Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/NSW1e28iDx3YH8B7wKI71C4zjL4.roa
File: NSW1e28iDx3YH8B7wKI71C4zjL4.roa (raw, json)
Hash identifier: D+evYMwFKqTNaZ/WhdOez4zfGcL5DYKAHPNIcI2psAg=
Subject key identifier: 35:25:B5:7B:6F:22:0F:1D:D8:1F:C0:7B:C0:A2:3B:D4:2E:33:8C:BE
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 48DB
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/NSW1e28iDx3YH8B7wKI71C4zjL4.roa
Signing time: Mon 30 May 2022 00:30:06 +0000
ROA not before: Mon 30 May 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18651 (0x48db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 30 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=3525B57B6F220F1DD81FC07BC0A23BD42E338CBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5c:b0:e9:be:e5:31:fb:02:6b:4c:fd:5d:2c:
d9:60:de:c1:71:ff:af:bc:2d:9f:21:f4:bd:b9:0b:
bf:ef:7d:5f:1b:31:fc:b6:ec:d1:5e:93:04:e2:09:
6b:6c:66:d5:09:13:c0:b7:0d:95:7e:6b:6d:71:f0:
ab:e4:63:3a:65:e0:4e:6a:60:6c:b5:c3:3d:50:5c:
4f:91:9d:e7:af:c6:d8:d7:9a:41:71:b1:5e:c0:e9:
c3:78:b8:77:59:08:2d:ad:aa:df:ef:e0:95:94:f1:
6e:ea:af:df:33:3b:3a:79:ec:aa:79:1e:c7:a0:ea:
27:3b:ae:df:ba:b7:69:69:82:90:f7:37:36:27:b2:
5b:fe:9e:68:b8:c1:a5:0f:50:8e:a0:2a:86:c7:0c:
20:e2:a4:d4:4b:c2:76:a3:9f:bc:75:fb:8e:1a:a3:
60:bf:32:9e:88:2e:f1:0b:02:db:5a:40:3c:cc:83:
bc:1e:9c:85:c5:30:81:d5:10:c2:47:2c:ec:84:44:
4e:b2:8b:b2:11:82:09:a5:3c:c7:1d:8c:cb:07:83:
40:1e:a8:17:d0:9c:9a:1e:72:ae:3d:3d:0d:87:17:
c1:fe:22:aa:2a:ca:2d:8c:e0:04:a0:f0:2f:a2:c8:
2c:d2:58:05:88:5c:19:ae:38:9f:a6:28:a6:48:29:
ae:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:25:B5:7B:6F:22:0F:1D:D8:1F:C0:7B:C0:A2:3B:D4:2E:33:8C:BE
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/NSW1e28iDx3YH8B7wKI71C4zjL4.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
54:dc:80:9d:f5:28:f5:2a:32:50:b6:2a:76:60:c1:93:46:81:
17:f4:f8:56:89:6e:47:bc:d8:e4:ec:52:82:a0:0a:b6:0f:49:
d0:60:f3:77:bd:44:6d:69:f6:d5:4a:47:6d:01:41:c3:ba:38:
92:fa:b5:cf:51:57:b5:ee:12:00:b4:f1:17:b0:f1:98:23:ad:
2b:94:84:6a:60:a7:51:99:76:9a:61:b7:a5:ed:cd:4e:7a:0c:
58:a2:19:71:c5:e3:9f:d3:d9:60:a9:d1:68:30:0a:5e:af:ab:
fb:3e:71:d8:96:3d:81:57:0f:08:ee:40:04:49:e5:db:6a:bf:
5f:09:8d:e4:b6:28:e4:85:84:27:18:b9:1e:31:bf:20:4e:6d:
c5:8e:b5:ee:bf:57:05:16:22:72:ff:c9:d9:bc:d3:b1:47:0e:
17:e6:b3:ca:19:10:9a:23:1d:46:eb:47:a3:83:f5:17:f8:bc:
c5:a7:7a:61:d6:72:86:68:b2:65:32:71:f9:e5:2b:a5:35:01:
1c:46:ce:ad:df:41:a1:d2:02:a7:37:13:de:e4:77:22:c7:59:
fb:a0:79:20:c5:14:4a:77:50:31:ad:45:80:80:84:ed:a9:95:
13:c0:5e:69:f1:66:54:0f:e7:41:c8:f7:24:c8:ad:1e:d6:a3:
5d:f1:fe:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org