Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/AV-Jo5aEM5cOY0aJx6oMUG7jCDg.roa
File: AV-Jo5aEM5cOY0aJx6oMUG7jCDg.roa (raw, json)
Hash identifier: 8zk9i0s865SURo3R++3MiHKhr0x6KYk2AY9d3Y5qWRw=
Subject key identifier: 01:5F:89:A3:96:84:33:97:0E:63:46:89:C7:AA:0C:50:6E:E3:08:38
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 436C
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/AV-Jo5aEM5cOY0aJx6oMUG7jCDg.roa
Signing time: Sat 19 Feb 2022 00:30:07 +0000
ROA not before: Sat 19 Feb 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17260 (0x436c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 19 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=015F89A3968433970E634689C7AA0C506EE30838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:70:2f:a8:c4:a8:37:b4:14:1a:c7:4e:2e:b9:
5a:ee:0b:02:54:ca:f0:b4:c4:1e:bb:35:5e:c7:6e:
31:f0:c1:66:59:84:97:f3:e5:f1:28:44:fb:66:55:
0d:fe:da:7b:62:df:09:b7:70:ce:11:6d:06:e3:45:
df:f4:c6:4d:64:ff:cd:c1:fc:8f:96:3f:b7:c7:3c:
41:bf:e4:a0:e3:86:c4:bd:1c:a0:61:50:60:29:06:
a7:6c:1a:52:62:ca:d9:50:7b:97:8a:39:a0:04:e4:
53:89:e4:77:ea:29:05:33:84:a3:6b:5a:a5:c8:a9:
87:43:0c:7d:c6:fd:1b:da:59:72:af:44:7e:c5:0e:
94:6f:c5:39:dc:80:eb:85:9d:6a:b7:c8:5f:99:15:
95:47:06:7e:9e:92:4a:55:26:b8:16:25:7b:c3:0f:
eb:56:af:23:9f:e5:41:c6:29:8d:ef:70:ca:32:2a:
cd:ee:2f:0f:99:85:90:95:e0:b6:32:b7:9a:ee:a2:
8c:8c:50:e2:eb:c3:ca:9e:c6:95:69:f9:6a:00:2f:
17:d9:fe:2b:56:3f:43:25:27:3d:53:56:c4:df:c4:
ce:55:73:4b:86:40:8b:5a:bc:bc:9f:1e:05:f4:a3:
3d:51:ac:d6:c7:8d:2c:7d:89:18:8f:bf:00:63:69:
94:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5F:89:A3:96:84:33:97:0E:63:46:89:C7:AA:0C:50:6E:E3:08:38
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/AV-Jo5aEM5cOY0aJx6oMUG7jCDg.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
09:e0:c6:72:72:2d:6b:26:ae:0b:b8:23:ad:55:b4:42:7f:8b:
4b:0b:d5:9f:b0:b0:60:f7:a5:e0:e3:f0:1c:72:97:fc:e7:30:
b3:f6:04:d3:41:3a:59:71:3e:4c:eb:b1:08:da:30:35:30:85:
46:9d:e3:3f:f9:c5:22:86:32:91:92:23:85:47:0e:d6:e3:bb:
9a:b2:a2:04:d8:e0:6b:58:26:3f:24:cb:0f:7e:2f:48:6b:68:
22:f0:40:01:cb:c3:a8:32:0c:a0:4d:d4:d6:64:27:23:62:f2:
02:7c:eb:cb:21:06:71:6a:ae:98:de:98:1f:fe:cc:44:2d:d8:
e2:1a:74:5f:a9:74:09:c8:5b:56:1e:8c:44:be:7d:51:03:ee:
ec:eb:79:58:2d:6d:04:80:94:84:ce:17:99:76:f8:3f:a4:1a:
26:d0:d6:62:a3:06:61:36:95:2a:99:95:39:f7:4c:38:50:38:
63:10:31:03:61:f2:41:51:0b:33:cc:f4:50:80:77:1f:7d:27:
b0:2f:9f:58:ac:a7:8d:bb:c9:1c:12:a8:da:67:4d:13:81:f4:
0e:5f:5a:94:f5:c4:a5:45:98:da:cd:57:2b:60:8d:d0:ea:ff:
eb:b4:ce:dd:fc:9c:22:f3:e7:b4:e9:17:08:e8:d3:ff:b9:be:
ad:6b:5a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org