Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/IVIE4RA7r5ME0EtW7x7QwTLTtpQ.roa
File: IVIE4RA7r5ME0EtW7x7QwTLTtpQ.roa (raw, json)
Hash identifier: +3XSKQ+GiMTDT6LzD9fzSn4Eh3w9/We6pQzYqW8Ut68=
Subject key identifier: 21:52:04:E1:10:3B:AF:93:04:D0:4B:56:EF:1E:D0:C1:32:D3:B6:94
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 45CE
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/IVIE4RA7r5ME0EtW7x7QwTLTtpQ.roa
Signing time: Mon 04 Apr 2022 00:30:08 +0000
ROA not before: Mon 04 Apr 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17870 (0x45ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 4 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=215204E1103BAF9304D04B56EF1ED0C132D3B694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:75:43:16:ac:cd:09:bf:0f:34:b7:7f:b0:74:
73:38:08:fe:64:a0:3f:ef:87:fe:59:23:e1:ed:de:
02:c7:79:5e:34:73:e5:2d:4d:8a:a3:01:95:0c:24:
a7:ee:28:92:7b:80:ee:83:7c:3b:40:62:00:36:86:
26:e0:88:36:39:84:1d:45:2e:4e:84:9f:64:e7:e3:
d1:ed:c3:82:1a:4d:a8:07:9e:28:9f:0a:bb:cd:7b:
06:d9:65:23:56:ed:17:20:e9:39:1f:ad:d4:ef:73:
e3:6a:4f:bd:c4:21:68:ab:34:1f:82:13:a2:db:82:
d0:dc:79:e4:c0:f1:3a:f9:9b:ac:d7:65:5a:6e:a4:
ae:96:fc:0e:3e:56:9e:64:8f:8e:29:2b:84:1e:28:
9e:7b:ce:b7:7b:1a:25:1f:c0:0a:f1:b4:6b:b0:5a:
cf:8a:79:6c:0e:b2:79:2c:15:f7:06:1e:b6:82:ef:
37:15:89:2c:f6:61:32:f5:96:5f:93:f2:c3:9e:96:
22:46:c0:63:68:ce:bd:6d:79:7f:a3:00:63:fe:21:
a6:e9:77:b6:e7:6e:f1:19:e4:5f:4c:2a:3a:cf:ba:
20:fb:da:8e:6c:f9:a7:25:cf:b4:68:bc:fa:e7:99:
7c:23:c9:2a:59:1e:a7:c9:c1:f5:f4:a7:ab:c3:cd:
3d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:52:04:E1:10:3B:AF:93:04:D0:4B:56:EF:1E:D0:C1:32:D3:B6:94
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/IVIE4RA7r5ME0EtW7x7QwTLTtpQ.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:a1:ed:4a:a1:c4:9b:5d:25:db:86:70:b8:ae:53:a9:49:51:
9e:6a:6c:52:02:2a:9b:c3:e7:85:5e:c7:09:f2:18:59:c1:29:
5a:73:7c:bf:ca:e9:af:37:c7:2d:55:47:8e:ff:2e:01:3c:24:
2f:af:48:3f:17:ca:fa:af:da:dc:db:4b:c8:1e:75:5d:50:9d:
ba:64:73:e3:d8:e4:22:12:37:96:f6:0d:72:1d:61:0b:23:0e:
d8:81:da:22:d2:99:55:da:e1:8e:9b:f5:3b:48:90:83:29:95:
70:77:dd:ed:c6:c1:c0:53:2b:00:85:37:4b:db:d7:11:2f:9e:
2b:80:8f:e7:dd:5a:f4:52:47:e2:51:ea:4f:78:6f:9d:74:3b:
f7:0b:8b:38:69:81:cb:9e:fd:a8:94:90:6b:64:2c:3f:00:1c:
a4:22:4a:6b:3e:d8:97:82:41:18:a2:27:05:61:f0:8d:ab:03:
f5:fe:94:a9:8a:ec:0d:a0:e7:8b:6e:82:9e:d3:18:e4:a0:f3:
38:e4:56:e7:a8:92:e0:7c:ff:57:24:7f:af:c8:99:da:67:c6:
54:ae:c1:ea:50:94:f2:86:5a:d8:2e:38:9b:6c:89:75:42:0c:
86:d8:41:0e:e2:80:9f:a2:de:e7:e7:ea:78:55:62:ce:c5:b5:
0f:99:97:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org