Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/B9zcARhEnukr6nneO4wYVyP_oVQ.roa
File: B9zcARhEnukr6nneO4wYVyP_oVQ.roa (raw, json)
Hash identifier: GDtFAhV9SeUFCSf5P4+818bysiZvo1MAmCVp3ePQRYs=
Subject key identifier: 07:DC:DC:01:18:44:9E:E9:2B:EA:79:DE:3B:8C:18:57:23:FF:A1:54
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 48E1
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/B9zcARhEnukr6nneO4wYVyP_oVQ.roa
Signing time: Mon 30 May 2022 00:30:09 +0000
ROA not before: Mon 30 May 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18657 (0x48e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 30 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=07DCDC0118449EE92BEA79DE3B8C185723FFA154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d4:df:e1:ad:29:5f:8a:1f:df:42:17:05:4a:
dc:08:3c:d8:b5:07:ae:37:58:b8:ca:91:01:1e:27:
81:17:39:84:1b:62:52:4d:42:21:c8:e2:d9:71:a2:
31:73:ec:56:32:f0:19:a3:75:1b:f5:c5:9a:57:d3:
77:92:d3:45:f3:d0:a0:af:59:6d:3e:7f:4c:e8:ad:
70:9c:2d:32:a2:8f:62:90:62:55:07:4a:0d:4a:ec:
91:ba:e1:16:bd:75:a9:54:24:af:00:38:80:9c:74:
01:01:41:51:8e:03:50:d3:ae:07:fe:18:d5:33:ce:
39:e1:75:d7:8d:fa:78:c4:5b:6b:0b:c6:fe:81:11:
d1:ce:13:56:8a:56:fe:43:c3:ed:fd:5d:33:c1:91:
e1:d9:b5:22:d0:af:0a:46:f1:9f:fd:3d:69:0d:8a:
37:1a:29:7e:0e:48:f5:39:71:51:7e:e7:3e:c2:ce:
26:8c:9a:8c:69:cd:d2:59:c3:fe:5e:bd:c6:30:2a:
f3:e8:34:39:25:3e:d1:80:5c:2c:5d:4c:ca:2e:ac:
f0:b0:7c:c7:71:9b:e8:51:03:20:f4:6e:69:13:03:
e4:f3:7d:8c:b0:78:65:04:55:0d:d9:63:a6:c1:4f:
0a:4c:a3:c3:55:73:1f:23:65:17:e1:84:aa:44:7b:
7d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DC:DC:01:18:44:9E:E9:2B:EA:79:DE:3B:8C:18:57:23:FF:A1:54
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/B9zcARhEnukr6nneO4wYVyP_oVQ.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:ee:83:15:1c:89:c4:d7:05:19:d6:4b:82:d7:e3:1b:7c:b5:
97:22:6f:4b:63:00:56:e4:5c:72:33:a4:fa:1a:81:ea:20:5a:
1f:c7:39:2b:54:0a:2f:c7:15:d2:30:34:9c:c7:9d:ba:07:bc:
1e:51:7b:12:ac:fa:92:25:5b:1c:2f:81:c8:be:f2:03:bc:91:
d1:24:93:46:9a:00:0c:e1:2c:fb:fd:e1:95:eb:55:9d:d8:61:
fc:6c:65:e7:0e:51:a2:48:af:c1:87:55:90:07:fc:b5:ca:2c:
e7:1e:9c:83:ff:01:8a:79:9c:cc:b0:43:e3:5f:74:cc:b4:20:
ae:06:6a:09:63:8e:96:86:99:da:70:8a:e8:1e:6f:90:90:5c:
fa:73:9b:5e:89:ab:3e:9f:b2:57:cd:27:ba:b1:00:b5:9c:3b:
be:60:f1:51:43:e2:cf:7a:eb:b6:94:23:5b:94:8f:b3:47:44:
ce:69:61:39:12:e4:2e:25:8e:69:7f:38:62:4d:c3:cf:0b:8c:
0d:ee:65:79:92:a5:b8:ee:3f:eb:6e:53:27:a6:d3:73:99:bf:
70:44:53:db:80:90:d6:0a:e3:98:5e:c2:46:f5:4e:da:b3:7e:
2b:67:e7:f9:3c:be:1f:2e:0b:36:4e:a5:7b:a6:86:9f:42:18:
d6:8f:c5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org