Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/6iHWocG4kAEEox5W_4eRRLCSEAM.roa
File: 6iHWocG4kAEEox5W_4eRRLCSEAM.roa (raw, json)
Hash identifier: ZTLK51dYjmMtzm8+qEor4AEU0clCBaja41RzvTe74/Q=
Subject key identifier: EA:21:D6:A1:C1:B8:90:01:04:A3:1E:56:FF:87:91:44:B0:92:10:03
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 46CB
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/6iHWocG4kAEEox5W_4eRRLCSEAM.roa
Signing time: Fri 22 Apr 2022 00:30:07 +0000
ROA not before: Fri 22 Apr 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18123 (0x46cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 22 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=EA21D6A1C1B8900104A31E56FF879144B0921003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ee:c4:4b:cc:74:d7:95:a8:b0:05:17:cf:4c:
e8:27:dc:cc:c8:96:65:5f:63:a7:89:18:69:67:f1:
db:30:cb:12:d2:0c:36:97:72:0c:e9:39:db:05:ef:
7c:d6:a0:13:2d:21:2a:33:f1:42:b9:c4:cd:b5:39:
cc:5d:9f:33:a0:40:d0:10:50:2e:2f:03:3e:f3:1a:
da:8f:94:31:2c:a7:fc:3c:91:73:9b:48:88:e0:3b:
e4:e0:5c:a7:1f:f7:7d:36:fb:08:d9:ec:33:b1:07:
a8:c9:35:e7:c2:ef:e5:7f:59:7a:0d:3d:f6:37:57:
32:dc:e3:40:9d:00:7d:37:3f:f6:7a:09:02:62:fd:
4b:a5:b0:42:17:40:36:c3:90:f6:99:c0:f6:62:d8:
8f:44:e9:04:6e:6f:1a:c2:88:59:53:bd:21:93:d2:
39:d0:e7:e6:54:8b:d7:fa:15:d5:5a:cf:ef:f1:05:
5a:74:ea:e2:a6:63:7f:f9:3f:99:09:a8:c4:ab:d0:
49:09:36:d4:24:86:02:b8:fd:55:02:03:f9:21:4b:
4c:f7:99:69:2c:77:99:f2:12:58:38:eb:6c:ce:51:
2b:bd:34:0f:1d:34:bd:06:1c:8e:c2:ee:90:97:a9:
f4:5f:03:65:b4:bd:9d:9e:04:81:69:c8:12:a6:97:
f6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:21:D6:A1:C1:B8:90:01:04:A3:1E:56:FF:87:91:44:B0:92:10:03
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/6iHWocG4kAEEox5W_4eRRLCSEAM.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
41:cd:85:d4:6b:d0:ea:10:b9:cf:64:01:9b:01:4c:23:7f:b9:
0a:16:42:3c:a0:78:58:12:91:17:e6:08:a1:e4:e2:df:98:5e:
15:43:6f:51:9c:99:26:e7:ec:d3:3d:bc:fa:71:c4:b7:e6:4a:
1f:d8:f3:85:12:2a:7a:df:04:ba:60:02:19:58:ae:46:c9:4e:
f6:e7:55:41:2f:50:ee:47:54:18:50:36:11:f0:24:3f:96:28:
3b:8d:90:14:9a:26:6c:97:62:d9:9d:d5:2a:1b:88:18:be:cc:
d2:52:c5:d4:14:0c:3a:4a:09:9a:d7:94:1b:8e:84:b9:97:4f:
2b:14:09:b3:81:cf:f3:cf:27:d5:79:f2:ee:0a:79:e3:2a:a2:
c4:42:25:06:71:63:be:d7:d5:1a:38:be:34:bd:11:b0:ab:4c:
5b:7c:18:56:86:42:13:32:da:ed:a3:ef:d6:26:d8:ef:d3:cf:
e9:c6:7f:10:04:04:b1:8e:9b:ca:9e:f5:1f:92:1a:24:ea:7c:
58:b4:6b:e3:c4:2f:ce:3b:0c:62:83:bd:71:3d:8d:88:15:5c:
b9:08:24:7d:ba:f0:ed:a5:a3:20:b5:ab:7a:f8:3f:b7:b8:12:
25:ac:af:2c:3e:5c:9c:9c:7d:cb:71:7d:3e:a4:a4:8f:0c:f7:
84:ff:40:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org