Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/SNg88NFSD5iqtHvvHe-y3Nb4T0Y.roa
File: SNg88NFSD5iqtHvvHe-y3Nb4T0Y.roa (raw, json)
Hash identifier: iWl/ri0EGSoR86hdPAaNtxW44SNMxjO5BXKN3fLghkU=
Subject key identifier: 48:D8:3C:F0:D1:52:0F:98:AA:B4:7B:EF:1D:EF:B2:DC:D6:F8:4F:46
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4932
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/SNg88NFSD5iqtHvvHe-y3Nb4T0Y.roa
Signing time: Fri 03 Jun 2022 00:30:10 +0000
ROA not before: Fri 03 Jun 2022 00:30:10 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18738 (0x4932)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 3 00:30:10 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=48D83CF0D1520F98AAB47BEF1DEFB2DCD6F84F46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:27:65:73:6f:a6:fa:65:71:c3:ca:59:e0:67:
9f:28:c4:43:59:b5:7f:53:71:f8:4a:3d:e9:5a:c4:
8e:80:a0:ef:7f:d2:89:98:36:8b:27:66:b1:72:2e:
6b:0c:b7:ea:0f:8c:16:31:65:cc:46:1d:33:02:03:
01:c5:3d:d2:bb:f6:fe:95:58:23:95:af:7b:ca:69:
f8:72:33:fe:13:20:b4:ad:00:45:a6:07:6f:1a:8b:
55:4d:0d:c3:b8:88:20:d9:5f:da:b9:ce:45:68:92:
3f:9c:ac:61:19:6d:4b:60:ea:56:a6:d6:06:4c:9f:
4e:5b:ff:44:21:6a:6f:f9:2a:86:93:e8:1d:ab:fe:
1f:b2:ad:c2:03:c6:67:63:9b:3b:9d:38:a4:19:91:
86:dc:5b:8f:87:6e:9a:a2:ed:d8:0b:2c:38:42:6e:
73:61:1b:69:9a:32:52:02:4b:b9:9a:2b:fd:78:90:
b3:55:35:0d:a6:5c:37:5e:e1:e0:a5:a0:6b:b3:4b:
61:1b:90:76:e7:7c:e1:2c:83:4d:2f:a0:dd:ea:b2:
58:bd:b7:d9:2c:a6:8f:7b:29:3a:d8:49:7d:10:d0:
db:99:0e:3a:e3:ed:ba:02:87:a5:2d:26:a9:99:1f:
60:8a:7d:87:18:a8:ff:c1:45:3b:70:60:e1:f8:69:
2e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D8:3C:F0:D1:52:0F:98:AA:B4:7B:EF:1D:EF:B2:DC:D6:F8:4F:46
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/SNg88NFSD5iqtHvvHe-y3Nb4T0Y.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
27:cb:2e:90:1d:f9:60:b1:b9:c2:3b:77:c1:20:d3:52:fb:bc:
5c:90:94:0f:26:03:47:93:be:12:53:b0:d4:82:78:5f:0b:d8:
13:80:6b:d1:38:2e:64:66:c3:0b:3c:47:59:f8:42:b1:9a:f3:
66:ec:6f:98:59:0e:e6:df:59:95:c5:d7:0a:1b:db:55:1b:bf:
99:58:6d:46:9b:1b:b7:11:91:a3:10:07:bf:13:65:b9:72:da:
f4:68:c9:9c:a8:d9:92:91:5e:d4:dc:56:d5:b2:81:d7:34:34:
5c:8e:bc:e0:43:74:27:b7:18:3a:c2:93:23:67:8c:17:74:45:
47:86:e4:2a:59:2f:1b:5d:a9:b0:6a:43:1d:a8:ba:a9:19:da:
5f:f3:bb:bd:c7:3c:7c:3b:e1:82:92:24:b0:0a:2f:e8:e0:3b:
ba:2d:bd:cd:97:6c:cf:8e:19:16:87:bb:75:21:44:7d:01:ec:
da:0e:25:fd:af:fb:7e:ce:fc:db:d8:7f:23:42:9c:1d:74:e9:
20:d4:0a:0c:09:83:26:1a:23:40:af:03:36:2c:5d:0a:34:e5:
95:9c:be:fb:4e:be:32:59:b2:a2:b6:8b:fb:2f:0a:1e:40:a3:
72:d2:01:bb:ce:67:42:60:20:11:2f:03:46:d2:84:2c:d1:fd:
8c:a1:fe:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org