Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/iEmU0sBH3ZhKO725SxfDdJrS6Q8.roa
File: iEmU0sBH3ZhKO725SxfDdJrS6Q8.roa (raw, json)
Hash identifier: XlFfjw8gVceFm7BRyzRmY9FAKZWjKoUSaSyCq+Q+uvI=
Subject key identifier: 88:49:94:D2:C0:47:DD:98:4A:3B:BD:B9:4B:17:C3:74:9A:D2:E9:0F
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4319
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/iEmU0sBH3ZhKO725SxfDdJrS6Q8.roa
Signing time: Sun 13 Feb 2022 00:30:08 +0000
ROA not before: Sun 13 Feb 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17177 (0x4319)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 13 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=884994D2C047DD984A3BBDB94B17C3749AD2E90F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:46:cb:34:b1:44:f3:a5:e5:ae:79:8e:f7:b6:
f6:7e:55:24:70:0f:03:cb:3c:28:33:63:e2:b3:1a:
b7:db:f8:f9:01:a5:eb:11:bd:5c:15:25:81:2c:ea:
13:d4:f9:0e:8a:ef:96:14:0e:33:f6:88:ea:d2:9b:
86:45:78:22:5e:fb:7a:2c:dc:7b:f4:35:20:3f:68:
1b:c5:eb:08:7c:ce:5f:89:ba:bb:ac:43:a8:17:f8:
43:a6:10:fc:65:55:14:4b:99:94:02:cc:19:bb:da:
9e:e2:69:af:13:f6:cf:59:37:50:cf:d0:2e:31:5c:
99:9f:31:58:ef:48:34:d9:cb:13:56:5f:e7:30:3c:
de:0a:ac:72:18:3c:ce:b8:99:f0:0c:9f:75:76:96:
ef:4c:c8:98:30:33:a0:6e:2c:50:6f:a1:ed:c5:5f:
a6:ab:99:0b:ff:3c:c4:81:ca:5a:18:2e:51:c2:df:
9a:60:05:85:54:83:0e:f7:df:67:0d:3d:c8:65:97:
ff:76:ef:79:5e:12:25:c4:95:33:ef:ee:e4:0a:22:
fc:f1:cd:6c:f5:ca:f4:7a:45:6d:ab:31:12:9d:f6:
b7:88:c5:11:63:bc:19:a7:e4:c8:8d:16:8e:40:e6:
25:53:f9:81:c0:50:47:e0:30:ff:cc:d9:96:41:df:
57:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:49:94:D2:C0:47:DD:98:4A:3B:BD:B9:4B:17:C3:74:9A:D2:E9:0F
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/iEmU0sBH3ZhKO725SxfDdJrS6Q8.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:93:72:ca:da:2a:cd:b0:f1:64:cd:8b:1e:e7:5a:2a:b0:cc:
8e:16:96:57:46:63:83:5c:9a:98:f4:f0:d2:67:7a:14:31:24:
b7:d2:94:b3:07:02:a5:3a:13:fe:66:ea:06:1a:e3:77:64:44:
2f:dd:0c:7a:19:e4:6d:21:49:c5:c3:b0:06:33:39:72:d6:0e:
ac:71:18:aa:1f:59:b9:04:6d:99:b1:d1:f4:bd:20:59:f9:e5:
e3:68:f1:3e:50:74:b0:dc:d4:45:d3:88:96:9b:db:59:36:9c:
18:de:f6:83:3e:82:f4:8b:60:88:3e:77:52:5d:a9:56:73:3f:
59:cd:2f:66:71:e8:1f:69:74:24:3b:d8:0d:57:0f:2c:e9:a8:
5d:87:b4:fd:dd:ae:e9:6b:4e:a9:e3:84:a2:a7:1a:a1:9f:a5:
22:3d:47:1d:5f:cd:db:c9:c3:76:93:54:60:0c:52:33:0a:ba:
59:c7:07:e8:8a:d4:33:54:be:da:89:47:ef:44:b6:45:d4:ac:
84:4a:bd:52:07:41:5d:f3:ad:f6:15:bc:ae:7f:36:3f:ad:2b:
22:94:29:b0:d0:43:97:db:ff:30:12:24:1a:24:b3:f8:21:59:
db:94:b7:4d:75:0f:7c:0e:71:d9:db:0c:7a:f6:17:fa:72:67:
f6:33:b9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org