Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/uJ9vJxrXkSNRkMkzFelfUbykF3o.roa
File: uJ9vJxrXkSNRkMkzFelfUbykF3o.roa (raw, json)
Hash identifier: IWrcTRHdZkKfc8E2N+N4ZDxvYNIlO50pCon4lRzPJG8=
Subject key identifier: B8:9F:6F:27:1A:D7:91:23:51:90:C9:33:15:E9:5F:51:BC:A4:17:7A
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 44EE
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/uJ9vJxrXkSNRkMkzFelfUbykF3o.roa
Signing time: Sat 19 Mar 2022 00:30:08 +0000
ROA not before: Sat 19 Mar 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17646 (0x44ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 19 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=B89F6F271AD791235190C93315E95F51BCA4177A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:71:48:06:26:f9:3b:ed:33:cb:69:30:dc:10:
58:57:f8:6a:fb:79:22:8e:d4:77:7b:b5:00:55:b9:
c7:07:46:d2:3f:1a:f4:25:01:12:d3:4a:1b:12:d0:
a8:ea:05:36:2a:a4:44:80:e7:49:64:c7:96:bf:a9:
3e:90:4a:37:2e:d1:21:f0:85:d7:bd:f3:aa:61:1a:
cc:c1:61:a2:53:23:3b:cd:d2:11:46:14:19:42:c1:
93:88:0a:a6:48:10:ec:0e:36:b4:ac:af:20:45:c8:
ce:f6:73:b3:b0:72:fd:cf:c4:91:18:9b:84:23:b8:
12:3b:2a:61:90:06:20:43:2f:23:0e:32:fc:de:dd:
33:86:77:cd:15:c7:a5:d9:83:cf:e6:3d:a0:7e:12:
92:df:a2:3e:f4:3d:09:cd:5f:ff:ec:43:7f:17:9e:
97:e1:ab:0a:10:f0:ac:bc:1d:da:64:ad:fc:e5:af:
f6:f6:1a:3c:51:af:8f:55:21:39:20:cc:2f:d0:ff:
f1:b8:dc:a2:f6:73:2d:6e:67:c0:bc:36:57:98:59:
84:c4:e4:fb:58:cf:d5:62:5f:6b:67:0b:61:e3:5e:
7d:b7:a2:15:14:3f:45:05:59:32:cb:e7:51:c1:9b:
94:a7:0a:b7:72:56:30:82:de:33:61:5f:26:e0:df:
60:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9F:6F:27:1A:D7:91:23:51:90:C9:33:15:E9:5F:51:BC:A4:17:7A
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/uJ9vJxrXkSNRkMkzFelfUbykF3o.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
52:7a:fc:c2:36:c6:29:45:0c:86:c1:26:e0:b4:ed:0a:24:28:
9c:4a:ac:0e:11:8f:1e:96:d4:a9:a8:f7:95:da:f4:e2:3d:32:
71:82:57:39:1a:b4:8a:db:65:2b:b9:0b:bf:71:90:95:4d:02:
41:4c:4b:af:30:4b:93:9e:48:77:82:46:7a:0f:5d:42:4a:3a:
43:77:24:77:d8:d2:27:3d:6b:06:c8:89:49:0f:a2:1b:ce:b2:
3a:91:67:02:35:13:aa:c9:e4:ce:89:50:d1:b7:49:55:e7:6a:
28:75:db:75:01:b8:63:43:96:e9:41:a0:80:c4:4f:e8:05:4f:
b0:30:c2:68:17:9d:6c:8e:0d:ec:1f:80:6e:0b:a7:e6:4a:4c:
7e:79:73:ac:7e:f5:ea:47:38:b5:5a:02:26:e4:7f:82:0d:4f:
2a:34:80:6e:94:49:f2:8d:76:a2:d4:d8:02:a3:e3:82:01:7d:
ee:4a:23:f3:7e:06:fc:66:ad:e1:37:7a:01:7e:77:33:3b:23:
a8:47:7a:b5:60:8e:62:38:60:7e:dc:c7:8a:3f:63:36:c5:f6:
c3:aa:7a:19:d7:2d:6b:86:37:86:bd:5a:95:bc:02:4c:f7:0a:
37:97:d2:f3:33:f4:ff:05:f7:3a:b7:ca:c6:61:2a:20:e2:19:
27:81:b2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org