Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/Ss99xj4cs86jxZZ89SgnU_LKKus.roa
File: Ss99xj4cs86jxZZ89SgnU_LKKus.roa (raw, json)
Hash identifier: j4MprHTfNeLljmMQ17453gINb2340xiN9/upTyJjDss=
Subject key identifier: 4A:CF:7D:C6:3E:1C:B3:CE:A3:C5:96:7C:F5:28:27:53:F2:CA:2A:EB
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4711
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Ss99xj4cs86jxZZ89SgnU_LKKus.roa
Signing time: Wed 27 Apr 2022 00:30:10 +0000
ROA not before: Wed 27 Apr 2022 00:30:10 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18193 (0x4711)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 27 00:30:10 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=4ACF7DC63E1CB3CEA3C5967CF5282753F2CA2AEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d8:72:ba:76:6a:27:5b:1c:f2:53:23:cf:7f:
36:43:e5:5f:8c:bb:72:c9:46:06:a5:54:87:ed:42:
1f:54:3d:82:86:3d:9a:7c:95:5e:81:5b:eb:f2:fa:
03:15:a7:28:ea:4d:fc:f4:95:16:0f:33:0a:ba:e3:
aa:3b:85:1d:bf:f0:9e:e8:27:2e:59:5c:45:36:d1:
8b:88:b1:e2:1b:21:d8:41:d2:0d:d0:1b:dd:d7:b2:
43:a9:0f:d0:15:1c:a9:ad:dd:09:b6:81:b3:1a:06:
f5:0a:9b:82:47:3d:37:af:7b:a4:65:2d:8d:ed:6f:
dd:cf:a9:8d:74:c9:4e:e3:6c:e0:7b:1a:88:92:f5:
29:62:b8:94:74:19:18:de:7c:64:30:bd:36:54:1f:
b4:f0:a0:2e:a9:b6:87:a7:af:6a:20:92:d6:75:f0:
51:90:dc:45:30:a7:f2:a3:24:dd:fe:18:58:b2:74:
80:c1:25:1a:8b:dd:07:c7:bd:58:0e:a2:51:ee:ee:
2b:4c:b0:d2:e3:b8:98:40:98:87:9e:2f:c0:8b:59:
44:cf:c7:8a:99:3c:d9:5b:9a:0e:b8:d3:e4:59:e8:
d1:f5:a7:7d:36:4c:1b:19:dd:d6:b8:ab:ea:ac:dc:
e1:aa:6e:71:c6:94:cb:cf:66:4a:3b:8e:f1:be:26:
01:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CF:7D:C6:3E:1C:B3:CE:A3:C5:96:7C:F5:28:27:53:F2:CA:2A:EB
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Ss99xj4cs86jxZZ89SgnU_LKKus.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:23:46:49:1e:ff:86:60:4c:ca:0f:ef:2c:16:86:14:55:27:
b1:73:b5:1e:11:dd:cb:96:4e:ed:3f:9a:e1:9c:b4:b5:b2:18:
68:11:72:be:b3:f7:6e:98:04:51:b1:94:67:2c:c2:56:20:ff:
01:3b:e9:35:6f:50:7b:fe:ec:5d:62:36:ec:a5:a5:92:45:4b:
27:b8:a8:b4:16:23:2e:a9:b2:35:17:c6:dc:ef:67:0a:5a:22:
ac:c4:5d:1d:7c:fb:37:94:cf:77:41:f5:2a:63:74:e9:e9:5c:
24:e1:5f:3e:55:c4:16:48:b5:1e:72:c7:02:9f:65:e2:22:6e:
57:05:55:42:2c:99:06:54:e6:33:92:50:39:d2:5f:71:11:80:
3a:d6:c9:ab:3c:5e:5c:45:a6:05:f8:f5:b8:f3:4a:09:9d:21:
c7:bb:2a:88:16:97:24:34:91:13:50:65:11:d0:3e:6a:ed:fc:
4b:99:44:69:cf:e9:50:32:dc:c4:8a:28:31:bc:06:21:f4:cb:
86:d5:9e:73:14:3b:9d:73:93:d4:b4:16:dd:4f:c6:8b:1d:0b:
19:70:90:55:dd:03:28:e9:bb:dd:d8:41:1f:06:b5:ea:b0:fb:
ef:d7:4b:d9:39:18:81:d7:15:bf:7b:2f:8c:d6:a5:8a:10:8a:
9d:95:08:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org