Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/rDutrd2vFl3fvR77Wi5zhoymW48.roa
File: rDutrd2vFl3fvR77Wi5zhoymW48.roa (raw, json)
Hash identifier: KoWJy/NF/TgWv/u7cW6uq3YeztMUFfM+tZ4hkh/N7So=
Subject key identifier: AC:3B:AD:AD:DD:AF:16:5D:DF:BD:1E:FB:5A:2E:73:86:8C:A6:5B:8F
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 44B0
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/rDutrd2vFl3fvR77Wi5zhoymW48.roa
Signing time: Tue 15 Mar 2022 00:30:07 +0000
ROA not before: Tue 15 Mar 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17584 (0x44b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 15 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=AC3BADADDDAF165DDFBD1EFB5A2E73868CA65B8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:33:1d:99:fe:d6:74:24:69:34:37:4a:e0:64:
3f:00:fa:c0:86:02:98:3f:17:25:90:d8:99:66:f6:
3b:83:0e:95:e1:ab:ef:ed:49:96:58:d3:e6:b0:56:
0d:d5:bf:ea:0e:b1:55:2d:d0:d0:d6:69:9f:01:09:
c7:34:ac:d0:b8:ab:6b:69:03:41:31:55:5b:93:3c:
98:b8:12:eb:5e:53:4f:ce:e2:4f:5c:84:61:bf:c5:
1f:da:f3:f4:da:40:4f:5e:60:f5:38:78:e7:20:b3:
c2:02:26:98:7f:cd:57:45:6d:38:c8:a6:86:a3:72:
d6:eb:d3:1e:81:2a:0d:c2:47:f9:d0:95:0b:8f:a2:
a1:77:30:24:05:3a:5b:2d:e1:d7:9f:17:24:43:0f:
1f:13:0a:5e:8b:d8:4f:26:14:94:26:3b:2c:19:7d:
9f:dc:ed:80:7e:25:8f:5a:1d:ee:33:68:b0:bf:64:
10:ea:d0:56:68:e4:87:f3:ff:b1:e1:1c:0e:47:5d:
54:4f:db:f7:10:2d:08:b5:41:b2:0e:a7:eb:a9:df:
a2:78:8e:5b:c2:e9:74:63:c5:cd:b7:01:70:00:8f:
cd:e6:d3:11:52:97:b0:fa:5c:e5:17:23:e7:8d:bd:
7f:ec:16:01:eb:1e:10:f6:54:ed:31:1d:59:19:92:
9a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:3B:AD:AD:DD:AF:16:5D:DF:BD:1E:FB:5A:2E:73:86:8C:A6:5B:8F
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/rDutrd2vFl3fvR77Wi5zhoymW48.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:34:a4:63:f2:0f:d5:bb:7f:7c:bd:be:30:1a:7e:c0:e6:78:
f9:e6:42:5c:51:23:01:79:be:11:ed:30:ba:d8:de:f7:07:88:
a0:24:c5:e0:fe:93:1f:1e:0a:20:10:d4:88:c7:51:a5:6f:9e:
74:b0:49:51:06:f3:d5:f6:76:78:ac:d6:08:7c:53:17:2a:94:
75:d6:5d:97:ed:4b:ec:84:7a:27:29:93:a7:d2:e3:8e:aa:42:
4b:0c:36:27:2f:f4:8c:86:8d:30:2d:b5:9b:fb:4e:f0:c9:12:
8b:30:1c:2d:d3:30:53:1b:65:5b:94:75:38:f3:06:1c:c4:d9:
f2:26:2f:bc:c4:40:f9:14:d6:97:a5:8d:e7:23:4e:cf:dd:53:
9d:b3:3e:c0:0f:46:44:19:a6:00:2d:7d:ed:bf:31:82:4b:19:
22:72:ad:3a:1b:bb:64:1e:60:a8:d8:b0:dc:e0:61:d8:1e:95:
eb:7b:e5:a2:42:b3:a9:9d:40:c2:67:ae:48:56:d8:c0:ad:22:
5f:0f:71:f1:10:c5:8f:fb:e1:8e:10:46:37:ee:42:1d:49:dc:
a6:de:e9:e8:dc:c4:43:d3:4c:7b:a3:95:c1:89:9e:6b:72:70:
cf:fb:43:69:2c:58:7c:e0:72:03:38:28:da:6d:3d:ad:68:e9:
2f:dd:67:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org