Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/6mhFYj-yqMvpzNNiRh_qpv2Cl1M.roa
File: 6mhFYj-yqMvpzNNiRh_qpv2Cl1M.roa (raw, json)
Hash identifier: Rblfb0wG3ZN2G+qe4N5O5fP0TyOed4SIzxBbDgdToLY=
Subject key identifier: EA:68:45:62:3F:B2:A8:CB:E9:CC:D3:62:46:1F:EA:A6:FD:82:97:53
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 487C
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/6mhFYj-yqMvpzNNiRh_qpv2Cl1M.roa
Signing time: Mon 23 May 2022 00:30:07 +0000
ROA not before: Mon 23 May 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18556 (0x487c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 23 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=EA6845623FB2A8CBE9CCD362461FEAA6FD829753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d1:5d:f4:83:f3:23:0b:35:a1:96:b3:e3:9f:
fd:ff:83:13:4b:6a:31:66:3d:70:2b:1d:00:df:1b:
5c:29:ef:41:d6:59:62:a4:6e:e4:2b:4b:19:b0:bc:
aa:39:8c:9f:dc:74:cf:4b:3e:f8:47:93:8b:6a:cd:
73:b6:7c:24:31:61:76:21:82:18:dd:13:fd:2e:41:
40:59:00:bf:87:a9:ef:f9:77:14:da:00:33:6b:bd:
d3:c0:d9:33:2c:40:20:44:c5:6e:79:b3:20:4a:47:
ff:5b:0d:54:7f:20:0c:dd:44:b5:b2:3e:de:ae:46:
5b:39:fd:68:bf:1d:6e:b8:10:8f:a7:e7:31:4d:8e:
a6:c0:f2:cf:f8:18:9d:17:52:b0:38:dc:69:8c:57:
07:20:d6:92:a6:e8:a2:aa:23:5b:20:06:f6:fc:e2:
4e:45:8e:d2:ad:de:d7:d5:54:e2:5d:5c:88:df:31:
56:26:b5:f6:37:cb:24:e9:17:e6:4d:15:ba:8a:f1:
ca:94:9a:ed:01:b8:05:f9:f0:e1:88:ca:e3:d9:15:
60:d4:c3:19:36:bc:c3:9d:32:cf:be:ac:2f:f8:9d:
24:b3:48:53:91:07:8c:ca:0e:f8:f3:3c:1d:0f:b8:
57:c0:f9:f6:c3:4a:12:81:34:90:c4:0f:82:79:b0:
db:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:68:45:62:3F:B2:A8:CB:E9:CC:D3:62:46:1F:EA:A6:FD:82:97:53
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/6mhFYj-yqMvpzNNiRh_qpv2Cl1M.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:bc:90:a0:c7:42:ae:ac:6c:95:2d:ed:01:0b:de:39:f1:45:
9a:5c:f4:c1:11:21:d8:ad:81:4a:af:fd:8d:50:34:95:d2:c7:
21:07:5e:42:ac:1c:b4:92:7d:b5:ff:b0:80:7d:62:48:83:a5:
c8:ef:3b:3d:00:2a:b6:65:dc:7d:d5:cf:e1:19:66:eb:1e:7f:
96:ab:7f:22:5c:31:bb:63:f5:d2:96:78:13:e0:bc:d9:05:2c:
51:a4:c4:51:3c:d4:ad:ce:85:4d:1c:a2:72:f4:10:bb:ca:21:
0f:1f:ba:fe:4b:35:7d:e3:ab:b2:80:8d:62:52:61:3c:ff:9f:
51:f9:c3:85:e7:40:f8:04:f7:a6:ce:32:63:34:5f:7d:47:00:
50:4b:8a:c9:f1:6d:1e:1b:33:c1:f5:c3:80:09:14:5c:23:9c:
43:7e:e4:47:9c:67:39:51:bf:dc:f2:21:10:d1:63:3f:00:1d:
0c:81:8d:6c:39:79:06:96:06:28:dd:fe:e5:90:ec:62:e2:2e:
08:c5:10:f0:50:88:8e:28:4e:40:10:4b:db:61:1b:5f:56:a3:
b1:c7:6a:1f:94:c4:ba:ca:a5:60:2b:46:6f:e6:f8:6e:1b:de:
88:1c:e2:17:c5:e9:f4:7a:8f:a0:1d:51:fc:d9:61:b6:f0:2e:
22:e4:bd:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org