Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/TrOtsrplV0HgrhrH_p91pIa3-iY.roa
File: TrOtsrplV0HgrhrH_p91pIa3-iY.roa (raw, json)
Hash identifier: eRyoQxFYSMI6CtXkrM/Pibw+6AvdX1FaBSdzVQyL0gw=
Subject key identifier: 4E:B3:AD:B2:BA:65:57:41:E0:AE:1A:C7:FE:9F:75:A4:86:B7:FA:26
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4945
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/TrOtsrplV0HgrhrH_p91pIa3-iY.roa
Signing time: Sat 04 Jun 2022 00:30:06 +0000
ROA not before: Sat 04 Jun 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18757 (0x4945)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 4 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=4EB3ADB2BA655741E0AE1AC7FE9F75A486B7FA26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dd:ab:ca:19:5b:28:c2:a4:66:8d:59:6d:a7:
d6:c4:55:ad:24:84:bd:47:86:08:f4:4f:3c:16:62:
e7:79:69:b5:8e:f2:10:95:1b:c0:0a:35:f4:70:96:
fa:48:c3:eb:86:2b:3d:54:ed:3b:72:7b:b7:05:8b:
4f:da:4b:8e:ee:95:70:bd:06:89:29:0a:69:7f:20:
36:f6:5b:d6:eb:ac:5f:5a:78:fb:83:13:6a:82:fb:
d1:fa:96:80:2f:c5:1a:0b:9b:51:b0:a9:3e:88:fd:
5d:e7:7a:03:97:00:92:dc:94:38:fe:13:e9:24:ad:
05:23:e7:b3:8b:5a:f6:b6:70:37:b4:0e:1c:a1:b9:
ae:5d:17:f5:a1:bf:5f:fd:29:56:cf:70:27:10:51:
c2:09:68:46:a5:3f:00:03:1b:e4:6a:07:d4:3b:84:
e0:d0:ce:b7:b7:79:33:33:1f:df:5f:99:49:aa:d6:
2d:7a:a0:d5:ec:70:1b:73:64:1a:ad:42:f3:36:34:
0e:91:f6:cc:fe:db:5e:54:8f:90:07:0f:a7:3e:70:
fa:75:17:20:56:10:a8:90:a7:bf:09:d4:3c:d4:ab:
ce:5d:40:cf:13:3f:6e:cf:d4:b5:17:43:96:db:c3:
67:1e:66:3c:c6:ed:09:e8:6e:e6:93:dc:0c:0a:af:
82:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B3:AD:B2:BA:65:57:41:E0:AE:1A:C7:FE:9F:75:A4:86:B7:FA:26
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/TrOtsrplV0HgrhrH_p91pIa3-iY.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
19:3c:d4:28:dc:5e:fd:f6:80:7e:81:87:9e:d5:13:2d:f5:f6:
77:fc:d2:09:ed:e1:d1:b1:4b:b6:5b:01:ce:35:6c:b6:08:55:
aa:9f:67:57:0a:c7:74:32:92:b4:f7:98:f2:1d:2a:5f:6f:f5:
d6:27:cd:1e:b9:14:f0:7c:95:ff:a8:93:43:cf:f6:7b:5a:5e:
ee:24:ea:6a:e5:e4:37:8f:a8:6e:5d:f0:e0:62:69:c5:41:69:
2c:a7:2b:d8:68:a3:a2:73:93:f2:76:e3:1b:21:2e:66:73:9b:
89:11:fd:21:dc:d9:5d:83:92:35:1e:b9:58:72:f4:bc:e6:d8:
68:c5:ed:62:96:4b:1f:af:72:85:ce:53:0f:71:90:19:ac:1f:
b6:d0:e5:c8:93:60:78:d5:6e:a1:4b:d4:bb:fe:80:60:92:0c:
70:b0:04:21:7c:82:13:b2:33:35:76:ed:ff:86:b5:cf:b0:de:
19:d2:f8:70:69:e6:00:2c:8b:6d:72:bb:0b:81:2e:7b:44:9a:
6a:2e:e7:d1:43:9d:67:1f:c2:60:ec:e4:ca:23:2f:6e:ad:1e:
f9:34:2c:07:be:da:d8:93:4c:fd:03:33:fb:70:52:63:d3:a5:
55:03:78:a8:55:79:ca:c6:94:38:e2:dc:6a:b2:cd:a9:5e:50:
4a:56:e1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org