Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/BeESMfRRoqTQwn6auU7ZtAjgWT8.roa
File: BeESMfRRoqTQwn6auU7ZtAjgWT8.roa (raw, json)
Hash identifier: rt+A07Zqq3lXAfr7A2wcFP5ujCyI7KogirmIHwavDhw=
Subject key identifier: 05:E1:12:31:F4:51:A2:A4:D0:C2:7E:9A:B9:4E:D9:B4:08:E0:59:3F
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4871
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/BeESMfRRoqTQwn6auU7ZtAjgWT8.roa
Signing time: Sun 22 May 2022 00:30:11 +0000
ROA not before: Sun 22 May 2022 00:30:11 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18545 (0x4871)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 22 00:30:11 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=05E11231F451A2A4D0C27E9AB94ED9B408E0593F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3b:79:93:1d:97:31:16:24:ff:bc:c4:2c:d0:
87:6b:81:68:fe:3f:e5:fb:23:27:4d:85:4b:2f:0c:
9e:f0:ed:f6:f3:58:4e:ee:c6:cd:3c:8b:8b:6d:92:
d5:fc:1e:c8:24:06:8a:3e:11:03:58:55:45:16:fa:
59:88:ca:c3:f7:19:2b:20:15:15:96:36:25:04:7f:
78:f6:82:8f:b4:44:3f:bd:fc:ed:8d:60:f2:90:9b:
eb:4b:aa:7e:dd:18:c6:c0:f8:7a:1c:5c:b0:a3:5c:
ce:e2:ef:a1:8c:64:94:84:7e:82:83:35:77:2a:db:
d2:0b:b9:b3:06:0e:72:fa:8c:9d:f7:a6:2a:e4:77:
79:98:c2:cd:d5:c0:7c:ec:ae:11:d0:ce:bf:7d:68:
7d:4e:d1:1d:1f:b2:d9:39:57:72:51:15:cc:b3:e6:
7c:9b:8c:c7:c5:0c:01:e9:ee:87:81:8e:cc:60:b0:
ce:79:17:89:79:11:0b:d0:b6:14:c9:c6:61:6c:70:
62:6b:8b:c0:f3:8d:41:9c:8c:de:fc:a4:b3:67:a2:
00:8c:9b:79:97:7a:5f:24:c2:a0:d4:88:cc:38:c8:
a8:f6:1f:85:fe:33:28:85:55:ca:30:a4:48:bd:24:
ef:5b:43:47:9b:7c:cb:3c:ab:56:05:5d:45:ba:db:
9d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E1:12:31:F4:51:A2:A4:D0:C2:7E:9A:B9:4E:D9:B4:08:E0:59:3F
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/BeESMfRRoqTQwn6auU7ZtAjgWT8.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
25:34:40:fd:25:3a:58:6d:e8:a9:4a:41:d9:bb:7c:26:69:24:
e7:ef:f4:3a:58:87:45:17:fb:48:22:85:54:7b:f4:66:cc:25:
7a:18:58:93:e4:4a:c9:aa:ee:5e:d9:a6:c0:b2:e7:00:2f:68:
d3:3d:f4:eb:47:83:9f:a0:79:93:7d:cf:0c:8b:0b:62:59:71:
b8:af:8c:d1:f8:35:b8:dc:61:d6:48:6d:4a:7e:e1:5a:a6:f0:
f2:0a:b7:62:e7:df:0c:eb:93:04:34:b0:02:a3:74:94:0a:68:
35:85:44:22:fa:89:0d:61:fe:b4:07:d5:82:16:a0:e0:91:ef:
fb:90:d7:06:e5:6a:84:6b:47:77:8a:f8:86:7f:a9:8a:33:eb:
ac:81:24:78:d3:59:b9:82:36:e4:48:bd:41:dd:bc:d1:73:77:
5c:69:61:7e:e9:68:c0:b7:0b:21:90:22:11:39:38:49:a7:48:
bf:29:63:b4:16:59:8c:af:a1:2f:98:0a:05:95:68:64:6c:7d:
a7:7b:97:13:c2:f4:3c:9a:7b:50:6c:b5:e0:27:77:c8:01:61:
7c:1f:8b:3c:6c:62:9c:27:2c:d9:ee:84:07:12:22:28:28:be:
c9:73:8a:2d:17:30:1d:cf:8c:d8:16:8a:d8:90:39:2b:00:66:
d8:59:ab:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org