Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/nJMxU5fWoP1tcqY75MgjmfMoVg8.roa
File: nJMxU5fWoP1tcqY75MgjmfMoVg8.roa (raw, json)
Hash identifier: JDavZJlu5IBCuC1XdxV9oMA+lc3kAnJ8aBzo0G+PB4M=
Subject key identifier: 9C:93:31:53:97:D6:A0:FD:6D:72:A6:3B:E4:C8:23:99:F3:28:56:0F
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4509
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/nJMxU5fWoP1tcqY75MgjmfMoVg8.roa
Signing time: Mon 21 Mar 2022 00:30:07 +0000
ROA not before: Mon 21 Mar 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17673 (0x4509)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 21 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=9C93315397D6A0FD6D72A63BE4C82399F328560F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:82:c0:ed:3f:27:cc:d6:ab:89:60:a0:49:1f:
6c:75:ab:e9:fc:4d:42:c1:38:4e:98:20:8c:d0:e7:
0b:6a:dc:18:6c:ea:06:1b:be:42:d4:20:b1:e6:b0:
f3:7b:d7:7d:dd:16:dc:fe:25:31:24:3e:c9:3c:6e:
da:43:51:ba:35:0a:1b:a2:2a:b7:1c:75:f1:1b:f5:
25:bb:d1:2e:13:c4:f5:a9:38:3b:44:71:de:87:4f:
f0:37:48:d5:23:74:30:34:85:c0:b8:e5:2b:8b:af:
49:4b:5d:d3:bf:f3:b0:c7:73:79:c0:a8:d6:23:19:
95:c7:d9:3a:5e:c0:ce:01:1e:f2:65:19:52:bc:f6:
4a:71:de:8b:32:d7:a3:29:26:20:15:93:ec:f5:0d:
ed:b5:d9:65:f2:a9:6f:e6:25:96:3f:2a:2e:f8:d2:
89:2f:83:de:00:3d:aa:27:45:47:eb:6c:f4:b4:3a:
1a:be:6a:46:f7:e5:f3:a3:42:5c:d5:be:23:d5:e6:
d9:72:29:72:45:2c:a3:85:ac:7e:2b:29:2d:e1:6f:
e4:b1:26:12:40:c6:04:a6:b0:b1:06:c6:cc:87:46:
35:3b:50:3c:e5:67:14:14:04:00:19:f1:b9:dd:bf:
0a:87:73:25:70:23:0b:85:cd:80:45:58:4f:21:77:
e6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:93:31:53:97:D6:A0:FD:6D:72:A6:3B:E4:C8:23:99:F3:28:56:0F
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/nJMxU5fWoP1tcqY75MgjmfMoVg8.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:3d:19:12:28:81:a9:78:37:29:57:58:b7:83:8c:ad:35:72:
2c:d5:74:25:8a:9d:07:13:45:f7:42:60:65:28:d4:34:d7:86:
b4:d5:ab:2e:92:ab:b2:ef:76:78:59:d9:7f:2a:1d:8c:06:08:
83:b4:08:31:15:46:bb:87:a3:22:02:7a:a8:37:c0:d1:6f:6e:
8b:f8:b1:60:55:1b:4e:3a:ad:1e:6b:00:59:6e:f3:3f:d8:dd:
7f:99:9e:c5:d4:18:a7:b4:5a:08:14:f4:ec:37:cc:1c:4a:f5:
68:4a:f3:88:d7:4e:0a:72:44:05:c5:56:6e:1b:d2:95:a4:29:
16:bb:7c:70:f0:ff:eb:a6:20:ae:16:d9:8f:fe:b5:16:fb:d1:
9f:a9:95:0f:f2:3f:cf:11:2d:fd:fd:a3:10:66:49:7a:ac:18:
c6:b0:ce:87:f3:8b:82:8d:63:c8:ab:c0:df:ad:30:66:27:26:
81:ef:24:7c:ff:77:a2:f3:d6:d1:83:91:5d:b5:40:75:41:a3:
30:74:82:fe:f6:29:a4:56:7e:c5:fb:eb:34:90:2f:f5:8a:18:
8b:95:2f:43:cb:e9:13:b0:28:40:3c:ef:c5:42:5d:a5:cb:1e:
17:6c:65:49:48:90:ac:11:34:a9:2e:3e:36:c3:b5:88:6d:9f:
ee:15:2c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org