Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/14nKoAC70CcRNgNI-Aa35XZL9Ic.roa
File: 14nKoAC70CcRNgNI-Aa35XZL9Ic.roa (raw, json)
Hash identifier: 5C/mF1BKDDFXJyubxsszBBSKVTVlE30xzn6M6OSBDAc=
Subject key identifier: D7:89:CA:A0:00:BB:D0:27:11:36:03:48:F8:06:B7:E5:76:4B:F4:87
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 440B
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/14nKoAC70CcRNgNI-Aa35XZL9Ic.roa
Signing time: Thu 03 Mar 2022 00:30:07 +0000
ROA not before: Thu 03 Mar 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17419 (0x440b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 3 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=D789CAA000BBD02711360348F806B7E5764BF487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e4:42:16:49:cb:10:95:88:23:b9:21:f7:fe:
a2:e4:b8:e9:bb:cb:88:00:80:42:30:e0:45:e6:20:
bb:69:15:42:44:5d:41:40:0e:8e:37:45:be:d3:b0:
b1:74:4c:d4:7e:51:0f:4d:f8:80:af:52:05:75:fe:
12:17:a9:2e:1c:fe:52:c5:db:f7:1e:58:c9:23:6f:
58:21:59:ef:f4:9a:b2:8c:af:59:1d:f4:e9:50:77:
df:7c:63:1e:4f:b1:a7:50:e7:c9:b9:f7:92:86:f6:
95:6f:b8:8d:bf:76:bf:a2:16:f7:af:98:3f:bc:27:
16:ed:b1:fc:bb:5b:12:d3:f1:99:45:7a:ac:bd:77:
56:aa:8f:ec:8d:b1:57:61:10:1d:d2:6f:5e:d3:11:
09:38:79:9b:d8:79:36:1a:7a:37:67:07:82:be:60:
9f:59:8d:f9:e1:87:00:ae:67:54:3c:b9:9c:95:2a:
2f:22:22:9f:71:a4:d5:41:aa:06:86:9b:f4:52:5b:
3a:90:2b:4a:35:da:bf:e9:f8:47:25:ff:2a:ff:fb:
f0:33:40:67:53:2a:07:9c:f6:13:6d:34:84:cf:2f:
c9:d1:63:a8:21:77:22:aa:7e:24:80:7b:e8:0c:ca:
49:eb:53:3c:1a:c3:1e:56:5a:80:ad:09:d5:0e:cd:
49:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:89:CA:A0:00:BB:D0:27:11:36:03:48:F8:06:B7:E5:76:4B:F4:87
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/14nKoAC70CcRNgNI-Aa35XZL9Ic.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:c9:f0:45:33:09:a3:a0:b1:51:26:95:7d:0d:0f:f4:5d:ad:
75:f1:a9:8c:96:6a:cd:3e:58:f3:fb:29:4c:0d:13:bb:dd:e6:
53:e4:c3:9c:2d:b9:75:0a:79:a8:ff:19:47:09:3e:d1:49:0f:
82:9e:33:15:c7:be:ef:7f:0f:b8:1d:23:58:7c:89:c4:63:3a:
5b:09:17:9f:08:66:6a:7d:51:0f:30:9e:99:23:63:ba:b8:ad:
f1:86:98:c0:50:6f:bd:76:4d:db:81:0d:3e:89:b8:9a:b3:ea:
56:ac:a3:83:d7:df:ef:04:4b:d3:ce:58:4e:15:81:4f:d3:9e:
ac:0b:96:88:30:4f:14:43:ef:27:5b:d1:57:25:8e:83:ac:5d:
e9:4e:b7:7e:29:d0:40:05:a0:4a:67:09:36:8f:45:da:8d:12:
10:85:6a:09:a8:d1:ed:ed:e7:34:99:09:6b:6a:bf:ee:1e:ac:
01:9b:5e:8e:bb:49:fc:cd:bf:0b:fd:c3:6a:2e:ca:46:59:7f:
4c:43:37:ed:7e:ac:14:71:7e:01:2e:3c:0d:41:67:eb:e4:64:
02:b7:9f:b6:e5:31:f6:02:8a:70:e2:e9:86:46:ae:ab:5d:3f:
a6:5f:49:2f:85:97:d2:bb:2d:a0:0f:c6:2d:d0:21:da:d8:78:
5b:62:2b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org