Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/VLRi5kcCHw1TZAHJ2kRkbGo_RDY.roa
File: VLRi5kcCHw1TZAHJ2kRkbGo_RDY.roa (raw, json)
Hash identifier: PIAuegPR2QHcSoKVMJ4pFDFwZ+zWRVwncoaj+BdKbYQ=
Subject key identifier: 54:B4:62:E6:47:02:1F:0D:53:64:01:C9:DA:44:64:6C:6A:3F:44:36
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4386
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/VLRi5kcCHw1TZAHJ2kRkbGo_RDY.roa
Signing time: Mon 21 Feb 2022 00:30:06 +0000
ROA not before: Mon 21 Feb 2022 00:30:06 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17286 (0x4386)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 21 00:30:06 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=54B462E647021F0D536401C9DA44646C6A3F4436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6f:43:6a:26:e1:52:bc:9d:a0:dd:b9:96:d6:
5b:45:16:a5:94:bf:d9:e5:5f:2c:27:8b:e3:61:b4:
24:fa:3a:6c:aa:e3:01:2b:e6:c1:35:aa:a1:2d:6f:
e6:7f:d4:9e:7b:8d:96:6d:b0:26:c0:49:63:92:b3:
b7:4a:f4:e9:a5:1e:ab:5e:cd:9e:d1:94:f2:b6:04:
2a:0f:2d:d9:e2:8b:99:d7:7b:3b:a2:87:7e:4c:29:
53:db:7f:f8:14:71:39:08:d9:25:6b:54:ab:43:cb:
2f:80:c6:91:bd:57:29:84:5d:a4:23:56:00:bb:8b:
d1:f2:c3:e0:30:68:70:90:51:c1:9c:cd:c9:d0:52:
07:e0:ad:2e:9c:9c:8c:0e:b3:df:24:a5:28:4a:cd:
7e:fd:fc:a5:34:a3:3b:81:86:2b:51:29:50:b3:d4:
3f:f8:95:61:e6:1e:bc:22:ab:ca:4a:cf:88:4d:8d:
a4:2b:5e:c9:9e:5c:56:d6:09:d7:92:de:04:de:e7:
fe:12:b4:92:ff:9a:5a:8f:fc:9a:2e:bc:97:31:51:
45:71:ab:9e:08:18:88:f9:09:e0:f7:5f:ee:ca:5a:
47:1d:48:7b:53:98:0b:0e:0e:14:b9:c8:58:60:ff:
60:e2:18:8a:e9:eb:a2:10:39:b8:2f:de:00:27:76:
d0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B4:62:E6:47:02:1F:0D:53:64:01:C9:DA:44:64:6C:6A:3F:44:36
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/VLRi5kcCHw1TZAHJ2kRkbGo_RDY.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:fb:c3:7d:4e:82:53:50:4d:66:21:73:1e:fb:18:ca:ee:7b:
d8:93:75:38:14:ad:14:66:79:49:06:ba:19:15:89:a4:2e:23:
02:87:5c:48:e6:9a:76:97:a1:4c:b1:35:1c:4b:ac:cf:7d:63:
b6:2f:55:61:83:ee:86:4c:16:34:dd:84:a0:4d:c2:9a:27:4a:
27:d8:89:5c:b2:ff:9c:90:e8:3a:dd:20:42:df:a5:a1:c5:94:
19:d1:b6:77:e9:c6:29:33:29:56:5c:26:bf:91:ef:eb:5e:32:
36:26:2b:49:27:40:ea:33:cd:97:4c:16:49:6e:d6:4d:ba:36:
9f:e7:b5:b5:45:e0:3f:2a:54:13:d1:fe:dd:2a:76:d7:c2:b7:
c7:df:18:c7:7c:c9:56:98:ff:c9:0f:b5:c4:aa:15:8c:3b:60:
48:3e:2c:e4:1f:db:41:1f:f3:8a:ea:a6:52:92:12:4d:e5:63:
50:1e:d1:55:ae:0d:3c:da:bb:ec:7f:a9:5e:b0:83:1b:2e:7b:
7d:f0:d9:b9:6d:40:ae:92:42:01:c9:6a:b9:b5:96:70:1f:da:
f2:bc:ed:4b:f4:a8:99:63:08:3e:8f:d8:43:32:7a:30:54:77:
8b:67:03:53:36:da:97:3d:66:fc:92:be:ba:19:e7:03:51:d6:
05:59:78:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org