Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/vyr8Iv_qoWHGZ_Uz_6SJUJvfcBA.roa
File: vyr8Iv_qoWHGZ_Uz_6SJUJvfcBA.roa (raw, json)
Hash identifier: pkGlLDPm6Fw2pklN6ci8d/fLHl0uLzxGO1RJzbD1pRc=
Subject key identifier: BF:2A:FC:22:FF:EA:A1:61:C6:67:F5:33:FF:A4:89:50:9B:DF:70:10
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 33E6
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/vyr8Iv_qoWHGZ_Uz_6SJUJvfcBA.roa
Signing time: Wed 14 Apr 2021 10:34:47 +0000
ROA not before: Wed 14 Apr 2021 10:34:47 +0000
ROA not after: Fri 01 Apr 2022 01:01:03 +0000
asID: 47065
IP address blocks: 147.28.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13286 (0x33e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 14 10:34:47 2021 GMT
Not After : Apr 1 01:01:03 2022 GMT
Subject: CN=BF2AFC22FFEAA161C667F533FFA489509BDF7010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ce:8b:5c:b0:2b:70:48:c3:bb:1d:cf:9d:95:
48:43:6e:44:c2:34:84:61:7d:4e:a8:4f:f0:1a:e7:
60:9b:b2:16:d9:1d:a2:b7:a4:90:f7:99:a8:33:bb:
45:d3:73:f5:97:4e:72:f5:1f:11:e1:af:38:10:ab:
c3:b6:72:37:39:3a:a4:97:09:e1:87:ae:a6:ba:71:
21:47:a4:c0:89:65:47:67:be:8c:d1:97:39:a6:74:
ab:2a:85:31:04:b5:b1:8d:9c:e8:6c:9f:b5:f9:f2:
7e:59:da:11:22:89:14:d2:bf:43:9e:c8:30:c9:cc:
da:d2:3b:f4:44:70:c6:2e:94:88:db:db:2d:7b:54:
64:ae:b8:4a:52:28:7a:0f:59:55:db:60:0b:ca:0d:
4a:e3:c0:98:01:b5:69:98:2f:cd:9e:df:4e:9c:1d:
2a:91:e8:3e:db:17:20:64:c9:f2:3b:05:79:24:53:
47:53:08:a6:fc:45:a1:26:d5:e6:59:d7:92:54:59:
35:d3:de:a6:43:d5:df:17:6a:d9:f9:d4:5c:1b:d8:
d0:04:90:4f:fe:3a:37:22:4d:8f:9d:60:de:14:9a:
d5:d2:4c:11:de:a1:b4:2b:1e:32:15:9f:2f:c8:50:
c7:f7:8d:c0:04:8c:ac:92:3b:d9:76:9a:7b:c2:15:
b5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2A:FC:22:FF:EA:A1:61:C6:67:F5:33:FF:A4:89:50:9B:DF:70:10
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/vyr8Iv_qoWHGZ_Uz_6SJUJvfcBA.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.8.0/24
Signature Algorithm: sha256WithRSAEncryption
44:eb:71:79:19:ae:2d:48:62:e3:ea:49:4e:9f:5d:a2:3e:2f:
a1:7e:66:d4:3f:06:90:34:99:e7:af:2d:11:2c:07:51:a2:b8:
11:87:9f:95:20:35:d6:48:68:de:0f:7b:5b:1c:5f:68:0f:ea:
f2:3e:60:e2:37:8c:c0:c2:df:32:44:9d:2e:ee:ee:b2:be:8e:
ac:0b:95:4c:27:66:e8:35:5b:f5:e7:60:27:60:09:d2:3c:a0:
12:16:bb:c0:56:45:23:1b:e0:f6:ef:4c:c9:51:98:76:8a:11:
db:6d:dd:da:67:74:cf:08:05:b8:5d:71:fb:93:94:0f:38:3c:
05:7e:a1:d2:a7:5d:68:41:1a:f0:be:e1:a9:00:ae:fb:c6:67:
f6:74:4b:ba:d9:06:d7:e6:92:e0:e8:4a:54:1d:2e:1e:9e:69:
7a:98:72:29:57:d1:30:ac:c4:d1:12:ac:41:7d:82:36:73:1b:
27:1c:57:c6:c6:80:c9:f8:45:90:d8:18:cf:80:d2:96:ec:7d:
cd:49:a0:1b:f2:ed:1c:97:92:a6:84:93:1a:2b:0f:f5:08:1a:
af:1a:54:d9:bc:10:69:71:b5:e8:f7:70:a4:c0:26:38:c1:a0:
a4:67:c4:66:b2:03:64:d1:d1:70:ab:a2:b3:96:03:24:87:7d:
58:47:7d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org