Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/QixjAMyJWm4XcSqQqdIb9ZvJ91U.roa
File: QixjAMyJWm4XcSqQqdIb9ZvJ91U.roa (raw, json)
Hash identifier: 1JQ7pYmkJuW7gnM7YGP8gi+BBvZODkjwSV4RqImCUmA=
Subject key identifier: 42:2C:63:00:CC:89:5A:6E:17:71:2A:90:A9:D2:1B:F5:9B:C9:F7:55
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 47F0
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/QixjAMyJWm4XcSqQqdIb9ZvJ91U.roa
Signing time: Fri 13 May 2022 00:30:07 +0000
ROA not before: Fri 13 May 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18416 (0x47f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 13 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=422C6300CC895A6E17712A90A9D21BF59BC9F755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:31:b7:ee:9f:22:b2:26:00:5b:13:a0:f3:77:
ab:00:35:8b:4d:8c:38:2d:ae:50:fc:44:3e:0a:fd:
37:5b:b4:58:2a:2e:87:95:43:5c:75:bb:d7:72:dd:
06:81:e3:46:5a:2b:7b:99:b7:b7:87:e9:ab:86:84:
0f:7f:1e:19:00:ae:fe:a8:ab:80:14:8b:68:43:47:
88:99:ea:c7:21:f9:80:b4:30:2f:d2:c0:46:b0:b3:
b3:0c:08:9e:4b:3f:af:c9:e2:86:3d:01:60:f9:8e:
4c:fa:33:b4:6f:d5:72:7f:49:d8:ff:38:8a:7d:5f:
8b:e4:b3:ff:8d:aa:8b:39:e9:bc:3d:24:4c:39:4f:
06:c4:01:84:46:c5:77:1d:7c:44:a4:80:1e:e3:fb:
43:0d:69:0b:e3:56:09:d1:f1:48:ea:18:87:89:cc:
30:96:3f:d7:36:fb:b3:2c:1e:ad:cc:17:9c:33:ec:
ca:c2:78:0c:51:a8:da:cd:ed:cf:bf:0d:20:11:05:
8b:d2:4c:42:88:84:1a:ad:fe:a2:17:21:e7:0b:c8:
c2:17:1c:33:04:88:ab:77:aa:4d:cf:fa:85:72:71:
97:c2:90:19:2c:af:bc:9d:1d:7b:d2:56:09:53:53:
a0:0f:89:e0:b2:ad:f3:ed:98:5f:09:db:be:ce:f2:
c3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2C:63:00:CC:89:5A:6E:17:71:2A:90:A9:D2:1B:F5:9B:C9:F7:55
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/QixjAMyJWm4XcSqQqdIb9ZvJ91U.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
61:da:4e:25:19:e3:23:91:aa:0b:ce:b8:c2:93:6c:b6:2f:11:
7c:1a:95:b7:53:a2:d6:3c:24:1c:c5:87:64:c8:28:fc:65:af:
2a:96:a6:4a:38:14:7b:b8:20:96:1f:87:d6:8c:19:f7:01:48:
4d:04:52:fb:5c:f5:e9:09:5d:c9:3c:66:ac:3d:c6:19:ee:d0:
d3:de:c7:6a:c6:bc:eb:da:b9:e2:36:fd:90:c8:cd:99:0d:70:
e2:03:b8:75:b7:90:5f:56:29:7d:ba:a9:4c:a5:fe:51:14:29:
94:40:2f:06:56:f7:bd:5f:fd:d8:e9:b5:08:8f:d6:99:a1:64:
c5:22:c7:5b:9c:a4:6c:f2:71:31:51:ca:17:d8:f8:fd:10:a4:
de:a2:57:66:69:ba:49:48:cd:db:83:77:65:07:d2:28:56:35:
6b:29:0e:7a:92:6a:5d:ad:c9:ef:0a:e7:24:1f:c7:62:af:07:
52:d1:06:3e:5e:c4:c6:c6:6b:42:ab:fa:66:66:20:76:8e:38:
58:34:cc:88:79:25:60:be:75:c8:d0:85:dd:ad:fa:7a:a3:0c:
48:fc:83:a7:d5:66:70:da:f7:93:8c:45:1c:4c:69:a9:4f:aa:
ae:26:bb:80:e5:80:fc:54:24:79:9a:75:7e:bd:1b:42:7f:11:
67:cd:93:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org