Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/R63LNP3aPAKD8_i3gARG_yAajEk.roa
File: R63LNP3aPAKD8_i3gARG_yAajEk.roa (raw, json)
Hash identifier: Msdpgn7U+SeGq+DEnPB+b3OWlRumzGZc6B5SXCdAgx4=
Subject key identifier: 47:AD:CB:34:FD:DA:3C:02:83:F3:F8:B7:80:04:46:FF:20:1A:8C:49
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 44E1
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/R63LNP3aPAKD8_i3gARG_yAajEk.roa
Signing time: Fri 18 Mar 2022 00:30:11 +0000
ROA not before: Fri 18 Mar 2022 00:30:11 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17633 (0x44e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 18 00:30:11 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=47ADCB34FDDA3C0283F3F8B7800446FF201A8C49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:19:32:24:80:34:94:28:0a:c3:44:87:cf:ab:
80:08:2c:56:19:eb:eb:85:77:ff:48:c6:86:10:10:
1d:57:3c:e6:ab:bc:23:ba:11:ac:fe:e1:1f:65:76:
18:d5:46:1b:55:08:cb:81:0a:eb:dd:31:1c:a8:4a:
cf:86:01:76:9c:61:10:0d:82:eb:81:9a:f2:3c:c2:
31:98:7b:bb:fd:8f:b9:02:ef:94:30:53:cc:8f:9f:
6c:e4:ee:8b:83:a3:8f:56:c9:f3:11:eb:38:39:cf:
4b:9b:fe:60:aa:83:10:33:3e:5e:a2:50:bf:49:b7:
42:59:6a:5f:cc:f5:d1:33:fa:a9:8d:ab:ba:8b:0b:
13:5f:7f:cd:3e:2a:b6:0f:ba:34:9c:91:62:a0:62:
2e:35:b3:ae:6d:6d:1c:56:25:70:da:da:35:6b:ed:
de:87:c2:45:20:f2:c1:bb:20:17:59:a5:16:f1:77:
8f:30:36:0a:55:3e:50:53:74:79:e7:ec:9c:de:8a:
6c:71:58:4a:35:3f:b3:e6:6d:23:83:f0:82:85:e2:
5a:d4:8b:e3:b2:0a:72:73:c1:4d:e7:d8:f9:df:ab:
4a:8c:67:f1:35:1c:f6:d7:64:48:33:44:39:a0:6d:
a9:77:51:bb:62:3d:43:e9:12:47:5d:02:07:ee:ce:
ae:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AD:CB:34:FD:DA:3C:02:83:F3:F8:B7:80:04:46:FF:20:1A:8C:49
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/R63LNP3aPAKD8_i3gARG_yAajEk.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:ec:11:a6:a9:b2:58:71:21:09:56:fc:b0:25:35:d0:ea:93:
32:59:e7:14:34:0c:96:d7:e5:b5:44:8d:63:01:ac:68:4b:c2:
97:ab:b5:ce:20:43:4f:6a:2a:c9:64:ac:f3:63:64:2a:94:c3:
73:a2:9b:76:1b:58:a9:e3:08:e1:b8:4f:53:b8:ae:67:37:e7:
7d:38:40:4a:95:ab:56:c4:f3:a5:2d:f8:57:bc:40:64:2c:5c:
d8:5c:3c:bd:ad:a7:fc:3f:0f:77:7c:64:a0:23:b1:db:7f:eb:
30:e7:90:0e:2e:e9:8a:ef:d4:60:aa:e7:71:3d:4a:6d:d6:d1:
53:0d:0e:ed:9d:76:4b:02:1f:e5:eb:f0:8b:5c:44:01:f1:7e:
0a:53:b7:62:e7:5e:07:d6:d1:c3:1a:56:4d:6b:0a:b2:66:6a:
8a:d1:5e:d9:66:b5:6a:78:5c:4e:cc:f1:00:f3:de:9b:c1:96:
35:22:b3:7a:c9:32:d6:2e:01:7d:06:f6:51:f5:ee:1d:0e:9d:
b6:4d:4b:7c:30:e1:46:48:26:df:9d:e5:75:74:21:36:06:08:
55:1f:d3:70:2f:4a:38:d2:16:1c:a6:d6:16:c8:39:9c:67:f2:
aa:64:d8:ed:c8:9f:d3:17:a3:41:5d:0e:fe:bd:b9:35:d6:59:
86:a2:4c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org