Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/NfruSEQW--7Zz5BEMxxWmKzTbJA.roa
File: NfruSEQW--7Zz5BEMxxWmKzTbJA.roa (raw, json)
Hash identifier: aDQ92vpl0fRLDTYs9upKhL8SQyoVcYAZM54KdNFPnHA=
Subject key identifier: 35:FA:EE:48:44:16:FB:EE:D9:CF:90:44:33:1C:56:98:AC:D3:6C:90
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4934
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/NfruSEQW--7Zz5BEMxxWmKzTbJA.roa
Signing time: Fri 03 Jun 2022 00:30:10 +0000
ROA not before: Fri 03 Jun 2022 00:30:10 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18740 (0x4934)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 3 00:30:10 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=35FAEE484416FBEED9CF9044331C5698ACD36C90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:eb:f6:48:cf:6d:f8:81:b3:2d:bf:a6:27:d0:
53:f0:3d:72:9d:0b:21:f4:40:5b:e3:3b:3e:ba:63:
86:72:d6:c3:ce:d5:cf:08:87:6b:d0:2c:3d:17:0a:
37:40:a0:e6:dc:f0:cc:75:76:ac:43:d8:c5:33:a1:
86:de:23:c5:7f:a4:d7:19:ea:65:15:2a:c5:88:6e:
b4:91:17:95:85:9e:07:b9:9c:bb:21:9e:ad:66:e2:
3b:28:8f:e4:49:55:45:c2:80:65:b1:96:02:16:7d:
6f:91:8d:39:6d:4a:58:ca:48:d2:3e:10:fe:da:29:
be:6f:9b:a8:dd:13:46:79:0b:ab:7f:b5:93:e4:6b:
47:c7:08:98:38:37:ed:eb:78:f2:61:46:61:a6:3a:
8a:7d:11:9e:c8:10:85:a8:cf:00:17:88:0c:c6:5e:
26:6f:ac:70:36:31:e8:eb:68:fb:8b:3c:79:dd:34:
55:3f:44:7e:df:0b:0a:bd:89:bf:2e:22:f9:b8:e9:
67:c1:7b:b3:ff:32:4b:5c:e9:7a:e6:b9:f7:9b:72:
34:a2:08:ff:9c:a4:f2:04:db:ab:d8:6a:f3:83:28:
43:4f:00:b6:0e:61:81:fc:b6:3f:ea:b0:4f:08:a6:
80:e7:a3:57:92:4e:70:2d:ed:77:dc:be:b7:85:3e:
29:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FA:EE:48:44:16:FB:EE:D9:CF:90:44:33:1C:56:98:AC:D3:6C:90
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/NfruSEQW--7Zz5BEMxxWmKzTbJA.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.2.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:72:5e:6c:e4:14:1a:da:19:da:b1:b8:05:fc:34:b1:fe:ba:
a1:63:d1:8c:3a:c0:b8:de:25:e9:3b:c5:1f:51:cd:c2:8b:c6:
fe:08:85:0d:62:d2:4d:3b:8c:c8:ff:0a:fd:29:3a:be:6e:a9:
2c:45:86:4d:25:84:b8:eb:11:bb:f3:54:1e:91:ec:1d:bb:8a:
c8:a4:bf:ac:9f:e0:ac:a8:4a:2c:33:03:87:ff:6f:5c:33:74:
cd:23:4b:19:ea:a7:37:15:20:b3:a4:cb:e1:9d:62:27:38:e3:
d8:ed:ad:5c:05:61:5f:ef:3d:f2:1a:86:d1:ca:4d:82:2b:1e:
60:47:dc:36:4c:0f:cc:bd:f3:15:2b:10:40:f1:cd:c8:9b:36:
8e:fa:30:92:60:b2:76:a3:9a:d7:58:38:da:d5:f9:d1:ab:aa:
56:07:e5:4d:c7:a3:67:23:4f:1a:f7:de:11:94:d5:16:ed:bf:
5a:a1:0d:68:51:23:2f:c2:24:53:d2:88:69:0f:06:54:ea:80:
fb:83:7e:9b:17:35:54:1e:4d:61:e8:52:58:7b:e8:21:db:25:
e7:f9:d4:b7:28:f4:b8:0e:23:77:fb:ec:7c:4e:8e:4f:30:36:
4d:11:54:08:c3:39:9f:91:bf:c5:95:59:0b:f3:a3:ca:60:3f:
75:ee:c3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org