Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/NA6Hy5khAfkYzG7XZTHCsUqy9uA.roa
File: NA6Hy5khAfkYzG7XZTHCsUqy9uA.roa (raw, json)
Hash identifier: ZHu8m+1/J5QyYEancAP1BeiCMMvELTuCplquHMCbKdg=
Subject key identifier: 34:0E:87:CB:99:21:01:F9:18:CC:6E:D7:65:31:C2:B1:4A:B2:F6:E0
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 44CD
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/NA6Hy5khAfkYzG7XZTHCsUqy9uA.roa
Signing time: Thu 17 Mar 2022 00:30:08 +0000
ROA not before: Thu 17 Mar 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17613 (0x44cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 17 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=340E87CB992101F918CC6ED76531C2B14AB2F6E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:18:c0:8a:af:ad:41:e7:ca:4e:b4:fc:eb:ac:
cc:83:0d:2e:f9:2f:1d:e1:45:d4:46:a6:4c:0f:a0:
a6:d4:17:a6:f4:55:d4:0c:2f:4c:02:31:5a:b0:02:
07:14:d9:27:df:3a:6d:40:9c:e0:d3:5c:ef:0e:07:
74:0f:7c:64:50:e8:40:04:e3:64:a6:e8:73:12:e2:
5a:8c:a7:42:32:bb:19:9f:97:f3:ed:fe:f3:4d:13:
7e:90:13:94:f6:fd:72:39:d9:e6:7e:1d:b3:05:d4:
97:83:7b:b1:24:35:43:3d:3d:4e:a5:ea:4d:ac:8b:
60:5e:1f:bc:14:4d:82:20:1f:38:3c:43:b8:52:51:
b4:d2:30:d9:55:0f:63:33:8e:d1:f2:73:d9:f2:f0:
a9:c2:00:2d:4b:ce:6c:2d:d3:7a:cf:c3:7d:9c:8c:
20:79:ab:d4:d6:b4:42:52:2f:6f:b5:7d:42:7a:ec:
a2:c9:d4:60:12:53:7c:23:34:0b:18:52:9e:60:d4:
9a:f3:da:33:40:d2:ac:84:ed:28:36:ff:ee:e9:29:
9d:3c:bf:6e:46:5b:53:0d:7f:a8:72:a8:53:be:49:
09:d2:67:0e:60:b2:61:37:3d:f0:d6:dc:b2:fd:5a:
f4:d7:d3:38:04:c3:bf:a1:9c:fa:ae:51:15:a8:b7:
e1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0E:87:CB:99:21:01:F9:18:CC:6E:D7:65:31:C2:B1:4A:B2:F6:E0
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/NA6Hy5khAfkYzG7XZTHCsUqy9uA.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
86:cb:cb:55:5a:52:b3:46:2d:20:8e:4b:fa:2a:7a:d1:fc:8d:
f6:50:6d:80:53:af:1f:65:42:06:0f:f7:0c:cc:84:6e:72:e1:
28:c7:f4:50:79:ff:a4:c8:eb:c9:65:38:9a:32:e7:5a:17:71:
d0:5c:01:e4:4e:f1:17:67:2d:54:50:ce:d2:b0:85:8c:a7:43:
a8:b3:be:84:c0:7d:1a:ce:21:d9:69:97:6f:43:d6:49:27:61:
eb:7e:ab:b2:ff:1a:18:8f:3d:db:79:8a:f3:96:5b:73:b3:72:
6f:1b:c9:ed:66:ee:45:e7:1b:ee:42:48:dd:03:0c:3a:6a:38:
26:dd:58:46:83:84:d4:71:b3:ba:14:b2:55:ec:51:3e:18:5f:
29:63:91:36:81:c1:8f:8c:50:62:f4:93:b1:8d:4f:f8:2b:97:
3f:fd:2a:81:87:65:f4:74:9b:af:25:4c:88:ab:5a:08:57:9a:
7f:4d:5b:52:e3:01:ac:03:51:2a:4f:e9:a9:af:ac:43:b6:cc:
80:38:3d:f0:76:86:3e:5a:2e:5f:85:22:d0:73:2d:f3:d5:1b:
9b:a5:3c:1e:f2:b0:93:42:b7:28:8a:16:69:0b:51:8a:b2:54:
cb:75:b6:00:f8:78:1a:39:e5:ee:9f:8f:78:8c:9e:13:7c:65:
86:51:76:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org