Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/3AGOleUBGHOhAoCpIHp-hI6IQgY.roa
File: 3AGOleUBGHOhAoCpIHp-hI6IQgY.roa (raw, json)
Hash identifier: kLCPFbR/uANxp5Ix5Z00cBo7qgWQbynVvb5nVLRVGCI=
Subject key identifier: DC:01:8E:95:E5:01:18:73:A1:02:80:A9:20:7A:7E:84:8E:88:42:06
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4438
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/3AGOleUBGHOhAoCpIHp-hI6IQgY.roa
Signing time: Sun 06 Mar 2022 00:30:09 +0000
ROA not before: Sun 06 Mar 2022 00:30:09 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17464 (0x4438)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 6 00:30:09 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=DC018E95E5011873A10280A9207A7E848E884206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:54:7f:19:21:80:0d:89:8b:bb:a7:f5:cb:e1:
70:ad:f5:c0:df:7d:ff:56:ac:2e:34:7d:72:78:d0:
0d:cc:af:31:77:5e:dd:80:65:62:b0:22:f5:e3:25:
c6:c4:3e:07:de:4b:02:7e:b6:a1:9a:1e:24:87:14:
e3:db:df:60:3b:3b:5e:99:a5:02:77:ff:f1:e7:9a:
64:0b:4c:12:e2:79:a9:83:36:08:5f:87:2e:d5:22:
e9:57:0b:8f:ab:36:d0:c4:48:9b:64:d0:52:e0:fa:
80:cd:44:63:4d:63:6c:8f:58:40:a8:f9:9a:a1:57:
67:f6:fc:05:c5:d4:43:86:88:e0:fc:31:f2:72:c1:
a7:e9:d8:8b:ae:b1:de:cb:b5:ad:49:6d:ec:bd:0a:
a6:94:26:76:58:53:56:bc:a5:14:e5:8f:47:93:d1:
a4:08:19:f4:68:93:fa:76:96:e4:52:51:a3:70:35:
60:8c:8f:aa:4a:0a:e0:83:75:11:f3:b7:68:24:8f:
b8:86:67:79:60:27:bb:59:38:97:af:c1:c7:22:21:
c9:d7:7e:57:a4:b7:02:d6:f9:6f:79:d9:68:a1:12:
8f:25:23:6e:d5:90:2a:a8:60:dc:4f:b1:64:fd:d6:
ea:64:bc:b0:47:51:ea:b9:60:cd:2d:2d:8d:95:6e:
7d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:01:8E:95:E5:01:18:73:A1:02:80:A9:20:7A:7E:84:8E:88:42:06
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/3AGOleUBGHOhAoCpIHp-hI6IQgY.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:f0:89:5b:b9:96:a1:07:cb:04:6a:0f:25:9c:67:f2:d7:fb:
70:ca:26:46:d8:d9:2f:06:a7:37:b3:f7:d2:25:59:4e:5e:41:
12:49:4a:9e:54:a4:86:82:ca:e1:1d:53:61:8c:1d:6c:5a:02:
e9:96:75:9a:c7:69:56:e5:23:1c:3c:d6:fa:92:b7:42:4b:00:
44:e8:99:73:38:a8:8d:2c:da:76:24:33:51:0f:02:5f:f1:84:
cf:e9:50:be:83:71:80:af:05:d8:22:f3:ed:a7:c4:c7:a8:1d:
54:bf:bc:0c:ef:18:41:ab:bb:67:fe:e5:14:c9:44:3e:b8:c9:
d0:c7:b2:6e:26:90:0f:26:b5:6a:e2:eb:05:0d:9e:5e:ec:3d:
38:f0:6b:83:e7:62:c4:d8:eb:c6:4b:f6:9a:3b:01:50:42:df:
dc:d3:89:d8:47:a1:2c:15:30:fb:3b:fe:53:50:ac:a1:82:76:
f6:22:4a:d5:7f:ce:8d:24:ac:3e:e8:75:bf:69:73:f2:a3:2e:
3f:23:5d:67:17:df:4e:00:03:05:1f:a3:3e:e4:17:48:fb:9a:
bc:18:ca:53:8a:98:ac:df:f2:65:2e:73:0a:ce:f2:fe:04:16:
f9:35:1e:ab:18:e8:b7:60:59:c4:ea:7b:10:f7:95:21:e9:b1:
55:3e:fd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org