Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/Pn4fbs_ucMjV_QUvZr1hIbdmoIs.roa
File: Pn4fbs_ucMjV_QUvZr1hIbdmoIs.roa (raw, json)
Hash identifier: N+VvYLUocsdZJPN9ZzDmB0sS8cmF5dRy6HnsDU2Sqas=
Subject key identifier: 3E:7E:1F:6E:CF:EE:70:C8:D5:FD:05:2F:66:BD:61:21:B7:66:A0:8B
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 44A2
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Pn4fbs_ucMjV_QUvZr1hIbdmoIs.roa
Signing time: Mon 14 Mar 2022 00:30:07 +0000
ROA not before: Mon 14 Mar 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17570 (0x44a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 14 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=3E7E1F6ECFEE70C8D5FD052F66BD6121B766A08B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5a:3c:9f:1a:9d:5e:c1:2e:09:3f:e7:ff:6d:
ac:f4:dd:9b:e1:22:81:23:db:e9:d2:35:75:1e:c8:
36:da:53:8a:4f:cb:7b:5b:d0:63:50:98:de:58:8c:
21:99:03:06:15:e0:85:9f:f7:8f:4e:cf:00:31:9c:
22:87:a6:bf:82:3c:fe:34:f9:44:f8:bf:79:30:ed:
a6:af:30:fd:ee:6b:92:4e:b0:02:73:4e:5d:76:e0:
17:a3:1a:34:cd:b3:3e:73:b3:4a:5f:5c:e1:d1:51:
19:dc:19:05:e5:e3:c5:ae:1f:2f:e8:f4:05:b3:dc:
23:67:b6:23:de:1b:73:c3:37:cd:a0:20:3c:73:00:
cb:43:f6:14:e4:1f:c1:02:e7:61:76:a1:97:f5:93:
1a:61:ea:29:85:57:20:d7:17:37:f2:dc:08:3f:b9:
89:d3:b7:a4:aa:45:ac:52:10:2b:53:c0:81:39:ed:
10:65:f9:97:4f:4c:fa:5f:3a:a1:fe:d5:bd:11:cc:
35:7c:3e:d9:17:a3:58:a4:6d:a9:92:22:d5:38:6f:
d5:c0:7f:da:3c:1a:6a:81:58:87:3a:bd:a2:cb:c3:
47:ae:4a:d1:c3:e3:85:64:62:07:42:a6:f9:70:5e:
48:08:ac:88:5c:98:08:1a:7b:ff:ba:da:6e:6c:67:
be:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7E:1F:6E:CF:EE:70:C8:D5:FD:05:2F:66:BD:61:21:B7:66:A0:8B
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Pn4fbs_ucMjV_QUvZr1hIbdmoIs.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
31:39:10:96:3d:77:ca:51:8f:6c:cb:bc:e8:81:23:8d:99:e5:
29:97:15:c1:36:ce:72:cd:66:82:7e:17:2e:35:a7:16:02:48:
dc:96:54:6d:0c:c9:28:a2:89:bf:c1:c8:ab:af:90:13:5a:68:
b9:a8:f5:d7:dd:94:17:ce:5c:31:42:a7:a5:dc:03:ac:4e:01:
c1:2d:c8:b6:4d:14:0d:7e:03:66:8d:a2:dd:aa:20:3e:1e:12:
e1:67:ca:21:e1:fc:03:10:4a:e8:6b:eb:58:1f:d8:0c:59:83:
f3:df:00:bd:35:9d:2d:05:7f:ad:fb:95:13:b1:a2:a2:c6:44:
bf:83:42:a2:bb:be:e0:9f:31:84:1c:df:a0:67:8d:52:a5:26:
d7:60:49:78:48:48:93:a9:0e:cd:2b:0b:da:02:64:8e:01:2a:
67:62:9f:30:c8:ab:74:f9:14:c6:66:ac:85:ac:d8:d5:a4:77:
61:a1:a1:07:d0:ad:00:ea:30:2f:5a:02:f3:27:70:08:2a:42:
f2:dc:ae:40:cb:f8:8b:45:ff:78:c2:90:98:6a:98:4c:fa:9c:
39:ec:e8:b4:73:68:3b:77:85:dc:1c:b1:82:c4:ac:2e:c1:87:
5d:06:85:d0:b3:57:8b:76:4e:fa:32:c1:f9:26:de:e1:97:a1:
95:95:65:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org