Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/mdbop6TBRHNW5FAs7xY4RGwWRBs.roa
File: mdbop6TBRHNW5FAs7xY4RGwWRBs.roa (raw, json)
Hash identifier: tV2H/Tl5PnE2lvKn99YChTnQgaouq/raYPzcZ3pLym0=
Subject key identifier: 99:D6:E8:A7:A4:C1:44:73:56:E4:50:2C:EF:16:38:44:6C:16:44:1B
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 478D
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/mdbop6TBRHNW5FAs7xY4RGwWRBs.roa
Signing time: Fri 06 May 2022 00:30:06 +0000
ROA not before: Fri 06 May 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18317 (0x478d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 6 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=99D6E8A7A4C1447356E4502CEF1638446C16441B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:43:da:ee:89:77:d2:03:28:ed:2a:ad:23:54:
7e:26:ea:53:da:b0:31:3e:9f:5d:45:12:41:9b:29:
59:5d:e5:ad:99:69:94:2a:1f:7f:c9:6b:7f:f5:e8:
6e:1a:d5:87:c6:81:e9:f9:fd:f7:51:a0:44:18:bf:
db:1f:38:4c:f2:2c:07:c3:a0:71:66:16:70:aa:96:
cb:07:90:e7:8b:5e:57:c2:00:aa:aa:1a:08:77:8b:
42:ff:16:33:23:75:f4:f6:7f:59:8b:72:bd:7d:a8:
69:de:25:46:f8:eb:a7:16:db:ea:f3:26:3a:9b:4e:
37:33:d9:fa:2d:8f:e5:8c:21:e1:51:dc:7d:bd:a4:
18:c5:d2:8f:00:85:c3:59:26:b3:85:03:96:28:92:
19:0b:00:90:6b:e9:80:f8:e9:2e:51:e9:54:41:52:
17:f1:84:c3:28:f2:6b:11:b1:87:7f:63:ad:8c:c4:
d6:46:28:10:24:28:65:20:da:6b:29:59:04:58:e1:
d7:d5:2d:26:68:13:29:64:e0:e6:df:72:57:9c:96:
b0:e9:4d:be:f6:2b:8c:d4:83:99:d8:eb:fa:73:9b:
34:d1:a9:f5:b3:06:b6:54:e7:57:2b:ea:dd:3c:06:
25:e6:20:08:9b:a5:93:76:70:6a:4c:35:98:a1:92:
5e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D6:E8:A7:A4:C1:44:73:56:E4:50:2C:EF:16:38:44:6C:16:44:1B
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/mdbop6TBRHNW5FAs7xY4RGwWRBs.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:c2:36:cd:08:62:70:7c:e7:37:31:68:e9:0c:a0:c4:52:34:
3e:ee:76:9a:a7:84:91:64:0b:db:5c:7f:49:db:35:e8:ec:d0:
f8:7e:d2:2f:cb:03:9c:07:89:04:a3:3e:5d:6a:e1:fe:06:98:
a5:5b:30:84:38:82:ce:60:cb:05:4d:8c:f2:ff:2b:00:05:32:
95:9d:0d:08:5d:33:01:e1:15:da:ef:f8:e3:39:f1:a8:ca:f8:
78:b0:00:d4:4a:d0:e5:a5:f6:c2:5e:73:2b:57:c8:40:84:ad:
53:39:1c:a2:45:9e:9a:9c:96:0b:5b:f2:7d:ec:4a:b7:c2:aa:
00:a0:00:12:a1:7a:0e:c4:57:3f:6a:54:29:b2:92:8d:bc:85:
03:39:cf:e3:0f:3a:5f:48:c2:7a:9e:e4:b1:97:de:46:04:30:
8a:2a:68:5c:d8:57:17:47:52:3a:22:6e:c1:88:d3:3a:6d:3e:
5f:50:a1:1f:20:6c:dd:8e:08:5d:7d:4a:d6:d4:05:df:41:77:
61:97:09:f4:a2:19:77:06:01:34:18:97:86:e9:dc:d1:27:d6:
28:cf:26:39:97:a0:7a:0e:c9:df:d9:d8:ab:44:2a:75:0f:d3:
1c:12:cb:5b:8c:8e:d5:3f:16:90:0d:6b:40:a1:6e:bd:bf:12:
3d:14:53:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org