Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/UJ_wyoSWCknY540Xt0lkrLZImiw.roa
File: UJ_wyoSWCknY540Xt0lkrLZImiw.roa (raw, json)
Hash identifier: FNjWoziAMpG3czFUVnKQUxfyWhCQn8X8xqrJqrLwoXQ=
Subject key identifier: 50:9F:F0:CA:84:96:0A:49:D8:E7:8D:17:B7:49:64:AC:B6:48:9A:2C
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 46CD
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/UJ_wyoSWCknY540Xt0lkrLZImiw.roa
Signing time: Fri 22 Apr 2022 00:30:08 +0000
ROA not before: Fri 22 Apr 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18125 (0x46cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 22 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=509FF0CA84960A49D8E78D17B74964ACB6489A2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f9:89:af:69:4b:a8:d8:8b:c4:15:a2:d9:73:
84:14:09:9c:4d:f7:29:85:c0:de:73:74:6a:11:2b:
a6:af:b8:a2:d9:a5:c4:50:8d:a8:63:e6:31:a3:2b:
a0:bf:3b:c3:a4:9c:e0:e1:1f:56:e2:c5:b6:7c:76:
ac:82:18:a5:65:8d:d8:93:a6:fc:9a:d3:c2:5c:f3:
58:96:a8:ab:e7:59:cd:a9:f7:f1:19:ac:d7:f2:19:
34:3c:b1:13:4c:2d:2a:e7:2c:62:c0:6b:cd:9a:11:
64:da:d3:a9:03:f0:1c:bd:95:dd:4f:3e:e1:aa:4d:
0d:9b:85:a9:e7:ec:7a:58:74:ce:2f:77:5a:6b:70:
93:3e:23:86:22:40:de:af:d0:35:b5:7d:bf:05:f5:
91:f0:2d:23:5a:1c:74:1b:4d:38:76:be:2b:fa:56:
7c:b8:9b:b8:aa:60:e9:18:3c:ed:4e:c1:65:f0:05:
d4:d8:fb:2d:12:7a:41:a5:89:c5:cc:e2:bb:10:bb:
2a:9c:03:03:bd:12:37:46:8c:ed:89:42:31:53:f0:
78:dc:f1:d0:ee:ec:12:bb:d1:0f:bd:b8:bd:82:d2:
d3:c1:24:93:06:03:46:9d:34:79:6f:99:55:26:c1:
91:1c:a5:6f:05:ef:e5:b1:b9:b6:6e:0b:a0:89:65:
e0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9F:F0:CA:84:96:0A:49:D8:E7:8D:17:B7:49:64:AC:B6:48:9A:2C
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/UJ_wyoSWCknY540Xt0lkrLZImiw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
89:6f:e8:1a:54:4b:a1:3b:33:68:c2:a2:f4:a6:7b:97:4a:cb:
e9:0d:0a:3b:8d:df:58:2c:45:8f:de:49:6f:ee:5c:a4:ec:cf:
83:99:72:18:b5:ad:bd:32:2b:71:d8:3d:7d:70:c5:51:79:20:
61:a4:39:bc:15:e8:65:1f:c7:2c:68:cc:ec:10:f7:a1:ce:ca:
25:92:0c:6e:85:d6:44:ab:2a:91:b1:2f:2a:32:16:52:cc:3e:
2b:30:40:87:5a:71:5b:db:f5:53:7b:9d:c1:88:7a:71:0a:db:
1e:07:07:a9:31:21:f1:2f:72:63:df:f1:2a:ca:67:de:f3:84:
0a:e7:6d:c1:ff:40:05:7c:db:e6:7f:5c:d5:0e:9a:98:0b:6c:
b4:93:9f:62:d0:5d:41:a7:69:c4:a2:af:48:7e:8c:97:1f:8b:
3e:4e:33:08:64:cf:cd:7a:58:78:54:55:c1:11:b9:84:62:e5:
37:20:27:e1:5b:c7:8a:d8:04:12:d6:26:12:c9:27:6c:55:86:
a1:0f:38:64:fb:75:c4:b8:68:1e:fc:f3:e0:c2:2e:d6:c6:23:
9a:8b:2b:7e:72:9a:bc:07:ae:de:54:c3:b5:eb:77:1d:68:cc:
71:02:33:dc:64:51:99:70:46:c8:a0:0a:a3:aa:c4:84:93:73:
cb:59:28:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org