Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/oD_TVOzCCC4NoNrMMExY6wfvUWw.roa
File: oD_TVOzCCC4NoNrMMExY6wfvUWw.roa (raw, json)
Hash identifier: n6cmeF8uaqqJc+jzr2XTx3DKdyPSspYVfJBTWbtQc60=
Subject key identifier: A0:3F:D3:54:EC:C2:08:2E:0D:A0:DA:CC:30:4C:58:EB:07:EF:51:6C
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4401
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/oD_TVOzCCC4NoNrMMExY6wfvUWw.roa
Signing time: Wed 02 Mar 2022 00:30:14 +0000
ROA not before: Wed 02 Mar 2022 00:30:14 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17409 (0x4401)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 2 00:30:14 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=A03FD354ECC2082E0DA0DACC304C58EB07EF516C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f4:79:2b:d1:70:81:46:f8:b2:e9:49:fa:ef:
f4:6d:38:27:cd:03:bf:1f:a7:1a:ef:74:c8:2c:01:
c1:c4:4a:fc:94:6c:87:61:32:e6:ff:4c:22:90:12:
6a:5e:2e:ac:5a:87:35:35:ea:d1:06:45:7b:2b:95:
bc:fb:62:61:37:91:35:d5:3e:e5:7d:b7:ff:8e:27:
ee:c4:70:7d:93:b5:9f:68:cb:41:59:18:d6:63:a5:
9a:bd:8c:12:d5:74:c1:2d:cb:ad:87:44:4d:4c:99:
b1:a4:ad:be:77:1d:3c:66:18:0b:09:e8:4f:18:68:
9e:88:91:7e:31:3c:14:95:1c:17:6a:11:df:aa:d8:
b9:6f:df:3d:bf:ba:f8:4f:e6:18:03:b2:cf:ec:2d:
4f:3c:1a:16:a1:fa:60:dd:ab:1d:97:7e:00:9b:74:
46:80:e2:40:96:fc:55:3d:be:d8:ef:75:44:8a:a9:
22:73:22:39:eb:6e:b5:25:78:31:44:04:e0:52:8d:
b3:49:7a:5c:f4:2f:0f:2d:2c:03:e9:7a:3f:1f:b2:
9c:d4:31:c1:9d:d5:bb:54:10:49:7f:4b:53:d7:69:
f0:6e:b6:f1:1c:eb:68:fd:57:00:8a:88:eb:84:89:
a4:5c:f5:8d:27:4f:2a:8b:de:37:d8:af:a1:fa:2e:
e0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:3F:D3:54:EC:C2:08:2E:0D:A0:DA:CC:30:4C:58:EB:07:EF:51:6C
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/oD_TVOzCCC4NoNrMMExY6wfvUWw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
42:86:29:49:d2:08:7e:99:1d:ae:db:ea:f1:77:68:f6:16:63:
4d:36:ac:d8:07:f1:0a:e6:05:af:37:fb:0d:54:4f:6d:cb:70:
17:35:0a:a6:e9:85:e3:01:ef:c7:14:6b:1d:56:ca:6b:39:08:
68:20:d3:9f:5b:d4:85:c0:5c:2c:0b:7d:82:6d:78:67:28:de:
3d:9c:e1:fa:04:74:e4:de:b3:33:67:a6:87:35:7a:4e:2b:7a:
b6:8f:ad:df:ac:93:95:69:f3:86:b7:8a:a9:84:4f:fd:4c:31:
7f:a4:54:bc:4b:48:be:69:36:8a:90:8c:5e:a6:47:4c:42:ab:
6f:e5:dd:e1:d8:87:fb:d1:a9:20:a1:21:cf:16:2d:f8:51:f2:
95:3a:4b:c0:56:f9:72:fc:06:8f:23:9e:3c:13:4a:7d:40:8a:
0f:c0:37:99:be:90:6e:c0:02:fd:e6:ba:f4:a9:22:ec:1f:15:
91:5f:95:aa:35:e0:39:dd:db:66:00:e3:e2:37:10:f2:b1:9d:
ec:25:5b:00:19:e6:44:0b:24:b2:6d:1b:f7:c9:8e:9c:54:41:
7d:7b:0b:de:48:c9:01:60:3a:b8:a3:3f:bd:b3:1a:af:26:ca:
97:b1:58:9d:a9:94:8d:42:75:d2:4f:7f:04:de:e2:8d:95:21:
f8:12:52:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org