Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/pJf38Yrp79zf-pQKiYB7EzwlUtg.roa
File: pJf38Yrp79zf-pQKiYB7EzwlUtg.roa (raw, json)
Hash identifier: LBmN+tssLoP6p1D5Gf5RVCTiR8CBgl2Ds+alPx4j9RQ=
Subject key identifier: A4:97:F7:F1:8A:E9:EF:DC:DF:FA:94:0A:89:80:7B:13:3C:25:52:D8
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4705
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/pJf38Yrp79zf-pQKiYB7EzwlUtg.roa
Signing time: Tue 26 Apr 2022 00:30:08 +0000
ROA not before: Tue 26 Apr 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18181 (0x4705)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 26 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=A497F7F18AE9EFDCDFFA940A89807B133C2552D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:13:cc:e2:4a:bd:23:3b:c3:6a:f8:73:d6:0c:
aa:82:09:a0:1e:d4:3d:cb:64:65:43:a3:59:2e:7f:
ca:43:48:87:48:a6:b3:50:58:0d:ee:54:92:ec:55:
24:c8:0c:8a:ee:0f:ae:1c:09:0d:9e:db:20:6d:bf:
19:d8:56:21:f0:f6:fd:56:29:53:09:cf:c7:aa:25:
a6:82:a9:2f:b1:2e:41:1c:9b:08:97:fd:22:70:de:
b2:a8:65:55:b8:f7:57:5f:8b:55:2f:af:91:e5:96:
59:84:d2:1b:59:2a:94:c0:97:53:bc:4b:fb:63:63:
4b:a3:e5:76:1e:a9:b3:ff:ca:f2:b6:32:2e:6a:76:
d8:91:f3:fa:01:50:0f:98:7b:64:11:4b:48:70:24:
db:52:32:22:e7:9a:d4:02:b0:84:8f:0c:8d:c9:a9:
ee:6e:07:ca:dd:84:33:22:ff:cd:0b:82:b9:ae:c0:
7a:b9:c3:96:a0:ec:7e:43:b9:39:1d:07:81:bf:5c:
9d:6b:87:30:a9:a6:f3:6d:6c:89:7c:db:ed:26:76:
be:e4:ea:e9:ef:08:e7:ca:b0:6b:a4:0a:62:02:8e:
c1:c0:d5:56:d1:3e:05:ac:bf:f5:a7:a0:e4:fe:0e:
6b:25:b1:04:ac:67:0f:07:1d:32:bd:c0:0f:e3:78:
7c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:97:F7:F1:8A:E9:EF:DC:DF:FA:94:0A:89:80:7B:13:3C:25:52:D8
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/pJf38Yrp79zf-pQKiYB7EzwlUtg.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:a7:fd:5a:3f:f4:73:e3:1a:37:ab:5b:ff:b9:45:f0:72:4d:
51:cb:bc:d8:41:f0:ca:6a:0b:ce:80:4a:3c:85:dc:d8:01:1e:
d7:6e:e9:60:13:e5:08:38:d3:c4:ab:be:f0:a2:d1:1b:54:cf:
57:e1:2f:0d:a8:0d:ce:11:f5:83:0c:cb:fd:9f:18:e9:f7:23:
f5:72:74:76:15:3a:2f:89:03:14:57:ee:37:3b:ba:31:b1:84:
6a:91:51:22:bd:75:76:2b:30:7d:18:36:a6:55:19:89:0e:27:
7f:32:33:10:01:22:78:4f:33:2d:e6:7f:ac:62:e7:0f:64:06:
ff:a8:e9:06:e7:10:4c:de:f4:7e:85:e0:19:68:d2:f9:ce:a5:
f1:e4:06:d6:5f:0c:8f:13:9b:a7:73:2e:87:0a:a6:3d:99:a1:
0b:c6:a3:f4:f6:cb:72:2d:ac:39:18:b0:e4:99:08:31:57:80:
f0:05:c4:83:d5:59:e4:f2:b4:49:62:c9:c9:81:c1:7a:df:56:
b3:43:73:58:03:9f:d7:84:90:b7:05:c6:87:56:4e:11:ed:e2:
7b:c7:9a:7e:9a:58:c6:e0:65:42:7f:8d:0a:c7:bd:f7:9a:25:
a4:2b:a8:9c:dc:45:9d:69:38:98:c5:b4:a5:b9:de:0e:22:2e:
8e:72:88:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org