Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/gnmykVazGNvQm87ryjptygM6DIE.roa
File: gnmykVazGNvQm87ryjptygM6DIE.roa (raw, json)
Hash identifier: b2WLTthTiSWqUHfv5evDdEX3a6/qYRddILqYZKBp9n0=
Subject key identifier: 82:79:B2:91:56:B3:18:DB:D0:9B:CE:EB:CA:3A:6D:CA:03:3A:0C:81
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 463F
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/gnmykVazGNvQm87ryjptygM6DIE.roa
Signing time: Tue 12 Apr 2022 00:30:11 +0000
ROA not before: Tue 12 Apr 2022 00:30:11 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17983 (0x463f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 12 00:30:11 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=8279B29156B318DBD09BCEEBCA3A6DCA033A0C81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:88:61:30:b0:9a:80:e4:40:ad:cb:fa:98:a6:
1f:99:f6:37:98:96:62:44:02:db:9a:9a:b1:29:c2:
af:f0:d9:7c:8c:56:43:75:76:84:70:a5:55:ee:3d:
9c:ce:dd:0b:d0:b4:58:9f:cb:16:e6:8e:4e:10:a4:
13:49:6c:ea:7b:43:ad:78:91:34:c3:03:17:58:28:
fa:56:d8:68:22:47:2c:44:42:42:bb:92:61:dd:5d:
a3:d5:07:8e:bb:46:ef:d6:e9:ea:dc:40:3f:ed:f2:
00:ab:d4:38:05:d5:bc:2b:35:7d:0b:13:60:27:26:
a7:c6:35:ee:67:3b:cb:2c:5e:44:78:b1:6e:34:bc:
a3:d7:49:be:82:0a:00:74:23:8f:63:7d:33:ed:9c:
16:a9:08:9e:7e:8f:2a:a4:68:a1:48:34:c0:49:b5:
7d:53:8d:ae:52:8e:72:de:6b:2e:9a:a4:5a:da:bb:
0f:27:1e:26:54:44:89:be:b0:7a:39:59:64:c0:70:
3c:cf:69:f4:d0:f3:d5:dd:7b:1a:2e:4e:1f:0e:5a:
49:bb:bc:a9:df:29:f9:5b:4f:2e:58:c0:b0:52:68:
3d:47:94:c2:dd:7e:2c:26:3a:95:3a:a1:22:9c:db:
52:d8:cc:6e:f2:98:b2:61:a4:84:37:5e:ef:5d:7f:
e5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:79:B2:91:56:B3:18:DB:D0:9B:CE:EB:CA:3A:6D:CA:03:3A:0C:81
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/gnmykVazGNvQm87ryjptygM6DIE.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
93:04:26:33:73:1e:15:5f:80:d0:ff:5d:9c:1d:2f:9e:fa:22:
35:71:73:22:0a:d2:c0:00:b8:a1:28:c1:5e:db:97:66:16:64:
dc:a1:c8:8d:4c:38:0c:34:fc:5e:19:bb:c1:b8:cc:06:e2:37:
01:15:03:63:94:e4:bf:b7:5a:39:4e:a7:39:84:fa:bc:49:20:
91:7c:c2:09:53:b7:4a:5b:15:30:7e:42:d3:6b:bf:11:e8:2a:
ef:96:26:65:ee:e1:36:fb:cc:9e:9e:69:aa:9e:55:09:33:2d:
eb:88:ad:a6:37:83:6d:ab:9e:f4:78:fd:01:27:5b:a3:ea:89:
af:af:fc:a2:e2:f4:80:c6:f1:62:30:fa:d5:cf:e2:07:63:8f:
ea:d1:50:d4:30:00:2c:89:2e:71:6a:57:89:8f:10:30:4e:44:
0a:cb:74:d2:ae:d5:3c:9f:ef:56:4d:08:34:b3:c4:a7:c4:16:
e1:24:89:23:8c:1c:0e:ac:54:12:7b:ca:72:70:d7:3b:58:55:
3b:d5:03:2b:bb:ae:fe:62:93:b8:eb:16:1e:d5:79:eb:35:96:
6d:75:c9:75:bd:fe:b1:27:02:12:94:13:79:4a:c1:1f:aa:da:
48:81:07:9e:0d:00:19:b7:63:78:22:c9:1b:60:93:c3:a3:ec:
c9:f0:f3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org