Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/aOqH-dQyMZ4sHxj9PU6ZfmbvJo0.roa
File: aOqH-dQyMZ4sHxj9PU6ZfmbvJo0.roa (raw, json)
Hash identifier: +ICsmX4+O8ptwiN0etsH6Ebw/HpqUn9ZQFbebHBATp0=
Subject key identifier: 68:EA:87:F9:D4:32:31:9E:2C:1F:18:FD:3D:4E:99:7E:66:EF:26:8D
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4326
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/aOqH-dQyMZ4sHxj9PU6ZfmbvJo0.roa
Signing time: Mon 14 Feb 2022 00:30:07 +0000
ROA not before: Mon 14 Feb 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17190 (0x4326)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 14 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=68EA87F9D432319E2C1F18FD3D4E997E66EF268D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7b:19:61:1f:fe:cd:c4:62:0c:ee:86:0c:a3:
b9:72:a3:e8:b0:f5:a6:2b:70:25:0a:ab:9c:40:5e:
7f:7f:12:04:1a:3e:12:a6:c3:d7:c3:91:d9:9e:76:
41:f0:78:9a:bb:37:38:85:74:27:0b:ee:78:6b:6b:
74:8f:15:c8:46:d0:a4:c5:00:77:f6:5e:9a:a2:8c:
4c:50:d1:0d:bb:af:06:83:86:fd:71:fc:34:81:1b:
62:59:a1:0a:6d:f7:f8:b4:02:5c:37:c9:4e:17:d0:
ca:fe:e2:c9:59:f1:aa:4b:4c:80:a3:ac:b7:ad:33:
29:fb:2c:e2:c0:e6:8e:7e:97:8b:74:98:57:5f:5b:
e4:4f:dc:4c:45:44:d6:d8:1d:ce:83:72:e5:22:c0:
c3:16:8e:f9:a9:22:67:d9:b6:44:75:9c:61:ed:67:
b1:8c:5e:ee:cf:80:e6:14:48:8d:c4:f4:3d:c3:2e:
c8:b4:69:b7:b9:ba:41:30:e9:9b:e2:67:43:10:72:
9b:35:71:48:a1:0f:46:91:93:ca:4b:24:1f:b6:e7:
ad:e4:15:45:b9:01:11:7e:6b:b6:73:65:8c:6a:1f:
5d:5d:29:c7:58:ff:1b:08:32:f7:14:ad:25:89:5a:
c9:23:31:0e:24:80:c7:46:84:ae:06:e3:a6:5d:e9:
c1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:EA:87:F9:D4:32:31:9E:2C:1F:18:FD:3D:4E:99:7E:66:EF:26:8D
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/aOqH-dQyMZ4sHxj9PU6ZfmbvJo0.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
06:04:44:8f:de:ec:c1:03:0a:6b:87:af:07:7d:c3:61:35:11:
da:85:56:26:d5:75:24:59:0b:69:e8:46:9a:e5:bd:11:86:f9:
25:cf:6a:c5:5b:a1:da:ea:70:cb:ba:ce:13:15:80:f8:de:df:
dd:a7:ee:18:f8:26:81:a4:ff:59:b3:5a:c1:29:9e:22:59:ef:
fd:22:2b:c6:c5:15:bf:e7:b9:33:d4:87:02:3b:c6:eb:aa:6f:
88:da:84:20:95:12:1b:fd:9d:73:df:7d:d8:a2:52:42:51:95:
e1:40:80:cf:c0:8a:08:99:a3:18:04:02:31:1a:ab:53:61:88:
2a:b3:db:71:5b:46:2a:5f:57:6e:cb:42:a3:88:9c:ff:97:be:
ad:c3:d0:0a:d5:3d:f6:46:5f:ce:10:84:cf:a0:8a:d1:b6:43:
5c:b0:7f:59:b8:13:85:c4:03:2f:b1:48:ff:35:4d:33:7b:9a:
93:29:81:1c:7c:80:b1:41:8e:ef:d1:58:ec:04:44:11:0d:9f:
8b:fc:79:75:c8:64:ec:75:80:b0:87:b9:ea:f8:6b:8d:65:52:
35:a5:c7:cc:3a:5f:6c:16:63:e5:86:68:33:83:6a:8d:2b:81:
a1:ad:d0:d7:a8:ac:33:ff:4f:93:88:d3:30:da:ff:5d:0d:6e:
64:ca:51:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org