Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/X-_hulFMrIfED15-IDPbH4CKdwg.roa
File: X-_hulFMrIfED15-IDPbH4CKdwg.roa (raw, json)
Hash identifier: LEHCJ9sCVF4LqMmThLCx4fHEuBDqh2sW4BQO4cvy+rk=
Subject key identifier: 5F:EF:E1:BA:51:4C:AC:87:C4:0F:5E:7E:20:33:DB:1F:80:8A:77:08
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 48B5
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/X-_hulFMrIfED15-IDPbH4CKdwg.roa
Signing time: Fri 27 May 2022 00:30:09 +0000
ROA not before: Fri 27 May 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18613 (0x48b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 27 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=5FEFE1BA514CAC87C40F5E7E2033DB1F808A7708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:84:f0:2e:01:67:4b:13:ca:f9:ec:3f:89:dd:
a7:c1:24:65:fa:9b:e6:25:63:c3:eb:e5:f6:8f:20:
47:7a:4b:33:35:51:bf:38:cc:d2:fa:56:0a:49:3a:
bf:6e:7e:de:2d:1e:d5:a0:dc:57:23:58:85:e7:3d:
20:1d:c5:7a:4b:ca:66:de:4d:83:04:64:c3:a9:53:
fc:e8:9d:67:e0:1a:90:eb:3b:01:06:d5:a9:30:9f:
a7:b4:56:f9:47:b5:71:92:0f:b1:b3:eb:a3:1e:bd:
4c:e2:30:5e:01:bf:9a:1e:d2:32:c1:82:02:8f:fe:
b7:53:e2:a5:9d:89:f4:ce:d5:d0:4f:16:09:ea:f2:
2e:f3:de:7c:85:f3:5e:4a:62:38:de:c6:59:31:e6:
88:1f:48:28:d8:1a:d6:e0:be:b8:81:a7:0f:78:f3:
33:e0:03:8d:27:7c:26:fb:47:2d:ec:71:5c:01:5b:
03:7f:06:da:e6:31:a3:19:ed:d4:94:96:99:04:7e:
6d:41:0e:e8:3c:41:67:e4:56:74:03:40:59:aa:1d:
66:7c:69:b1:93:bb:c5:cc:a6:da:f3:c6:ee:3f:b7:
d2:f9:df:cf:32:74:b1:e2:9f:3c:ca:92:80:c7:b1:
e3:cf:ae:10:87:14:6b:33:be:17:52:ca:9a:6f:8d:
d1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:EF:E1:BA:51:4C:AC:87:C4:0F:5E:7E:20:33:DB:1F:80:8A:77:08
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/X-_hulFMrIfED15-IDPbH4CKdwg.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
08:fb:d3:ef:a8:3e:42:97:eb:97:66:fe:42:74:81:aa:d4:72:
b2:fe:e6:67:1f:70:aa:07:b2:8e:21:6f:5d:27:f6:6b:19:6f:
b2:5f:6a:41:32:6b:df:67:14:2e:83:de:d1:c1:49:b7:dc:65:
fc:c7:2c:00:01:cf:d4:a8:81:a1:96:13:73:31:f8:fa:87:43:
6e:d6:5f:32:0f:dc:40:ae:b2:bb:ff:c1:2b:4e:8c:d3:b5:76:
80:3d:ef:09:4e:80:73:b3:33:a9:41:1f:e1:45:4c:ac:97:01:
56:00:24:4c:9f:c9:9d:e0:0f:86:07:da:2a:37:da:e7:6e:53:
d5:19:bd:d2:46:6f:0e:e7:e7:24:f2:84:ed:cd:cd:91:6a:a9:
8a:3e:87:b0:7b:f1:2c:30:f7:ee:6f:86:94:92:1a:f8:bb:ae:
4d:fc:b5:e7:7d:eb:d0:02:d8:9e:9c:91:fc:c0:86:a9:a0:47:
8d:e6:4c:9e:cb:7d:7a:cd:41:15:35:00:b4:da:6f:06:6d:85:
8b:05:bc:82:ef:7c:16:7e:05:27:a6:d7:63:5e:8d:1e:5d:c7:
cd:c8:b6:90:26:53:f8:d3:6e:41:17:d7:27:1a:20:b9:6a:91:
67:59:75:27:ca:16:1e:49:87:cd:52:28:ce:a1:9c:dc:2c:ef:
a3:f5:94:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org