Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/ZbEa3Rc7Hy5rJ-mUNtpPviDnckg.roa
File: ZbEa3Rc7Hy5rJ-mUNtpPviDnckg.roa (raw, json)
Hash identifier: wsmi4AwdgONrAxa6ehmBRyFHmEmB5bdphYo/8zOIcm8=
Subject key identifier: 65:B1:1A:DD:17:3B:1F:2E:6B:27:E9:94:36:DA:4F:BE:20:E7:72:48
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4801
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ZbEa3Rc7Hy5rJ-mUNtpPviDnckg.roa
Signing time: Sat 14 May 2022 00:30:07 +0000
ROA not before: Sat 14 May 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18433 (0x4801)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 14 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=65B11ADD173B1F2E6B27E99436DA4FBE20E77248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:5a:d1:0c:8f:05:3e:b5:15:d6:a5:c8:41:8c:
48:df:86:33:0f:5c:3a:3f:e5:1a:5e:6c:de:0b:59:
14:8f:34:a8:9e:e9:53:da:c4:17:c2:fb:e9:8a:50:
33:86:0d:fc:0c:06:b6:8b:ac:b6:2b:d0:ba:fc:86:
01:85:06:a7:c6:9c:77:a1:30:b3:27:07:30:b3:d3:
2e:dd:8e:cc:92:6c:a5:60:9e:f6:9e:aa:39:0f:99:
07:ef:4e:9d:41:9b:ca:a1:2f:0d:3f:6d:f8:80:e7:
34:16:3a:78:e0:46:97:0c:23:67:97:7a:1b:1f:cc:
b4:01:39:31:3f:95:86:c3:bd:27:d2:bb:70:3a:72:
6b:52:e3:46:b7:0d:0c:a3:0f:55:2b:ce:6f:6d:22:
dc:22:18:3d:88:a8:23:b9:d7:e5:a6:7e:54:17:5c:
5e:2d:58:de:b4:1b:04:88:17:00:d1:c0:c4:ca:ec:
33:94:6c:49:0b:c1:57:4d:82:4e:23:08:d9:6e:e1:
3e:19:a1:96:7d:84:2a:7b:80:2e:52:0c:f2:c6:79:
14:79:dd:6b:7f:8f:9c:a9:44:c7:c3:b2:7a:1e:27:
80:1e:2d:d3:1e:09:43:f7:82:73:49:60:5e:83:81:
57:d9:3d:92:69:1c:81:ed:1d:5a:2b:d8:91:4f:74:
0e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B1:1A:DD:17:3B:1F:2E:6B:27:E9:94:36:DA:4F:BE:20:E7:72:48
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ZbEa3Rc7Hy5rJ-mUNtpPviDnckg.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
20:df:8e:73:73:be:27:bd:63:93:41:e7:7c:15:35:2b:05:e1:
16:b4:bb:51:2d:fb:6e:87:95:99:e6:b1:f9:a0:6e:93:1f:ec:
8b:5b:50:c3:31:22:40:2f:08:20:9d:83:e1:c0:cb:cd:3d:70:
18:2b:46:39:35:11:f9:c0:a9:3e:a3:5a:b2:e5:d6:ef:24:98:
ec:7e:e7:9f:99:d2:69:ef:49:25:34:b4:71:e5:cd:34:fe:eb:
81:91:48:48:8f:86:7f:e1:32:aa:50:2e:d5:4e:76:7a:f9:01:
8f:3d:3d:d6:c2:9d:9b:da:32:8a:10:d7:31:2e:75:b9:67:c3:
b9:28:70:0d:5c:95:c6:c6:32:55:97:19:85:94:e7:9b:ea:42:
41:36:c4:51:c6:af:b9:05:49:5b:26:3a:58:8b:71:07:43:89:
d8:4c:57:8a:d6:55:9c:98:32:b7:b1:e2:d1:c4:c5:73:e6:fd:
2f:c8:fa:02:e5:bd:a6:29:b6:bd:0f:40:cc:4d:50:69:ef:9a:
28:cf:bd:9c:b5:94:27:57:29:17:ed:39:c9:71:a6:c6:80:46:
b4:b5:78:31:59:d8:4a:4f:82:f8:5f:f1:f0:01:c7:bd:5e:e5:
c6:10:3b:af:24:1e:c6:7d:7f:a8:c4:b6:fe:1f:8a:6b:97:94:
1c:1e:38:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org