Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/RR5Ri0KuCaU8wONcbNv1eKzCyNU.roa
File: RR5Ri0KuCaU8wONcbNv1eKzCyNU.roa (raw, json)
Hash identifier: ExRlrs26ul3LBJppqtGgMAineFIUe+1v+awtC//oDis=
Subject key identifier: 45:1E:51:8B:42:AE:09:A5:3C:C0:E3:5C:6C:DB:F5:78:AC:C2:C8:D5
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 42C4
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/RR5Ri0KuCaU8wONcbNv1eKzCyNU.roa
Signing time: Mon 07 Feb 2022 00:30:08 +0000
ROA not before: Mon 07 Feb 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17092 (0x42c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 7 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=451E518B42AE09A53CC0E35C6CDBF578ACC2C8D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:56:93:6b:c1:29:ac:df:9f:b3:7a:df:8b:d7:
d4:c5:a3:8d:cb:54:5c:68:f5:5f:49:42:4a:bd:b5:
8a:88:45:dd:89:b5:63:cb:95:df:68:b4:5d:3b:50:
51:68:eb:f3:73:55:18:87:99:af:2e:ca:b5:2f:f0:
19:3d:d2:29:ef:57:e5:6f:09:c6:e6:09:f0:87:79:
31:10:00:de:7e:bc:e8:71:aa:56:56:42:00:4d:1f:
a2:f1:35:f4:70:7e:ab:91:38:12:3f:1a:52:13:4e:
64:09:45:69:85:ee:c3:9c:08:a2:ec:6f:b8:43:98:
4d:27:cf:48:22:81:50:5d:8f:0c:d9:0e:3b:b3:46:
4f:c1:83:2e:90:2e:6d:96:e4:9a:40:3f:bf:ab:80:
e2:bb:d2:01:10:55:7e:21:a5:80:3a:74:5d:e1:3f:
d9:11:25:23:7f:30:46:1e:5d:5f:2f:03:a5:7d:33:
ca:8a:a5:6a:c7:69:11:98:c5:be:9a:71:eb:cf:63:
24:f9:d0:57:85:75:cd:f7:29:c8:7c:78:fb:9f:ab:
47:23:7d:27:d5:70:99:4d:b9:2b:a8:a2:a5:8f:61:
9b:0d:cb:45:dd:b0:07:ec:20:9e:a0:96:6e:68:c9:
07:8c:f7:74:6a:05:37:41:75:96:4c:24:e4:b6:93:
7f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1E:51:8B:42:AE:09:A5:3C:C0:E3:5C:6C:DB:F5:78:AC:C2:C8:D5
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/RR5Ri0KuCaU8wONcbNv1eKzCyNU.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
94:00:1a:33:b7:9d:aa:ae:12:a5:08:c9:9c:00:6e:6e:fc:ad:
30:13:f7:c7:27:43:44:4b:be:0c:d7:02:1e:05:74:d3:67:97:
a6:54:6f:11:96:e1:4c:27:33:6b:cf:99:14:0d:e3:fe:8d:85:
98:40:14:20:4e:92:f9:90:0b:5a:0f:b3:31:2d:25:0f:ad:ee:
e0:af:94:b6:c9:4e:37:cd:b9:1c:7a:23:14:f9:74:2a:eb:26:
68:7c:ba:f2:01:0e:ab:a1:81:df:7f:62:68:9f:ab:58:7f:b6:
82:70:cb:d0:97:b8:f6:cb:02:9d:10:9a:34:0d:69:77:87:43:
c0:7c:0b:74:ce:0e:9f:0b:71:2e:26:5d:99:52:ee:45:2b:89:
fe:f3:7b:5e:71:df:08:2a:ae:08:5a:c0:f0:bc:2a:b1:a3:02:
8f:6f:44:0e:04:90:34:54:af:1b:7a:56:ed:e2:6b:9d:4a:05:
a9:19:ae:2b:10:1a:4e:a5:f1:cb:cb:65:2a:0e:5d:5f:01:62:
60:f3:31:4e:b5:5f:89:bb:3f:7f:b7:6f:de:5a:e8:4f:b8:90:
63:90:c2:a9:66:87:17:48:59:5a:87:16:5c:84:39:f4:b3:0a:
cd:99:f8:8e:49:3a:48:f0:e7:11:4a:f1:e3:09:b3:d3:b1:84:
85:39:5b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org