Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/RRvfQJ9WbeQ3A1hN40ptTBwh53I.roa
File: RRvfQJ9WbeQ3A1hN40ptTBwh53I.roa (raw, json)
Hash identifier: VCdKy7Z4Is35Epz/ARju6lvucPGl0vb9+DTOpfS3lxM=
Subject key identifier: 45:1B:DF:40:9F:56:6D:E4:37:03:58:4D:E3:4A:6D:4C:1C:21:E7:72
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4261
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/RRvfQJ9WbeQ3A1hN40ptTBwh53I.roa
Signing time: Mon 31 Jan 2022 00:45:07 +0000
ROA not before: Mon 31 Jan 2022 00:45:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16993 (0x4261)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jan 31 00:45:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=451BDF409F566DE43703584DE34A6D4C1C21E772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8e:7a:07:5b:23:b0:48:81:50:11:0d:a7:e0:
0e:ee:51:6a:9a:dc:84:b8:21:e0:5d:1f:9c:70:e4:
f4:1c:93:03:b3:d5:7c:37:05:09:a6:53:3c:d7:f1:
ca:4d:75:20:4c:e1:09:74:7d:41:0f:e6:19:84:d1:
c6:06:59:ce:a0:a4:02:c9:1d:1f:25:3d:64:65:30:
a4:18:71:ac:8f:07:90:02:41:92:78:5f:2c:d3:01:
ab:19:07:0e:d0:8b:92:cd:bb:08:5a:3e:d5:38:1f:
d6:50:93:8c:7f:12:94:90:d0:26:e5:fe:43:67:d4:
ce:5e:58:ae:1d:be:94:99:9f:a1:d2:83:59:d2:45:
52:11:27:e2:1f:88:45:db:a9:32:9c:8f:29:59:4c:
ae:7c:00:72:0d:70:17:0e:ce:8e:a5:ff:aa:76:53:
da:d9:c5:94:00:91:44:f4:df:6b:c1:fa:a6:dc:6d:
7b:d6:2c:97:4b:99:ca:2b:2e:61:84:98:ee:cb:cd:
4f:a6:2c:22:00:6f:e5:6f:09:7f:bb:34:39:07:f2:
ef:0d:bf:9c:a5:da:da:16:50:7a:79:bf:cd:71:5e:
6b:cb:b6:05:70:51:62:d7:89:29:03:97:cc:44:19:
1c:be:ed:bf:0f:9f:29:52:4d:78:ec:49:51:64:7d:
c8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1B:DF:40:9F:56:6D:E4:37:03:58:4D:E3:4A:6D:4C:1C:21:E7:72
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/RRvfQJ9WbeQ3A1hN40ptTBwh53I.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:03:06:52:35:f9:a8:b3:47:2c:46:d2:80:96:fb:3a:c4:27:
e7:9d:c4:85:20:c9:07:ea:bf:36:17:5c:ee:18:b3:a6:0e:8d:
6a:29:cd:55:20:e6:cc:33:20:65:1d:d0:f0:4f:ce:c3:41:76:
3f:3b:35:a7:d3:b5:81:98:ef:8f:ab:96:97:b3:a7:85:4d:8a:
b7:18:8e:47:a9:6b:4f:6b:a1:12:92:21:05:f0:9a:08:f8:db:
6c:c6:3f:e6:2f:2e:2d:79:9b:b1:21:28:0b:05:af:9f:08:47:
a0:38:58:88:e5:19:3e:b9:e4:b9:5a:89:b8:c6:f4:3e:bc:80:
ab:b1:02:cc:ce:c6:4c:06:80:70:cb:52:9f:89:6e:0d:6e:85:
a8:a0:0b:fc:93:83:13:5c:cb:9a:a2:18:d9:83:d0:64:cf:0d:
86:51:14:27:90:72:c4:e2:f8:46:6f:ce:86:66:2d:b3:e7:55:
7e:0f:34:9a:36:0e:d5:be:fa:7f:45:c2:b4:76:82:7a:5e:10:
93:0b:50:7e:88:e7:de:90:45:d2:4a:70:9b:6c:a6:db:48:aa:
ce:24:4c:5c:e3:a4:15:fb:41:67:bd:81:d5:83:4a:f9:5d:3c:
22:ae:de:10:c8:02:e5:f1:da:68:e6:a1:74:f7:00:d3:cf:c4:
99:be:95:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org