Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/pOP0gLrEbrPlBh88jMDuiSDDDhA.roa
File: pOP0gLrEbrPlBh88jMDuiSDDDhA.roa (raw, json)
Hash identifier: tm9leaSfMUIig/5xFKsB1kH+OG1pL6HNwrvQcrizV4g=
Subject key identifier: A4:E3:F4:80:BA:C4:6E:B3:E5:06:1F:3C:8C:C0:EE:89:20:C3:0E:10
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 45EB
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/pOP0gLrEbrPlBh88jMDuiSDDDhA.roa
Signing time: Wed 06 Apr 2022 00:30:08 +0000
ROA not before: Wed 06 Apr 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17899 (0x45eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 6 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=A4E3F480BAC46EB3E5061F3C8CC0EE8920C30E10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7b:3f:e8:9d:1f:d0:ac:fc:25:a0:11:d4:21:
07:c7:7f:55:b1:0e:4e:34:8a:db:01:3b:b5:28:cb:
30:a7:cc:9e:6d:c5:90:b6:b8:ef:a2:7a:1e:27:1e:
ff:75:40:f4:b0:4f:e9:32:de:ca:27:4f:b2:ec:55:
51:00:73:2e:2f:df:73:c0:91:75:b6:b9:f6:9d:f2:
71:26:43:56:dc:49:e2:1f:df:14:f2:ae:b5:60:66:
c3:4c:de:6a:16:1e:52:fd:5b:15:7d:fb:4f:e3:4f:
3a:df:21:84:ae:b0:ce:84:63:94:2b:3b:54:03:5f:
64:4d:5f:64:fc:3b:c6:fc:a3:dd:32:e0:25:dc:43:
ce:29:1f:32:f3:20:e7:53:0a:e9:2c:f8:0d:5c:a3:
25:87:2c:76:c7:fc:2c:f5:88:96:15:dd:b7:ac:dc:
49:0d:fa:48:bd:3e:fc:c8:67:aa:fe:f8:79:75:92:
fc:67:f9:5a:49:ef:09:41:0e:42:6f:42:b3:fe:4c:
c5:f2:bc:e8:b3:d6:5d:9c:9e:28:17:34:3e:31:33:
21:3f:a8:f5:fd:19:9a:f3:23:f3:d0:e5:76:2e:34:
c9:84:c0:2c:79:00:c4:01:7e:48:23:4f:fc:0f:53:
72:65:b1:83:79:82:71:e0:61:64:06:dd:26:7a:29:
1f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E3:F4:80:BA:C4:6E:B3:E5:06:1F:3C:8C:C0:EE:89:20:C3:0E:10
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/pOP0gLrEbrPlBh88jMDuiSDDDhA.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
23:1c:9c:2a:31:26:b5:cc:cf:ac:36:4d:c4:32:05:0b:5c:61:
34:17:02:9c:43:80:99:dd:f8:ef:dd:fd:b5:1a:23:6c:b6:00:
84:d4:4c:19:af:47:8d:34:e4:d1:93:16:0f:43:d5:d6:03:fb:
ec:1f:7a:ef:52:f5:7e:a9:13:f5:65:e1:ca:be:09:7d:58:42:
f1:f5:c4:ed:7d:27:e3:98:b5:f4:8c:f3:9a:be:b3:f0:21:27:
4f:ac:bd:3f:77:08:7a:a8:81:4f:02:53:ed:9d:5e:35:7c:83:
4a:c1:cb:65:0d:f9:10:cd:82:5d:c6:a1:b8:9c:b1:8d:df:2f:
dc:a1:4d:6f:20:b5:29:77:8a:99:e8:3b:da:33:51:db:8c:84:
59:ac:21:d8:07:eb:04:f3:48:7a:08:fe:89:f7:db:6b:78:d5:
df:fd:aa:de:3d:42:f4:5e:4a:f9:7c:2a:be:59:e6:4a:21:91:
cf:97:27:a5:4b:93:7c:f1:b3:9d:8c:07:5a:1b:ff:2f:f1:1f:
83:31:46:41:ac:64:1a:2c:5f:2b:3c:4a:8e:e6:cd:52:da:98:
d9:c6:12:ec:3c:62:f9:16:0f:fa:f0:3f:3c:e2:28:58:eb:4e:
bd:47:ca:ed:d3:f7:ef:f8:da:2b:f1:3f:ef:e1:ba:79:92:01:
0e:59:82:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org