Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/ruCupN3LLKwO-rfile2yQFZn1rA.roa
File: ruCupN3LLKwO-rfile2yQFZn1rA.roa (raw, json)
Hash identifier: 7H/Bx4s9LnHq4CdTVcVCOlmp/LwKhTapm7up0BwfZ/A=
Subject key identifier: AE:E0:AE:A4:DD:CB:2C:AC:0E:FA:B7:E2:95:ED:B2:40:56:67:D6:B0
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 46F0
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ruCupN3LLKwO-rfile2yQFZn1rA.roa
Signing time: Mon 25 Apr 2022 00:30:05 +0000
ROA not before: Mon 25 Apr 2022 00:30:05 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18160 (0x46f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 25 00:30:05 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=AEE0AEA4DDCB2CAC0EFAB7E295EDB2405667D6B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:04:ce:1f:1e:f7:41:82:62:09:21:35:7c:e8:
0e:37:d0:af:8f:b4:bc:31:17:e2:93:8e:b4:47:40:
98:ae:31:4b:37:d4:87:b6:b1:a2:81:d7:4f:f7:e2:
69:7a:83:6f:fb:d9:30:7f:c6:9c:1b:66:17:b3:98:
20:d1:03:8a:ae:3f:78:87:e7:4f:9e:6d:cb:99:d0:
39:3a:e6:69:9e:71:7c:db:ca:dd:12:64:97:52:4e:
53:77:0a:53:98:31:02:af:52:2a:f0:4b:12:4e:83:
8b:21:78:5a:52:12:5e:7c:5f:56:41:04:e2:15:09:
f4:63:bf:d3:71:9f:d3:d2:18:60:ff:a8:5d:ff:35:
93:57:dd:ec:1a:b2:0d:5c:69:f6:b3:69:4d:62:c7:
c2:61:7e:0d:84:11:fc:91:6a:ab:7d:77:1f:9b:6f:
47:9a:83:4b:86:18:15:02:cb:72:62:f3:06:2b:89:
68:5e:af:42:66:5f:81:18:2a:6e:82:5e:1e:52:d9:
d1:a3:cf:4d:70:16:fa:75:4e:bd:a0:57:e9:f2:95:
ca:4a:42:ce:22:57:a6:75:75:0a:09:64:fc:4d:98:
f0:7d:df:27:56:d0:c6:9d:49:23:af:08:8e:7b:70:
37:f8:da:60:2a:1b:92:bf:9c:4e:17:9c:bc:51:b8:
de:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E0:AE:A4:DD:CB:2C:AC:0E:FA:B7:E2:95:ED:B2:40:56:67:D6:B0
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ruCupN3LLKwO-rfile2yQFZn1rA.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
be:51:5a:54:ad:3c:cc:a5:7a:65:f3:31:ac:25:ff:3b:22:76:
27:70:a7:29:0b:88:b8:e9:ac:07:fd:a6:05:a4:09:38:ba:c9:
44:ac:88:d1:b5:15:4b:e7:00:98:b5:3f:31:03:18:5c:c1:8f:
a6:67:32:8b:ed:bc:41:a2:f3:eb:35:e6:84:81:1a:4f:b6:3a:
7e:74:e8:2c:ce:62:e1:25:71:fd:14:d8:c6:63:1d:ce:79:98:
a0:85:78:19:1e:39:d6:ef:29:45:d6:2a:d5:0b:f8:56:1f:37:
20:f1:9f:1a:22:5a:e0:46:17:77:39:80:1a:3d:36:52:49:d5:
ec:1f:58:c4:8d:87:8b:08:50:c3:27:40:6e:13:a7:05:a5:b3:
b4:3c:7c:1c:a0:80:7a:f2:55:b5:f4:35:64:c1:88:35:01:2b:
ce:bc:26:bd:d2:11:bb:bd:2c:5a:60:6b:a8:99:8a:a6:98:8e:
9c:05:61:dd:a2:95:28:57:5a:f1:31:32:51:51:c7:fa:69:0c:
21:26:a6:07:2b:9e:38:cb:de:19:0b:89:95:34:8d:cf:e5:d8:
88:1f:c2:34:12:db:1c:c7:f7:da:56:2b:a2:60:e8:97:88:99:
fb:32:50:d7:49:70:ed:8d:88:ee:ed:70:92:96:35:47:58:af:
ae:46:d2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org