Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/l3Z6OL3fwR7QTFKnNVgk9BU5OhY.roa
File: l3Z6OL3fwR7QTFKnNVgk9BU5OhY.roa (raw, json)
Hash identifier: ZFnrLSkuRxh0ZvRJzP84pqnBXXuVLRom/11EllZAZu0=
Subject key identifier: 97:76:7A:38:BD:DF:C1:1E:D0:4C:52:A7:35:58:24:F4:15:39:3A:16
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 491C
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/l3Z6OL3fwR7QTFKnNVgk9BU5OhY.roa
Signing time: Thu 02 Jun 2022 00:30:09 +0000
ROA not before: Thu 02 Jun 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18716 (0x491c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 2 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=97767A38BDDFC11ED04C52A7355824F415393A16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4b:d9:fb:1e:4a:78:4f:37:63:ae:d2:ba:f1:
19:fb:6e:25:c9:e0:90:33:11:14:f8:a0:1f:1b:a0:
2f:95:e3:01:3f:d1:bc:b0:ee:a1:73:12:01:71:3d:
7f:8e:8b:5e:bb:41:0f:c9:1d:2e:bc:f9:b4:3c:b1:
01:36:4e:c0:3b:23:a1:44:2f:4c:32:37:2f:90:a9:
1a:00:83:88:19:72:d4:34:e0:94:7e:2c:11:04:e1:
d8:b1:13:1c:ea:53:94:f2:1e:94:8e:4c:73:96:a2:
0f:70:77:65:74:1c:dd:1f:68:4e:4c:5d:b2:58:7a:
4b:1c:2b:fa:29:58:0c:32:22:13:0c:ce:17:5c:d5:
48:af:aa:30:97:0b:5d:0a:21:f2:51:c8:13:3e:ee:
9a:04:4e:d1:ca:c0:e9:ae:e8:23:b2:4e:14:48:fc:
29:64:e5:bf:89:54:99:65:cd:46:1e:25:ca:41:2b:
27:06:7b:5d:30:55:08:bb:9f:18:94:16:c3:fd:1d:
29:12:b8:1c:60:7a:ae:f5:e8:93:f5:8c:d9:23:1f:
d4:80:a7:0e:9b:8b:5c:f1:d7:62:71:cc:6e:e1:8e:
fe:61:0a:2f:38:08:b8:32:c5:e4:8d:fc:9f:da:10:
2f:cd:db:f4:3e:00:93:f7:6a:ba:bc:03:23:66:a0:
d4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:76:7A:38:BD:DF:C1:1E:D0:4C:52:A7:35:58:24:F4:15:39:3A:16
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/l3Z6OL3fwR7QTFKnNVgk9BU5OhY.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:61:fc:b1:f8:38:7c:dc:70:1d:d2:ff:b6:4c:cb:f7:60:ae:
50:5b:0b:81:66:c3:db:df:ef:e9:58:3b:ce:43:e3:91:5e:7d:
ae:c1:d0:aa:4d:57:21:10:13:d6:de:15:16:4b:b3:a7:61:29:
15:66:81:83:3f:68:b5:ea:70:0f:99:53:ee:69:e3:7e:ef:2b:
b1:9d:c6:58:de:83:1c:9f:6a:10:11:d3:7a:80:b0:15:58:b7:
bf:87:dc:80:53:1f:4a:ff:5c:fe:47:86:93:ac:5f:13:9c:b7:
58:08:09:fc:b3:b2:2e:5a:20:2e:32:07:86:18:9e:04:5e:ac:
eb:de:23:12:b6:f8:7e:eb:3e:41:11:e5:d7:fb:b8:f1:2d:de:
86:b6:52:20:90:cc:ee:71:f2:c4:b7:e2:9d:28:ca:2a:30:42:
63:45:a2:0c:a1:03:6a:68:16:d7:5a:e8:f1:e3:5e:f9:33:30:
e6:7a:14:7a:51:ff:e6:fb:85:3a:73:e6:bb:59:52:4b:54:ac:
96:52:ec:da:15:37:bc:3c:22:8f:bd:06:f5:11:f1:a7:62:8b:
4c:46:65:24:07:2a:22:0f:5c:00:89:d1:c7:7f:71:9b:e1:5e:
2c:30:61:1b:d5:f4:6c:d9:90:ed:b9:2c:81:07:37:7c:68:53:
7c:65:20:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org