Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/H-WwVM99HlKPYxbsy1Ypm1mdUH8.roa
File: H-WwVM99HlKPYxbsy1Ypm1mdUH8.roa (raw, json)
Hash identifier: A6Ysk2s7lcT6eAHwC/OqSU9NSh5N//0zglakMp6a7/o=
Subject key identifier: 1F:E5:B0:54:CF:7D:1E:52:8F:63:16:EC:CB:56:29:9B:59:9D:50:7F
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4613
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/H-WwVM99HlKPYxbsy1Ypm1mdUH8.roa
Signing time: Sat 09 Apr 2022 00:30:10 +0000
ROA not before: Sat 09 Apr 2022 00:30:10 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17939 (0x4613)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 9 00:30:10 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=1FE5B054CF7D1E528F6316ECCB56299B599D507F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e9:e9:c2:ac:72:69:43:f6:85:04:4e:fc:00:
71:86:0a:e2:6b:57:86:66:ab:4a:f3:ac:34:62:53:
43:62:53:89:34:8e:3b:d9:c3:fa:30:cf:69:f6:35:
1a:59:4a:f8:96:9b:85:fa:e8:6f:12:2b:be:2a:8b:
3b:da:3f:ef:72:91:8a:ad:35:86:40:30:cf:9d:0a:
40:d3:1f:21:12:94:7e:63:69:ad:d9:24:1f:d9:92:
e1:a8:f5:16:68:86:a0:9f:f3:d1:b3:8b:b9:16:df:
03:a0:f7:ad:f8:ee:e6:55:cc:95:5c:91:64:3e:63:
85:db:c9:53:6e:3b:a1:d7:f5:9d:9e:93:7c:0b:13:
9e:22:50:95:9c:4e:40:48:7e:f3:c8:63:f2:6c:a6:
82:50:26:ec:e0:f6:7f:34:0d:27:0d:91:7d:f2:bd:
00:33:75:06:9b:72:46:2c:4e:f4:a5:36:06:74:60:
22:e4:4d:d3:bf:f3:de:8f:a3:ef:d5:5a:18:68:05:
1a:6e:cf:48:f4:ce:0f:6b:95:20:15:92:94:5e:56:
97:f5:99:e4:e9:ad:23:44:c5:a6:db:b6:d5:ee:a5:
24:0c:1a:31:6f:a9:3d:16:22:d8:bb:92:c7:08:fc:
69:5a:21:d7:78:93:a6:89:2c:9d:96:ef:c4:96:0b:
72:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E5:B0:54:CF:7D:1E:52:8F:63:16:EC:CB:56:29:9B:59:9D:50:7F
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/H-WwVM99HlKPYxbsy1Ypm1mdUH8.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
af:01:4e:4b:5a:cf:14:be:85:d4:00:b3:6a:75:40:26:2e:88:
ea:20:8e:d7:a4:8e:d7:74:45:5a:d6:e9:5d:a4:30:e7:66:46:
f9:ec:d4:7c:9a:b2:6f:97:2b:f6:7c:5b:6d:11:f1:26:2b:e8:
89:1f:38:2e:03:e4:35:e7:b9:58:88:a3:1a:35:ea:68:f8:55:
42:a9:6b:98:86:1a:07:40:4c:22:de:76:29:6a:ad:1b:1b:26:
df:56:73:bd:0b:0d:37:42:b5:ff:3e:2a:fc:58:48:c2:cb:84:
fd:83:db:2f:d3:52:99:0f:4b:8b:40:ea:46:11:5a:29:9c:7f:
3b:be:04:c9:b1:fe:fe:ae:4b:0e:57:94:19:0e:f7:d1:c4:9d:
51:5e:b2:c8:fa:a8:41:8f:83:73:d0:bd:d5:98:14:9f:7e:43:
f9:d7:f4:15:bc:8f:b5:3c:26:05:e3:81:72:bb:48:e0:dd:0e:
e5:40:4c:a8:f7:96:1b:78:9d:9c:27:d9:b0:54:f4:f7:22:eb:
8a:1d:9a:8e:3e:67:cb:e8:96:ac:4d:36:93:77:0e:bb:75:3f:
79:60:46:aa:93:bf:95:74:44:85:6d:80:96:2f:ad:3e:5f:3d:
86:88:59:e8:dc:aa:0f:c9:2c:c7:8e:85:ce:b6:90:4e:ae:ae:
38:8d:7c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org