Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/T6Tr-sDsYn1vU_gy36Ike4zhalM.roa
File: T6Tr-sDsYn1vU_gy36Ike4zhalM.roa (raw, json)
Hash identifier: jt/o96ODvpnYybjsVxYvxh9MHtL3EBJj7LIHA3OKpRM=
Subject key identifier: 4F:A4:EB:FA:C0:EC:62:7D:6F:53:F8:32:DF:A2:24:7B:8C:E1:6A:53
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 463D
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/T6Tr-sDsYn1vU_gy36Ike4zhalM.roa
Signing time: Tue 12 Apr 2022 00:30:11 +0000
ROA not before: Tue 12 Apr 2022 00:30:11 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17981 (0x463d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 12 00:30:11 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=4FA4EBFAC0EC627D6F53F832DFA2247B8CE16A53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:18:78:4c:9a:90:29:cd:46:df:7e:fc:b5:f3:
a2:6f:c4:0a:55:91:ac:fd:7c:35:9f:d7:92:9d:c0:
44:5d:dd:20:91:67:b4:27:ec:83:d1:7e:a5:69:35:
db:71:55:f4:69:d1:11:c1:9d:1a:2d:70:c6:4c:eb:
c7:52:4a:86:94:1c:64:4c:62:46:36:8e:28:a2:9d:
96:2f:c5:71:98:79:72:5d:3c:29:18:95:d0:a5:e6:
e2:78:8a:30:9e:fb:66:da:30:58:3a:7a:73:98:fd:
65:84:ad:89:0a:f9:be:23:ee:c1:1a:dc:1d:33:73:
aa:a1:31:e8:0a:f6:db:38:62:9c:0d:aa:64:e7:07:
66:b7:b0:e9:0f:e1:49:c8:ec:40:88:8c:09:7b:60:
1c:21:49:b1:28:de:34:68:9a:39:38:d1:35:c8:64:
55:54:fc:fe:f1:0e:20:04:a3:d6:32:78:69:1e:2a:
00:8c:34:87:73:42:ca:f4:ba:5e:1d:71:1b:1f:28:
d9:ea:2f:e3:c3:b0:8d:50:1b:82:50:75:ee:93:6e:
e5:6b:05:7a:83:50:8e:48:92:8f:fc:63:64:b2:b1:
0a:5d:22:1a:a8:37:f2:11:bb:8e:15:37:3f:69:0d:
fa:85:e0:1a:66:54:ef:6e:1f:c7:24:45:cf:aa:86:
a2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A4:EB:FA:C0:EC:62:7D:6F:53:F8:32:DF:A2:24:7B:8C:E1:6A:53
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/T6Tr-sDsYn1vU_gy36Ike4zhalM.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
66:c5:f9:21:aa:cc:85:dc:7b:df:9e:66:b0:03:6c:d0:d7:85:
81:cd:28:1b:f1:22:a2:3a:39:0c:f8:31:36:f5:62:98:1c:d8:
8e:dc:a2:32:6b:88:18:a3:ce:b1:79:55:60:e8:63:4e:41:c5:
33:e9:7c:e1:58:26:dc:e0:1f:d6:38:2d:26:7e:07:27:3d:ad:
0e:4e:22:39:b6:df:a5:76:d9:f8:59:7c:96:13:09:07:4e:58:
e9:1e:ef:b2:bb:e0:e5:51:c8:89:b5:1e:6a:62:20:6a:83:35:
48:ec:cf:01:a8:8d:ea:4e:ef:84:bb:d1:77:d0:a5:e0:1f:65:
31:a5:9d:ec:59:bc:0b:6f:b0:c7:1d:20:fa:9d:f5:fa:5d:57:
5d:5f:8e:be:d5:b1:d2:e7:a3:e4:3c:86:1e:9f:39:e4:a6:fb:
b9:9f:4a:e3:7b:00:18:b0:a4:96:c4:26:fa:86:93:de:09:29:
d8:94:05:e9:37:02:a3:eb:43:c0:03:75:fb:7c:3f:d1:f5:3d:
10:92:06:10:9d:28:ca:50:bd:cf:7d:ce:4f:75:df:08:23:74:
49:83:d2:1f:c3:46:f1:6b:43:50:6f:1c:54:0a:ac:67:f9:a1:
8d:12:8f:41:b2:a2:20:fd:c1:5e:08:6e:f7:9e:30:63:c0:cd:
69:34:f4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org