Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/t37FuyPldV0GFdQZM44SmYlCwQk.roa
File: t37FuyPldV0GFdQZM44SmYlCwQk.roa (raw, json)
Hash identifier: qj9JDQBgkKQpDWchENbKZT6/vd6FcBSPE1L08VlrjZE=
Subject key identifier: B7:7E:C5:BB:23:E5:75:5D:06:15:D4:19:33:8E:12:99:89:42:C1:09
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4462
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/t37FuyPldV0GFdQZM44SmYlCwQk.roa
Signing time: Wed 09 Mar 2022 00:36:47 +0000
ROA not before: Wed 09 Mar 2022 00:36:47 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17506 (0x4462)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 9 00:36:47 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=B77EC5BB23E5755D0615D419338E12998942C109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:17:a7:7c:8a:01:ba:d1:d9:28:a5:54:97:6e:
50:92:18:b3:22:f5:59:c7:ac:da:29:2e:ba:8d:9f:
1a:cd:f9:5c:10:c8:8b:cd:09:ad:c4:c8:c5:5c:6f:
28:a2:8e:24:29:23:e4:99:8b:b7:a8:0c:51:39:48:
32:d1:53:43:13:f3:92:6b:80:7c:7a:35:8a:08:e1:
cf:6b:7f:f3:72:19:41:e7:a8:f6:6a:4b:00:83:28:
af:3f:c1:d9:77:ba:5f:6d:ab:e4:57:86:b5:46:4d:
6b:11:e0:0d:63:7d:d9:85:78:53:7e:9a:6e:5b:f0:
77:1c:e7:9c:5f:e1:5c:de:3d:6e:ff:70:f7:40:00:
6b:0b:ef:bf:ed:f1:7f:81:81:26:f1:d2:98:52:42:
b9:a9:e9:28:85:0d:28:fd:b5:84:d4:e1:c3:28:1e:
b8:e6:25:b6:77:a3:62:e6:e0:93:29:92:92:3a:a4:
28:31:76:5a:c7:65:80:6a:83:03:bf:d2:25:38:e7:
fa:d6:23:54:37:c0:8f:58:21:7c:65:5b:3c:62:54:
da:09:3a:63:ea:8a:7f:a7:45:0a:b9:12:78:10:d9:
d4:ef:60:26:70:a6:b1:a1:0a:04:12:e8:41:29:61:
c5:d5:71:14:2d:69:de:a6:e4:79:dc:a0:27:f9:47:
bd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7E:C5:BB:23:E5:75:5D:06:15:D4:19:33:8E:12:99:89:42:C1:09
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/t37FuyPldV0GFdQZM44SmYlCwQk.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
86:86:38:e8:b7:42:e2:17:52:96:55:f5:fc:d6:9b:34:09:1a:
be:b7:0d:6d:16:ae:14:7d:c3:7e:ac:63:f6:3c:65:a0:bc:a7:
0a:a1:85:75:32:2e:8d:a9:6c:da:a2:91:74:3c:97:37:3c:68:
23:4f:8d:70:73:7b:05:4c:60:74:2b:ad:75:81:1d:cb:89:10:
c0:81:e7:61:00:b4:4a:eb:5b:ce:ad:59:7f:8c:3b:4e:52:0f:
82:c3:68:05:91:19:c0:75:c0:d5:2d:87:99:d7:63:5f:be:bd:
ac:72:57:b7:ff:0a:38:d7:62:be:2a:95:59:42:e8:f8:ed:6f:
52:75:08:63:bf:f7:ce:cf:cd:f0:6f:60:28:90:0f:12:af:8b:
cd:6e:59:ca:39:db:09:c4:97:80:d4:4f:2a:61:61:1d:bc:00:
3a:84:3d:38:0e:6b:d8:ef:29:ef:16:0a:6f:16:87:21:4b:25:
75:da:d2:8d:0d:f1:59:6f:ff:45:73:4d:90:bf:59:3b:39:39:
42:69:80:b9:64:b5:e8:8c:5a:bb:5a:c3:c5:19:28:a8:9b:8b:
93:cd:75:a4:22:82:6a:4c:5e:53:ba:04:4b:ad:0a:59:b1:bc:
dc:04:24:18:83:b1:71:9b:62:76:74:0b:d1:ea:81:44:ed:0b:
9d:78:5b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org