Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/pozwc1BadcwSUVlDZckCOj8_5kM.roa
File: pozwc1BadcwSUVlDZckCOj8_5kM.roa (raw, json)
Hash identifier: 44qRZLiPosaRxnUK5bqmXqwsLD+DIQK/OeDxuNaSJoE=
Subject key identifier: A6:8C:F0:73:50:5A:75:CC:12:51:59:43:65:C9:02:3A:3F:3F:E6:43
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4921
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/pozwc1BadcwSUVlDZckCOj8_5kM.roa
Signing time: Thu 02 Jun 2022 00:30:12 +0000
ROA not before: Thu 02 Jun 2022 00:30:12 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18721 (0x4921)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 2 00:30:12 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=A68CF073505A75CC1251594365C9023A3F3FE643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:af:45:9e:3f:ec:35:80:14:d3:89:f6:48:88:
eb:25:75:9e:1d:3c:09:9e:d1:10:a2:c9:c8:c8:0c:
69:7f:df:0e:97:73:0d:e8:78:62:4f:b7:a6:93:67:
a4:36:e8:d4:ef:ba:90:ac:dc:ba:d5:44:34:e0:4e:
a4:eb:f8:f4:93:71:9b:0d:c2:b6:71:42:4b:da:8e:
a0:12:f5:63:4f:18:20:82:a9:7d:e2:be:9e:1d:fa:
4b:f7:f0:1a:e3:62:2e:c4:11:cb:dc:02:34:97:c3:
c3:45:47:4b:75:97:f1:8a:18:63:7d:12:28:0d:ef:
0b:1d:44:bf:83:93:b1:13:87:6b:77:5c:e9:e1:7c:
26:ff:3f:bf:b4:a2:4d:00:3e:f7:33:b0:a7:55:4d:
6d:cd:13:73:38:0d:c3:34:2b:6b:92:af:d7:a1:20:
d8:30:25:c8:32:c1:26:f2:1b:d1:56:5a:0b:bf:d6:
83:da:e4:00:44:33:3e:86:62:c0:df:db:6f:6f:e7:
78:1b:62:1f:24:3e:fb:26:4e:59:d0:52:38:1a:d9:
1a:6e:30:59:4c:80:0d:7d:8b:ce:1c:4a:5e:6d:db:
85:ea:71:36:8f:d7:18:67:66:bd:ba:c7:87:f1:61:
23:4b:ba:71:f7:46:dd:e6:d4:f5:b8:f3:af:4f:1e:
16:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:8C:F0:73:50:5A:75:CC:12:51:59:43:65:C9:02:3A:3F:3F:E6:43
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/pozwc1BadcwSUVlDZckCOj8_5kM.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.8.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:b2:38:a6:70:13:d3:2a:ac:3b:79:c2:ac:1a:8f:4f:ef:e9:
f4:81:65:bb:84:dd:01:f7:9a:06:de:de:87:9e:34:32:45:5f:
59:26:d9:a4:ca:41:c2:ff:ef:1a:d7:d1:3f:23:af:d8:8d:f8:
81:ec:65:2b:83:23:6a:9b:34:ea:d1:01:c5:4e:7d:4d:fd:0d:
c2:ac:c1:c3:61:28:83:52:66:f2:71:73:17:93:60:2c:1a:24:
01:b9:f8:08:d4:28:e0:cf:04:72:a5:f9:42:87:d8:e9:18:d2:
61:aa:ac:81:04:bc:52:70:da:4a:fe:5a:04:c3:61:be:67:4f:
83:e1:85:17:ac:85:b4:5d:53:57:2d:44:d0:4e:b0:2b:8e:72:
85:39:67:52:25:af:a3:3b:c7:fe:dc:53:ae:ef:15:e3:c2:6b:
a9:01:ab:1b:75:d2:f9:2b:9f:33:b8:c9:9d:24:5a:6f:b9:d8:
75:86:97:32:7a:c8:26:5d:51:70:80:52:d5:e3:e2:6b:73:58:
7b:45:10:4d:aa:9f:f3:13:a1:fc:56:99:1a:76:32:fc:51:66:
0f:99:85:59:71:ca:12:50:98:bc:a6:c2:a8:85:29:91:2b:dc:
10:ef:9c:13:fd:40:d4:21:f7:44:d6:0c:da:6e:1e:9e:33:82:
95:49:5d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org