Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/IA_gRUTi-mb_H44ODrCZnvrtvh0.roa
File: IA_gRUTi-mb_H44ODrCZnvrtvh0.roa (raw, json)
Hash identifier: 5ptXYwQ94w7RljgvIB9p4Zakf+MHkhMyWKdXXBf7b7A=
Subject key identifier: 20:0F:E0:45:44:E2:FA:66:FF:1F:8E:0E:0E:B0:99:9E:FA:ED:BE:1D
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 47F3
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/IA_gRUTi-mb_H44ODrCZnvrtvh0.roa
Signing time: Fri 13 May 2022 00:30:08 +0000
ROA not before: Fri 13 May 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18419 (0x47f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 13 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=200FE04544E2FA66FF1F8E0E0EB0999EFAEDBE1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:54:1a:d7:8a:b4:60:e9:23:af:c5:1b:bb:bf:
29:03:8f:09:72:89:d4:c6:57:65:8b:9d:b6:e7:76:
8b:db:60:48:19:00:96:21:96:24:12:7f:a0:dd:67:
6f:c2:6d:81:ae:cc:57:99:85:c6:ff:e9:aa:98:df:
5e:6f:a0:6f:47:2e:7c:10:47:f3:3c:75:ab:e4:9f:
82:0a:f1:5d:78:fd:8b:5f:dc:d2:e1:a5:d5:9b:3f:
e0:7c:a8:6e:b5:3c:2a:ad:ec:8e:ec:76:c9:c7:73:
9f:22:1e:20:17:a0:c5:ea:a2:be:e4:7f:73:43:4c:
74:c8:4c:0e:4d:e6:94:74:2f:68:0c:08:bf:6e:bf:
5c:b6:f7:ce:fc:d4:f1:c4:ef:87:18:16:2f:29:3e:
71:6e:c6:65:03:5c:e4:c3:f6:90:5c:ac:1b:d6:cb:
92:90:63:9c:4f:3c:5f:ca:9d:6c:71:75:61:24:bd:
c1:42:d0:c1:58:2b:9a:86:3f:44:1f:01:b2:1d:03:
c1:8d:f2:ff:0e:33:8a:b7:c6:bc:8f:b6:02:68:02:
c8:7f:79:f8:a5:e2:36:f5:42:73:5e:48:16:06:66:
26:1d:04:66:4d:5e:18:d0:26:e8:2b:d1:9a:01:e2:
0e:71:3b:84:60:8a:ea:b3:d0:33:f7:cc:d8:0a:08:
83:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0F:E0:45:44:E2:FA:66:FF:1F:8E:0E:0E:B0:99:9E:FA:ED:BE:1D
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/IA_gRUTi-mb_H44ODrCZnvrtvh0.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
95:f0:25:e5:55:34:cd:8f:08:35:b0:9b:96:59:b3:8b:5e:0c:
c4:b2:05:3d:3c:71:05:ad:e9:95:9b:56:31:d1:2f:5c:e6:94:
2d:9e:b9:3f:b8:c7:e1:84:52:7e:79:34:a0:51:ab:bd:5e:80:
f2:d8:1a:55:06:36:b5:7e:7e:6e:a2:56:7a:90:91:7a:39:77:
f1:c5:40:1d:4d:65:39:73:29:53:f8:8c:ed:27:d7:55:4d:64:
30:a3:14:eb:b5:47:66:47:26:d5:5b:f7:89:19:4f:a4:b1:ed:
e8:0c:ca:09:aa:a1:10:17:b4:23:21:93:3e:05:0f:b2:55:41:
88:80:55:a9:87:5d:8e:d7:47:aa:fd:8a:7e:50:d9:97:d1:de:
55:60:8c:9e:fd:2d:88:b5:a6:54:3b:31:fc:cf:57:cb:44:af:
08:3e:8f:d2:da:f9:48:be:a6:e4:de:27:59:a9:79:77:3b:20:
c8:06:46:f6:6e:22:e9:21:d7:54:5d:77:11:fc:19:6e:07:96:
f8:fe:12:25:2b:23:a3:0f:6e:cf:1d:ff:3a:f4:d2:ff:4e:ae:
4f:7b:ec:6d:1f:c6:56:80:7e:4f:86:25:c3:bf:65:b8:b1:78:
c2:c3:bd:c2:7d:1b:cb:8b:51:f6:be:d7:d7:3f:41:15:86:46:
66:97:b6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org