Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/Rkb3tmTIfQCef-z2B4teCKiwyJ8.roa
File: Rkb3tmTIfQCef-z2B4teCKiwyJ8.roa (raw, json)
Hash identifier: Tu6Nlcb0cFPhDCFZ3NigRBL0E1fWjLC0hmI7/8glxo8=
Subject key identifier: 46:46:F7:B6:64:C8:7D:00:9E:7F:EC:F6:07:8B:5E:08:A8:B0:C8:9F
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 45EA
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Rkb3tmTIfQCef-z2B4teCKiwyJ8.roa
Signing time: Wed 06 Apr 2022 00:30:07 +0000
ROA not before: Wed 06 Apr 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17898 (0x45ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 6 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=4646F7B664C87D009E7FECF6078B5E08A8B0C89F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:86:64:fc:eb:9e:42:a3:a7:c7:bb:ed:c5:12:
61:ba:9b:4d:95:72:8e:21:42:3b:17:08:79:e3:53:
9f:7e:b0:78:19:d0:92:73:82:1e:79:6b:66:25:94:
f1:99:56:74:58:38:2a:f9:62:db:16:84:df:12:f8:
04:da:9a:21:64:b2:49:61:3c:5a:66:f6:22:7e:c1:
55:8a:32:7c:6a:59:88:af:b4:b6:53:51:b1:19:a2:
ae:05:60:fd:00:06:29:0a:d4:8e:75:de:1a:38:3e:
52:ea:a1:41:f9:01:b5:cd:85:49:cf:f3:2e:2e:cc:
17:e4:df:09:df:f5:32:9a:53:97:0e:dd:06:2e:e1:
0b:b7:e2:79:35:d0:5a:11:90:af:5d:3a:6d:0d:17:
1e:e9:b7:e9:8c:f7:9e:bd:99:3b:5c:b2:cf:ea:5f:
47:18:6f:6e:cd:ff:27:2c:93:93:46:85:dc:aa:fd:
fa:4b:0c:05:c7:97:b0:cc:bb:da:99:14:5d:09:4e:
39:30:94:fa:49:2c:68:60:ef:a2:51:5a:96:8f:72:
9b:ac:87:1b:d2:b2:ec:36:45:d0:05:18:c1:5a:bc:
34:c4:a1:da:1f:91:82:98:95:fe:20:f8:7a:57:07:
5e:c3:68:a9:b8:ad:c2:f4:9d:20:27:c2:98:16:bf:
b3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:46:F7:B6:64:C8:7D:00:9E:7F:EC:F6:07:8B:5E:08:A8:B0:C8:9F
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Rkb3tmTIfQCef-z2B4teCKiwyJ8.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
31:9b:57:11:60:cc:b5:69:e7:71:47:79:2d:a1:66:ce:16:98:
95:e8:7d:c8:6f:4f:9a:09:df:f4:88:ce:9a:f4:80:e7:f8:f3:
ec:b0:74:ec:b5:a9:ce:ec:f5:e2:07:1e:99:17:6d:9f:c0:5a:
84:9e:8e:26:cb:47:33:ee:ad:e7:ea:7b:2b:8a:bc:85:a3:77:
d8:c2:5f:73:8b:9e:47:f9:dd:19:b4:2b:f2:4f:dd:b4:e0:1c:
a7:47:0c:3d:a9:52:ef:ad:99:72:08:7c:25:f6:b0:7b:9c:3b:
cb:d3:1f:45:3f:f3:e9:23:fa:fd:15:e1:0f:63:1f:0f:9e:3c:
ae:17:6d:67:73:e0:89:29:e3:67:3d:19:9e:6e:5f:6b:32:77:
c3:93:ba:54:e5:3e:7c:b9:28:f3:76:31:6a:58:8b:85:ce:11:
12:8d:a9:c3:85:f2:1f:7c:b3:29:d3:c3:c1:e6:67:56:ac:07:
1d:21:51:98:e5:c1:35:5c:c0:f5:e4:af:11:f9:55:45:89:62:
32:5c:0d:0b:38:1f:43:5e:f4:e5:03:16:14:d2:a6:71:31:e3:
a3:d5:d9:03:cd:51:68:5a:84:cd:fd:6e:9e:7f:f9:f5:89:72:
fb:46:c1:81:0c:98:67:a5:ec:13:22:8b:9d:eb:92:f0:87:aa:
28:7c:7c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org