Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/R5K5COQK__exTknXylhco5ZwDlQ.roa
File: R5K5COQK__exTknXylhco5ZwDlQ.roa (raw, json)
Hash identifier: LxJ60a8yTv/xbq9ek1676wn3+rPtvd3kvjUfmeOqEQY=
Subject key identifier: 47:92:B9:08:E4:0A:FF:F7:B1:4E:49:D7:CA:58:5C:A3:96:70:0E:54
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4532
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/R5K5COQK__exTknXylhco5ZwDlQ.roa
Signing time: Thu 24 Mar 2022 00:30:06 +0000
ROA not before: Thu 24 Mar 2022 00:30:06 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17714 (0x4532)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 24 00:30:06 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=4792B908E40AFFF7B14E49D7CA585CA396700E54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1f:06:4a:95:41:54:04:9f:4c:42:9e:38:b6:
08:0f:c2:d8:45:32:87:c8:11:91:c5:85:bc:58:f3:
76:b0:57:eb:13:18:75:8c:36:fd:dc:72:69:45:13:
04:66:6b:47:2f:f0:99:65:86:18:15:8d:57:94:fc:
31:c8:22:3d:fa:f9:0d:4e:35:ac:a5:7f:10:15:3b:
8c:8e:71:6e:a7:00:d4:0b:7d:a5:ce:99:ab:4e:bb:
80:0c:f3:3c:73:d7:c7:4b:6b:00:ab:a7:dc:f2:a9:
8c:3b:7d:ba:68:2f:80:9d:f8:1e:67:52:33:ca:64:
0b:9c:f9:a0:68:21:c2:c8:5b:85:85:b3:41:99:93:
19:be:04:49:ce:de:19:27:6c:9b:5d:22:22:ca:e0:
dc:d4:92:39:1d:04:2c:b2:5a:7a:09:30:a2:1a:df:
eb:b1:e5:d0:08:a4:87:ba:f5:e1:fd:89:d3:f6:fd:
de:d9:d4:51:39:15:64:f4:78:03:ba:f7:87:01:00:
16:42:c3:e3:53:74:06:f4:e6:79:e3:b3:11:b2:be:
30:53:28:65:e2:5d:db:ff:77:ac:f1:a5:90:2e:69:
83:88:b9:b2:fd:8c:91:fc:a7:fa:02:83:43:c8:4d:
e5:c3:bf:94:e7:2a:62:35:bd:a4:ac:d4:05:39:d5:
3a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:92:B9:08:E4:0A:FF:F7:B1:4E:49:D7:CA:58:5C:A3:96:70:0E:54
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/R5K5COQK__exTknXylhco5ZwDlQ.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:da:76:bb:85:88:ab:01:78:a6:7a:6c:6d:6c:94:46:0d:0e:
fa:f1:f8:78:8d:aa:73:38:46:8f:ea:ec:da:b0:fb:18:36:49:
14:2e:3d:d1:99:3b:88:0d:2e:b9:01:98:6d:15:3d:12:e5:a1:
5d:cf:d8:5b:c6:b4:dc:fb:11:6f:63:0d:41:e9:2b:cd:1c:34:
a5:f9:65:42:9b:ab:87:bf:f7:5e:8a:4f:ee:a7:a3:57:a6:3c:
59:e1:e1:a5:74:44:00:b9:7a:e9:da:7e:33:f5:0e:31:a0:b5:
e4:4e:0f:f7:2f:1a:e9:ca:c5:17:b0:35:77:03:15:42:56:78:
64:14:94:ad:ba:db:27:97:ee:cd:36:6c:cd:06:a8:2b:a3:6d:
f1:7b:39:ec:ba:ad:be:72:c5:ce:ec:4b:4f:be:7e:9b:3c:8d:
66:e8:0e:81:aa:d1:24:2e:6e:16:17:af:13:72:78:b5:a8:29:
a5:60:b1:0e:35:63:8c:79:4b:ab:0c:29:af:1a:8f:36:34:14:
9f:60:5f:5a:2b:fa:ce:cf:88:c9:22:07:58:ed:f0:b2:65:7a:
b4:ba:18:20:f9:d7:c5:e7:18:21:26:2c:29:ca:92:b3:4b:a6:
08:29:b3:97:80:1d:24:90:49:4c:8e:31:bc:16:1e:1e:1d:c4:
7a:40:56:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org