Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/sVZvF4fTECZYOzhCJPJBuNDMqG0.roa
File: sVZvF4fTECZYOzhCJPJBuNDMqG0.roa (raw, json)
Hash identifier: Dor14VvNmxnEDtSuy0iXK8KilxKMUrklyD68o95tB1M=
Subject key identifier: B1:56:6F:17:87:D3:10:26:58:3B:38:42:24:F2:41:B8:D0:CC:A8:6D
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4684
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/sVZvF4fTECZYOzhCJPJBuNDMqG0.roa
Signing time: Sun 17 Apr 2022 00:30:09 +0000
ROA not before: Sun 17 Apr 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18052 (0x4684)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 17 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=B1566F1787D31026583B384224F241B8D0CCA86D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4a:f6:99:d1:58:26:72:6e:46:43:3c:ee:14:
9a:01:6e:ec:36:0e:86:22:c7:53:8b:61:f7:b1:26:
20:a4:1d:36:5f:87:78:9e:b5:74:89:d4:c6:b9:f4:
07:67:bb:9b:36:8e:03:53:3c:39:35:df:95:65:37:
3c:64:cc:33:24:7e:81:dd:80:f5:4b:18:e3:3e:d4:
34:80:b8:ee:75:f1:75:0e:d4:07:05:cf:f0:57:76:
77:a3:a2:63:7c:39:45:fa:5b:6f:58:62:05:e4:03:
30:f9:eb:e6:b6:8b:a3:7b:ff:0c:c2:e8:06:99:0c:
12:de:91:8e:e6:8c:71:d3:78:f4:85:be:80:66:0b:
f9:86:76:5d:6d:f4:d6:81:ca:c6:7b:6c:13:46:2f:
b9:10:cc:a6:8a:ef:d8:7b:0c:fd:75:76:81:ec:2f:
22:31:ad:66:13:f8:48:17:45:cc:b0:c2:bc:15:c7:
fe:59:6d:d1:06:c2:be:2c:1e:ff:58:91:bc:77:35:
76:60:a4:86:c5:5b:54:c5:e5:62:6f:f0:85:da:8d:
a8:a8:f2:31:5f:ca:fd:86:3c:19:ef:d6:b9:3a:dd:
7a:96:c2:2a:52:2d:b4:ac:fa:1b:02:bf:78:71:a6:
0b:78:ac:cd:3a:95:8e:83:07:c3:ff:dd:1a:05:c7:
56:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:56:6F:17:87:D3:10:26:58:3B:38:42:24:F2:41:B8:D0:CC:A8:6D
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/sVZvF4fTECZYOzhCJPJBuNDMqG0.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
07:4d:27:5f:91:96:7b:13:2d:a8:f6:c7:db:9b:82:af:ce:6e:
aa:c1:55:31:0f:0c:b7:55:ff:68:fd:d6:78:6a:2e:7f:e9:96:
2f:bf:fa:20:13:74:47:30:78:16:87:b7:6e:36:c4:d6:aa:6f:
c4:a5:d9:77:a1:b7:49:60:71:52:ef:99:2b:a6:8b:fa:56:16:
90:ad:c8:a7:5b:a2:58:b5:ff:e1:3a:b8:50:09:10:c5:da:2d:
bf:7f:72:f9:1b:04:5a:9b:d6:68:79:4d:48:71:53:1e:b3:d2:
98:7b:20:c8:41:b8:1b:e5:9b:37:9a:b9:51:83:5c:50:ea:51:
72:a7:23:b0:1d:b7:2e:2e:fa:8f:1a:4b:85:f8:b0:eb:0b:9b:
52:b1:8d:cf:e2:37:57:18:dc:3b:af:9a:d1:19:b8:a6:81:b7:
f2:5a:7b:6b:dd:fc:8b:a7:dd:c9:cd:7c:20:23:18:25:8f:24:
17:03:6f:36:ac:28:25:1c:a2:e3:d2:d1:7c:09:1d:ba:aa:83:
73:40:d3:31:7b:f9:f4:69:56:90:ff:8a:9e:05:56:07:d2:2e:
8a:98:21:cd:5f:44:f2:e8:62:ba:68:6f:df:95:ed:38:73:10:
e1:b3:67:bf:e0:bc:05:bc:f4:17:67:4a:85:db:5d:ea:7f:3a:
cc:ce:35:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org