Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/FgPlzZCi-uMC87M6gePgpbhlaeI.roa
File: FgPlzZCi-uMC87M6gePgpbhlaeI.roa (raw, json)
Hash identifier: b3aVJjp2igDmggTGPA9llp41UqigMCniX1ilYSgFVK4=
Subject key identifier: 16:03:E5:CD:90:A2:FA:E3:02:F3:B3:3A:81:E3:E0:A5:B8:65:69:E2
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4633
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/FgPlzZCi-uMC87M6gePgpbhlaeI.roa
Signing time: Mon 11 Apr 2022 00:30:09 +0000
ROA not before: Mon 11 Apr 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17971 (0x4633)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 11 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=1603E5CD90A2FAE302F3B33A81E3E0A5B86569E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1e:e6:ad:ed:9a:65:7b:38:a8:63:42:3a:5f:
d1:5b:da:5c:1f:cd:59:ba:7c:0f:ba:d3:dd:fd:07:
1a:e8:a3:96:78:68:8d:45:35:8e:04:d1:3a:5d:c0:
67:76:96:08:f4:6d:39:85:ed:e4:a4:75:29:ca:43:
fa:24:57:07:c6:e8:0b:a3:47:2c:57:94:51:29:ed:
33:dd:b2:56:de:cb:69:c3:ba:12:78:3b:90:0d:8a:
0b:13:66:6f:4e:e0:36:79:a3:64:6a:2d:7b:3d:ae:
20:8e:57:65:9c:f3:75:62:e0:62:c1:0b:47:68:bc:
5a:ae:cc:a3:d0:ec:29:2e:3e:64:3e:15:0e:72:c0:
7a:ce:89:5f:79:c0:21:e8:a5:a1:ad:69:22:46:5f:
35:92:5d:79:19:a6:e3:9a:bd:69:72:6f:3f:d2:cf:
fb:e8:3e:5d:d9:86:d5:bf:ea:04:62:69:2f:0f:7b:
04:83:e2:8b:88:b1:d6:e7:86:2a:c6:c6:7a:4c:16:
12:eb:0d:7e:93:e1:4f:5d:f8:fa:8c:ee:29:db:d7:
f0:d7:08:a8:ab:64:5d:44:61:e9:68:65:79:a2:12:
4f:2b:2e:db:5d:e6:2a:44:b2:1c:cd:9c:3a:e6:77:
61:56:73:b5:45:22:5d:98:eb:5c:9c:5e:51:fc:d0:
11:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:03:E5:CD:90:A2:FA:E3:02:F3:B3:3A:81:E3:E0:A5:B8:65:69:E2
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/FgPlzZCi-uMC87M6gePgpbhlaeI.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:bd:0c:1f:e8:6b:81:4a:ad:c7:ac:bd:4d:16:b2:f4:d6:d7:
91:be:3f:a6:db:0e:50:35:a9:d6:c0:99:e7:61:dd:be:82:9b:
5a:0a:07:49:8e:1a:02:68:22:d3:e7:40:c8:29:52:c3:e5:d9:
ea:b0:5f:db:ff:20:d3:4d:29:84:f4:a8:5a:5c:0c:35:e6:1a:
4a:ef:a0:32:ff:8c:aa:5e:f9:e3:c6:4b:7e:47:03:31:50:09:
b2:c7:93:26:57:a7:be:73:ed:36:6e:6d:56:2b:1b:bf:16:da:
89:ef:08:16:bc:5f:0e:dd:69:00:f7:de:0a:09:f8:6e:d4:15:
f4:e1:8e:3e:3b:ec:8d:42:ee:b7:10:a4:b3:1e:bc:1e:4c:e9:
a7:dc:ed:e5:94:ee:33:b6:36:5a:32:0e:85:64:96:79:42:51:
74:3b:ff:6b:37:91:57:31:e1:f2:66:03:0e:d6:14:78:50:03:
f2:3b:4b:31:66:a6:59:b6:0f:b4:7f:3b:53:ac:fe:cf:88:df:
49:24:fe:ce:9a:27:da:5f:c8:77:9d:0f:74:1f:2f:b3:bc:68:
98:dc:cd:e9:f7:e3:fd:dc:2b:77:e6:8e:9c:e1:bf:14:29:d0:
96:24:fc:78:64:da:e7:36:b8:39:9f:df:d5:b4:af:95:50:9a:
e1:3f:79:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org