Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/KDAljA1f_ffTOximDkBntGjRyTE.roa
File: KDAljA1f_ffTOximDkBntGjRyTE.roa (raw, json)
Hash identifier: jAEi1h2rFm23hSQjqUW/CPiCl7IfPT/+Pz4MQqkOJI8=
Subject key identifier: 28:30:25:8C:0D:5F:FD:F7:D3:3B:18:A6:0E:40:67:B4:68:D1:C9:31
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 44B5
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/KDAljA1f_ffTOximDkBntGjRyTE.roa
Signing time: Tue 15 Mar 2022 00:30:12 +0000
ROA not before: Tue 15 Mar 2022 00:30:12 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17589 (0x44b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 15 00:30:12 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=2830258C0D5FFDF7D33B18A60E4067B468D1C931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3c:76:c4:cc:49:1e:4a:9c:15:2d:fa:1e:8c:
ec:88:76:70:86:d5:07:81:c7:e9:76:00:9a:e0:6a:
8c:10:9e:e5:43:00:d7:d3:dd:6c:58:f0:f3:6f:69:
62:51:76:79:6c:a2:d0:47:97:ac:8f:a2:d4:be:ee:
c7:4b:93:57:34:b5:21:0f:4e:3b:c8:37:e5:0d:d6:
22:78:98:d6:24:81:fc:e1:08:d9:63:1e:2d:34:ab:
2d:85:e9:9d:96:0f:20:df:1b:53:87:35:05:6f:eb:
7c:c0:11:f4:e4:40:db:ed:d9:25:90:7a:01:8a:bb:
6e:d8:2f:bb:a4:57:c2:f0:d8:e9:d8:12:75:a1:64:
1a:78:58:8a:d5:91:84:73:3d:a6:9c:a2:36:80:7b:
6a:a8:5d:b9:3e:5f:1f:2f:95:e1:f4:56:c3:00:4a:
12:9b:33:0e:f1:5e:88:62:2d:16:5f:10:05:78:61:
c0:92:45:56:c7:f7:5c:45:14:e2:b1:69:29:92:df:
12:e2:7e:f6:18:15:17:58:87:07:f2:fd:f4:f7:47:
da:2f:c5:24:5d:d4:25:8d:7d:6d:c8:ad:89:74:43:
fd:76:1c:24:63:53:be:7f:6e:eb:cc:48:70:86:1d:
3c:63:f0:53:65:ef:0f:d2:8e:68:eb:b5:2a:a1:69:
1a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:30:25:8C:0D:5F:FD:F7:D3:3B:18:A6:0E:40:67:B4:68:D1:C9:31
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/KDAljA1f_ffTOximDkBntGjRyTE.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
31:7e:a1:55:31:fb:fd:61:88:4d:0e:86:2c:b5:a6:50:72:e3:
7d:4b:f7:c4:04:8d:55:72:29:83:1a:56:45:89:97:20:04:0c:
29:27:5e:cf:51:73:71:2c:45:fa:83:f7:72:69:28:71:1e:6d:
f6:03:b1:25:a6:99:2d:4b:9d:6e:d1:85:5c:bf:a5:21:0c:2b:
8a:8d:af:56:a7:c8:b5:c3:b5:30:cc:c8:98:a7:dc:90:07:bd:
1d:ea:8b:69:0b:07:76:e3:ed:10:7d:c5:64:5c:d4:80:0b:ca:
ac:3e:42:54:95:8a:a5:16:f0:05:8d:72:9e:a8:9d:04:4e:88:
5d:c2:a5:7a:c1:75:d6:bd:c0:56:54:18:58:05:3d:a2:da:b7:
cb:6f:c9:c7:b9:05:85:de:72:b3:26:72:06:59:ff:0f:d8:33:
a7:ae:f7:ec:f2:7a:2e:d1:37:ae:7e:9e:38:2a:5e:95:21:68:
d1:96:cf:19:a3:49:0d:67:2f:4f:23:62:41:ed:c9:e0:d8:02:
64:fa:59:7c:66:51:1b:55:c6:0b:e2:97:79:c4:ce:d5:a9:9f:
5f:e5:0e:f7:87:81:16:c0:ac:16:53:54:75:08:48:a2:83:32:
1f:66:99:da:22:8f:e1:21:c8:d0:93:a0:00:a5:5c:0f:f4:30:
e0:09:07:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org