Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/9dwwWvdTtvADZUi4GShzE13ZgmM.roa
File: 9dwwWvdTtvADZUi4GShzE13ZgmM.roa (raw, json)
Hash identifier: SjCD/hKUlkBck3Qq2MHOjZcNRVOwAlR3ZfvGY1DXyNQ=
Subject key identifier: F5:DC:30:5A:F7:53:B6:F0:03:65:48:B8:19:28:73:13:5D:D9:82:63
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 44FC
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/9dwwWvdTtvADZUi4GShzE13ZgmM.roa
Signing time: Sun 20 Mar 2022 00:30:20 +0000
ROA not before: Sun 20 Mar 2022 00:30:20 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17660 (0x44fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 20 00:30:20 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=F5DC305AF753B6F0036548B8192873135DD98263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ac:36:5a:89:d3:17:dd:a9:e8:8e:a8:1b:53:
9f:96:a0:56:d2:da:54:18:fb:9e:22:3d:1c:6c:0f:
59:5b:6e:48:b1:06:2c:98:74:2d:1c:54:82:1c:ee:
a6:33:29:c4:0d:7a:a8:e5:79:4d:10:c2:43:f0:cb:
50:49:a1:50:05:f7:9a:d0:ae:4a:25:64:95:46:22:
4a:40:c0:65:02:9a:83:8f:b3:65:5f:84:e8:ff:bf:
57:58:00:24:0d:95:93:76:71:a0:6f:fc:05:0c:70:
a1:5f:d6:82:4d:00:4a:9a:c2:74:5f:b7:14:6d:4c:
82:42:d3:aa:fa:3a:c3:17:7f:59:66:8e:6f:a8:d7:
66:37:75:70:e0:5f:68:6f:89:23:d5:31:45:ae:70:
b9:b6:4d:98:e8:c4:f9:89:84:e8:08:18:b4:b6:ee:
1f:d1:23:b6:6c:e4:0c:7b:8c:99:b6:26:b8:68:17:
c0:93:c8:60:54:bc:7f:3b:0a:57:54:9a:48:64:b2:
41:40:6b:f4:c6:06:a6:a4:12:ba:1e:a9:01:0d:73:
21:90:73:94:76:54:45:d4:9d:38:ac:81:39:48:49:
3f:bf:ec:ad:51:60:38:2e:cd:87:b9:1f:39:3b:1d:
a8:e2:a2:be:41:86:45:30:8f:5b:fd:a1:b9:3b:11:
38:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DC:30:5A:F7:53:B6:F0:03:65:48:B8:19:28:73:13:5D:D9:82:63
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/9dwwWvdTtvADZUi4GShzE13ZgmM.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:19:fe:29:02:82:15:3d:7d:41:89:10:7a:ba:c2:11:fe:aa:
aa:ee:7b:fe:19:86:0e:32:c8:bc:5c:41:ab:67:b5:d3:38:15:
e2:4e:cf:bd:69:f4:a0:0c:1c:83:25:fd:4c:ac:f0:91:fc:fb:
fa:b5:71:6f:26:e7:d4:80:ac:a8:ad:d3:99:39:99:56:94:88:
89:c0:f1:25:50:7b:29:9f:56:80:63:59:94:08:ac:fe:5a:b3:
45:18:8c:22:8a:a8:aa:4d:81:88:34:7f:ad:ae:df:e0:f1:3e:
ef:a7:9c:4d:06:6a:9f:ef:7f:f9:9b:b9:90:a7:0b:7f:5f:7c:
29:76:9b:ec:da:82:f2:67:4e:44:2e:2b:61:53:e8:7c:af:0d:
0a:14:75:d8:3d:11:3e:21:10:cf:14:19:ee:ea:c0:34:ef:b8:
b1:f8:a6:fa:0d:7b:dc:cc:d4:ca:75:93:6e:d1:16:1c:5a:8c:
1e:e7:31:67:6b:f2:68:2c:2d:83:b1:26:0d:46:bf:31:7b:54:
83:6e:4f:4c:64:03:1f:85:f1:94:6b:16:8f:86:27:ce:34:38:
37:0b:fe:89:d8:1a:9e:04:68:7d:54:fb:25:63:38:33:7d:bb:
73:0b:af:07:48:a0:14:c9:f2:64:7c:37:ba:1a:2d:8f:da:aa:
e8:b0:bb:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org