Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/NdDcvTBHeDzJD_ACbaYP_-mT3bc.roa
File: NdDcvTBHeDzJD_ACbaYP_-mT3bc.roa (raw, json)
Hash identifier: 882A+lVb6swpp6rnsnzCW+jqYkxg8LPt5FLKEkg5s6o=
Subject key identifier: 35:D0:DC:BD:30:47:78:3C:C9:0F:F0:02:6D:A6:0F:FF:E9:93:DD:B7
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 45A3
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/NdDcvTBHeDzJD_ACbaYP_-mT3bc.roa
Signing time: Fri 01 Apr 2022 00:30:06 +0000
ROA not before: Fri 01 Apr 2022 00:30:06 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17827 (0x45a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 1 00:30:06 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=35D0DCBD3047783CC90FF0026DA60FFFE993DDB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:69:03:f6:c6:0a:ad:2e:f5:4b:35:21:72:e0:
49:8c:0a:2e:56:3e:c1:c4:d2:63:01:70:2c:bc:53:
20:34:32:9b:1a:2b:ed:e7:fc:96:43:49:bb:f9:8e:
39:5c:18:10:d3:bc:03:b5:34:90:42:6c:a6:fa:3a:
2c:01:af:79:1d:4d:d5:14:29:51:76:32:be:6e:b0:
a2:1e:e1:23:e5:25:b3:a8:d0:28:62:86:eb:43:70:
be:3f:c4:3a:16:70:3d:d4:c1:8b:39:39:19:e0:e0:
73:c3:90:f5:8c:32:b5:f5:44:a5:5a:16:da:70:ad:
4b:3e:67:0e:ed:2e:5b:52:88:b0:8d:4a:04:99:30:
03:75:29:2d:41:2d:08:c6:fb:cd:38:3b:2f:01:be:
15:ce:0d:14:1c:b6:40:9f:3f:38:d8:19:e5:6d:30:
d3:01:14:c9:c4:eb:b3:a1:b6:e9:b2:d8:eb:61:1c:
b2:11:29:49:32:d9:2f:c8:7a:e4:57:61:61:58:6c:
91:98:d5:ac:1e:b2:14:92:9b:9d:15:8d:42:2a:3a:
ab:ca:10:4a:8e:3a:f2:a6:a2:4d:a2:ff:01:cf:ae:
74:6d:f7:b2:69:23:75:89:39:97:2d:c2:34:e9:03:
fe:11:e8:ee:8f:8b:3e:09:0d:d6:7d:5e:0f:8e:e6:
70:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D0:DC:BD:30:47:78:3C:C9:0F:F0:02:6D:A6:0F:FF:E9:93:DD:B7
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/NdDcvTBHeDzJD_ACbaYP_-mT3bc.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:48:c1:e6:c8:83:71:bc:a4:53:37:28:2b:35:4e:33:e5:f8:
ae:03:8f:6e:d4:a8:03:a7:f0:ff:00:72:d8:24:c6:9c:cd:62:
16:20:6d:e2:26:47:a3:45:9c:d8:86:1b:1a:fa:bf:92:da:6d:
c2:02:67:b3:42:66:94:74:86:40:8a:fa:3f:d2:b0:47:94:79:
ba:d0:c9:eb:8d:a3:db:9b:79:53:96:d6:72:ab:10:2f:ab:b0:
35:bf:ee:39:8f:d5:ed:00:d6:14:56:d6:e0:92:a2:89:8f:dc:
ad:db:d4:61:f6:f5:96:e5:5f:ca:9c:69:64:59:13:95:de:52:
9e:9c:3f:3d:c1:c2:19:24:31:08:32:d4:c4:75:0d:46:0d:3a:
c8:92:79:ce:1d:ba:f9:2c:bc:66:4c:d6:e6:87:e1:ed:aa:e3:
df:39:9f:91:c1:58:37:3d:14:e3:81:ac:45:f8:67:98:ef:a0:
d4:b5:c2:78:52:87:77:3b:9d:ee:f6:c2:c1:c2:d3:f8:b1:af:
08:c2:d4:43:f8:56:e1:b7:d3:70:49:f3:63:e8:7c:22:c8:96:
99:bd:45:30:a9:bc:71:44:bb:eb:87:20:3e:25:85:93:7b:7f:
26:4b:7f:b5:f7:37:6e:2e:dd:34:42:63:ae:10:6c:0f:f9:ac:
88:e8:93:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org