Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/4AyLtvUP_P31lNmVcNL3Xg6PHQE.roa
File: 4AyLtvUP_P31lNmVcNL3Xg6PHQE.roa (raw, json)
Hash identifier: bbABOksvGhpnAGsGaSrzNSPu0iRO5slYhMaZiQJoEV4=
Subject key identifier: E0:0C:8B:B6:F5:0F:FC:FD:F5:94:D9:95:70:D2:F7:5E:0E:8F:1D:01
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 47EF
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/4AyLtvUP_P31lNmVcNL3Xg6PHQE.roa
Signing time: Fri 13 May 2022 00:30:07 +0000
ROA not before: Fri 13 May 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18415 (0x47ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 13 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=E00C8BB6F50FFCFDF594D99570D2F75E0E8F1D01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:94:26:85:6e:4a:5b:04:b8:75:e0:4e:08:2d:
e5:8a:03:ff:69:cd:f7:69:70:ca:9f:9c:01:67:b7:
17:b3:65:0d:7c:2a:3a:08:ec:33:75:73:52:86:0b:
70:67:03:ed:4b:ec:3c:00:ad:9a:2b:95:26:86:96:
70:c2:43:d2:84:19:da:db:47:2b:4b:f8:66:34:f8:
8a:b0:62:70:4d:44:ac:93:b9:c7:97:47:6b:0f:fe:
eb:88:27:e3:28:9d:13:ff:09:da:c8:43:9d:21:8f:
07:c6:4b:50:54:b6:3b:70:5d:a0:61:87:dd:cd:c1:
95:43:85:d2:f5:b1:7c:96:3f:f6:a6:e3:25:4c:14:
e5:53:d3:51:dd:e2:06:19:11:a5:63:55:c0:86:1f:
85:c6:fc:93:7e:df:a4:a0:02:ce:fd:18:d9:12:a1:
e3:4c:f7:93:65:38:e4:4f:d1:30:6e:73:ce:be:3e:
03:a7:be:cb:ce:95:d3:11:11:60:68:79:28:15:2e:
85:10:96:14:5b:50:5a:ec:6e:af:95:96:9f:84:d4:
b4:79:ed:94:8e:9f:3e:2b:4e:db:b7:de:0d:d3:d4:
2d:74:00:90:8c:83:ff:f2:11:c2:81:73:1c:09:8e:
93:da:4f:47:ef:95:c4:19:29:ef:8a:bf:04:00:0b:
37:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0C:8B:B6:F5:0F:FC:FD:F5:94:D9:95:70:D2:F7:5E:0E:8F:1D:01
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/4AyLtvUP_P31lNmVcNL3Xg6PHQE.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
33:0d:22:0a:ad:50:a3:19:6d:cc:97:d5:52:9f:25:35:ff:e3:
dc:70:e1:6a:8b:17:67:e4:40:75:ee:c2:79:39:91:2f:6e:a9:
62:06:6d:42:f7:9c:16:13:06:36:e0:b0:2c:bf:af:3a:bf:2b:
f8:3a:ff:74:1c:0c:ec:1a:f2:f5:c4:18:85:5f:ab:ac:39:48:
9f:27:bf:27:f5:2e:43:dc:a7:a3:cc:a7:ae:dd:82:1b:87:83:
f2:97:5b:eb:b7:7c:ce:ac:a3:2b:09:a1:57:fa:74:c7:0e:e6:
da:22:1d:ef:68:cc:a8:f7:9b:72:a2:7d:91:46:9d:d0:a4:8a:
79:ee:08:a0:5d:29:43:45:c7:9d:a4:c2:da:07:96:e5:36:b3:
b0:bc:43:9e:a4:b7:1b:e2:1e:70:51:45:0b:09:c9:bd:d5:d2:
01:ea:ac:e9:1c:31:fa:96:4a:45:0a:a2:de:f4:ab:01:f7:1d:
8c:4d:68:a2:13:95:d2:2b:7a:66:a4:ea:e3:68:1e:5c:b8:f1:
1a:47:25:29:d0:20:91:45:06:c2:e0:76:05:42:07:56:de:0d:
a6:64:6f:9c:8f:51:a6:d2:18:7f:67:9a:ed:fa:06:c2:95:b7:
1a:e5:09:d7:b8:88:1b:ba:e4:8c:c4:96:86:a7:4e:d8:cc:a1:
7f:30:73:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org