyMqVJ0.roa (raw, json)
Hash identifier: hy4PHj3K1mysYZFV1UPwqa7DTsyNQ7fxRFZwNC8FdUA=
Subject key identifier: 17:DE:15:79:51:6A:85:3F:EE:CC:CC:35:11:89:FF:47:23:2A:54:9D
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4904
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/F94VeVFqhT_uzMw1EYn_RyMqVJ0.roa
Signing time: Wed 01 Jun 2022 00:30:08 +0000
ROA not before: Wed 01 Jun 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18692 (0x4904)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 1 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=17DE1579516A853FEECCCC351189FF47232A549D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b2:4f:18:11:18:e2:38:f7:18:49:38:c4:66:
85:47:6d:b6:16:0d:1f:c5:b2:5b:cd:e0:5f:91:af:
f2:68:a0:27:13:1d:3b:bb:e6:d5:90:86:fd:e3:8e:
f2:38:44:cf:ed:bd:97:fa:35:43:9b:1f:4f:0c:01:
37:48:8e:8d:81:ff:0e:3a:d4:6c:4f:c8:09:db:57:
b0:b5:ca:c0:cb:07:26:bc:50:14:8e:98:0b:7c:e7:
ce:c5:74:02:b6:6d:b2:36:3c:38:d9:d3:8f:25:a7:
ca:de:59:a7:06:6a:5c:f3:ba:43:3d:54:01:d8:b6:
30:de:d1:38:21:6b:0c:b5:d9:66:48:9a:36:0f:90:
d6:0f:98:75:e9:64:13:24:39:a8:09:b3:15:fb:e3:
16:b4:45:20:05:3e:10:09:1a:3d:e5:e3:f8:08:2e:
81:16:b0:2f:0d:35:12:a2:6e:8a:53:e7:11:98:97:
98:78:0d:a0:7e:c5:fa:45:bf:97:23:ea:af:47:ee:
fb:a3:8a:14:35:89:2c:f1:c2:32:de:a0:6d:e0:86:
ad:f5:cd:b2:17:60:de:d2:41:b0:c8:ae:08:40:51:
69:ca:ef:74:30:2b:02:e6:a8:6a:ae:12:03:43:0c:
e1:de:97:fa:e6:0a:d5:50:82:b4:b1:bf:55:92:72:
19:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:DE:15:79:51:6A:85:3F:EE:CC:CC:35:11:89:FF:47:23:2A:54:9D
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/F94VeVFqhT_uzMw1EYn_RyMqVJ0.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
43:26:ef:fb:1a:e3:dd:aa:0c:1e:0f:4f:33:74:71:0d:83:63:
75:38:c7:7d:6e:c9:55:d2:42:13:e7:13:c5:15:f4:ab:db:97:
95:cb:74:11:4b:ea:7f:d3:e6:6c:60:32:f7:5b:9e:b1:55:95:
70:3b:de:35:b4:74:cb:08:97:9e:e8:da:53:ec:c3:cf:23:eb:
2d:f5:29:ea:1d:be:f1:39:75:f1:cd:ef:73:fc:15:39:99:ea:
e6:ca:cf:99:7f:70:b3:0f:3e:13:c1:20:93:cb:9f:a3:63:f3:
f9:aa:2e:93:c3:1a:05:3d:00:e8:3e:31:66:d4:65:53:f3:46:
dd:b1:8e:bc:1c:86:77:f1:70:b4:5e:57:d0:77:0c:3c:57:b2:
33:60:39:4e:64:e3:20:0e:f1:9c:84:66:86:cb:94:0d:36:b7:
dc:1f:3a:31:39:a2:17:ec:69:c4:90:8a:21:6d:01:93:15:13:
ac:8e:f3:51:c6:27:98:b5:14:a1:3a:d9:26:71:8f:8d:28:dc:
6e:2d:c8:73:d2:4a:fc:fd:4b:5a:ac:44:9c:ab:53:99:08:d6:
8c:d7:b8:1e:56:c5:1f:83:f6:4d:8c:da:5b:18:11:89:a5:9a:
f1:a4:e8:fa:a4:2d:fd:df:1f:99:1e:b0:af:ef:38:ad:fd:5d:
2f:ae:fa:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org