Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/H1tbNT_WJBUjvsoG13_bXzSmyBE.roa
File: H1tbNT_WJBUjvsoG13_bXzSmyBE.roa (raw, json)
Hash identifier: PfmY3zxQHxGQuMl5IoUMIKfMsP9Wk1PzQNHP7y6/Sn4=
Subject key identifier: 1F:5B:5B:35:3F:D6:24:15:23:BE:CA:06:D7:7F:DB:5F:34:A6:C8:11
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 496C
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/H1tbNT_WJBUjvsoG13_bXzSmyBE.roa
Signing time: Mon 06 Jun 2022 00:30:08 +0000
ROA not before: Mon 06 Jun 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18796 (0x496c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 6 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=1F5B5B353FD6241523BECA06D77FDB5F34A6C811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:17:2e:23:4e:27:3c:ba:ec:17:4f:a5:86:b9:
61:e3:2e:29:2f:42:47:3e:3b:e4:ec:e7:e0:6e:45:
20:aa:5d:fc:79:18:b2:5d:47:41:22:7c:40:66:fb:
5c:fb:93:e1:1f:7a:e5:cc:f4:38:09:a3:4a:26:68:
4b:96:0f:fb:79:b3:51:80:52:6c:71:50:43:67:d0:
e6:51:5f:1a:8d:c7:99:d6:99:cc:43:ab:ec:fa:05:
31:1e:a1:08:ab:d1:ef:e5:db:bd:0a:da:f8:1c:11:
bc:e6:28:c0:cd:43:ff:96:e1:57:be:39:aa:21:e6:
ed:8c:bc:1f:61:83:c2:0e:a9:40:04:3d:27:95:40:
69:56:05:25:19:cf:a5:d2:f7:25:50:bf:51:e3:48:
e8:f7:3e:ec:2a:79:35:6d:96:2c:3a:59:bd:87:72:
70:9e:30:d6:06:55:47:f2:25:96:e7:6f:48:a3:2a:
0c:36:98:eb:4e:6c:5f:e3:bc:12:4b:fe:e1:27:a3:
bc:05:87:26:00:45:3c:3a:76:80:cb:4f:98:bd:b7:
16:4a:f3:c5:09:d8:d8:1f:65:35:ad:55:74:ec:c5:
89:00:cf:4f:2d:0a:32:46:b4:b3:98:31:4f:78:b0:
94:ad:90:ec:45:d0:55:a8:31:bb:e3:61:94:db:06:
d8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:5B:5B:35:3F:D6:24:15:23:BE:CA:06:D7:7F:DB:5F:34:A6:C8:11
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/H1tbNT_WJBUjvsoG13_bXzSmyBE.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:67:30:e1:da:69:ff:38:b6:18:f4:bb:a3:7b:4e:b4:37:61:
2d:de:73:68:df:fc:31:f8:99:9e:b7:f0:db:c8:17:46:94:18:
42:48:31:0f:5e:4a:ce:ac:5d:83:98:52:0c:aa:b3:a3:7a:de:
8d:d3:6a:d3:96:31:f4:c5:72:28:b9:83:56:75:5c:fd:49:f4:
02:f0:fc:f2:1f:c5:bf:86:bb:ac:0f:31:1d:18:74:3f:0e:39:
1f:b4:b3:cc:f9:80:4d:59:8c:2d:82:ae:6f:b0:94:37:01:46:
59:69:96:9d:9d:be:8b:e0:00:a5:d3:c5:61:79:d8:c6:41:88:
4a:ae:a8:f8:d7:d1:99:ec:1f:13:62:3d:4e:1b:bc:64:1b:9b:
31:2e:8b:b3:33:08:c7:d6:bc:e3:27:c2:0c:94:8c:8f:28:a1:
d4:ce:a3:a0:f8:af:75:a6:1b:34:e5:8e:c0:5e:9f:7f:ec:98:
91:9f:b9:b7:a2:a3:3a:97:8c:fe:d6:9c:44:de:58:4e:38:7d:
8e:12:59:3a:d6:04:11:65:04:5e:52:ac:56:6f:84:ed:0a:9e:
aa:4c:c4:10:dd:b9:e4:d7:5e:1a:47:44:bc:ac:12:13:ab:be:
36:b4:62:2a:7f:65:c2:d6:87:37:d7:d7:c7:f9:51:7a:75:8d:
85:71:55:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org