Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/V6SaOkO-5EnuE0ZDAPkatF37hGc.roa
File: V6SaOkO-5EnuE0ZDAPkatF37hGc.roa (raw, json)
Hash identifier: +fqGFdVY2ZkQalv9UiDr7Qq6iqEOtAdWSa1PhBCJ2YY=
Subject key identifier: 57:A4:9A:3A:43:BE:E4:49:EE:13:46:43:00:F9:1A:B4:5D:FB:84:67
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4350
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/V6SaOkO-5EnuE0ZDAPkatF37hGc.roa
Signing time: Thu 17 Feb 2022 00:30:06 +0000
ROA not before: Thu 17 Feb 2022 00:30:06 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17232 (0x4350)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 17 00:30:06 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=57A49A3A43BEE449EE13464300F91AB45DFB8467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ef:fb:e9:dd:84:25:67:8a:02:a0:47:05:e0:
50:1f:a3:82:84:c4:ff:ca:48:7f:ca:16:23:dd:5d:
2d:ce:a1:68:ab:88:5d:0d:d1:44:b0:0c:45:4d:b5:
ab:6e:89:70:75:80:90:20:f5:10:d6:4e:c6:86:7b:
72:41:2f:e3:4d:5a:61:92:64:93:55:9b:ab:bd:87:
9f:54:5d:66:41:f9:c8:49:fc:74:bc:17:dd:b7:d8:
5e:62:3f:21:c8:eb:fe:9c:79:16:54:0a:e7:c9:7b:
7c:2c:b1:0b:64:79:96:b5:1a:45:b3:ae:f5:93:35:
ff:46:28:ea:b3:20:d3:5b:90:b0:43:20:89:65:22:
bd:bb:f8:af:86:c5:17:3b:85:6f:f6:1a:35:af:09:
4c:03:2b:57:a2:e6:66:c8:0c:bb:63:a3:f3:78:08:
fe:9a:29:eb:58:ec:5c:55:3c:fb:d0:5c:ee:ce:39:
45:b8:50:8f:d3:a4:1e:28:b8:ad:bb:9f:50:08:36:
51:b2:ae:ab:54:bc:de:81:68:37:1b:73:a2:d5:ef:
77:4a:18:52:f2:94:9d:d1:d2:d2:40:c7:43:99:ea:
fb:8b:b9:c9:c5:78:2e:a1:8e:46:0e:fc:9b:7a:8e:
d3:a6:99:e0:e1:31:66:93:84:06:7a:a0:a4:e8:0c:
dd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A4:9A:3A:43:BE:E4:49:EE:13:46:43:00:F9:1A:B4:5D:FB:84:67
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/V6SaOkO-5EnuE0ZDAPkatF37hGc.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
47:d8:c2:43:6a:6c:26:6a:9c:53:2a:7d:7b:15:33:77:29:13:
c7:cb:2e:5b:d4:ae:33:12:6d:94:31:70:4a:81:c2:59:ee:90:
9e:e9:54:34:f7:89:a0:ae:1c:fc:c9:e4:cb:aa:4f:f8:ec:38:
f7:79:e5:2d:0c:dd:75:80:2d:a1:01:11:7a:39:7b:ec:ef:ed:
11:91:80:66:e3:0c:da:46:9e:0b:53:80:8d:1c:28:37:69:2a:
46:00:f5:c3:39:21:2e:b2:cb:5e:23:1d:fa:93:cf:59:57:e2:
f3:22:61:e0:d5:f5:73:de:f7:3f:b8:ac:04:22:2d:cd:4e:14:
a9:0c:8e:33:43:23:7c:de:89:b8:96:be:f7:c9:dc:c9:fa:8f:
77:3a:36:81:e7:72:8d:ff:63:8e:7e:c8:21:9c:a1:e0:7b:32:
52:fa:48:8e:02:75:ea:74:d7:80:41:fb:2a:da:34:d9:04:3c:
b0:12:f3:69:6a:e5:9d:06:c7:ce:cf:36:01:f0:67:b2:a0:ad:
40:87:01:4a:1a:94:4c:b4:57:4e:bc:c7:d1:9a:e4:b5:f0:cc:
50:9d:e7:ca:94:63:b5:0e:84:3e:12:a9:73:e5:96:3e:7d:61:
86:23:d5:db:fc:e2:2c:15:0b:dc:c6:ce:70:4c:85:0f:d2:b7:
cc:b0:cb:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org