Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/XrpzWS2cvtwKK8YXWQBee3qpMNE.roa
File: XrpzWS2cvtwKK8YXWQBee3qpMNE.roa (raw, json)
Hash identifier: W4xXtbh3turggfvUY8higVxw1i9fVEKdwU7F0PE9a5o=
Subject key identifier: 5E:BA:73:59:2D:9C:BE:DC:0A:2B:C6:17:59:00:5E:7B:7A:A9:30:D1
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 45B2
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/XrpzWS2cvtwKK8YXWQBee3qpMNE.roa
Signing time: Sat 02 Apr 2022 00:30:08 +0000
ROA not before: Sat 02 Apr 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17842 (0x45b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 2 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=5EBA73592D9CBEDC0A2BC61759005E7B7AA930D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e6:5f:da:b0:b0:d7:df:90:4d:0f:0c:96:59:
81:a6:93:1e:6b:db:78:16:37:d2:e0:58:94:04:40:
fe:e5:ae:43:77:91:5a:85:bb:15:79:e5:2c:11:69:
c7:37:34:94:f7:ab:10:99:c2:fe:0f:9b:17:61:1c:
12:96:14:47:59:2f:5f:43:fc:08:d8:d5:8a:f0:20:
d6:be:f4:c9:ea:60:84:1b:6e:dd:8e:81:bc:54:86:
6b:ad:b1:29:f0:be:7c:46:ae:14:28:b2:51:48:45:
5e:f1:9d:40:0d:31:7b:ed:32:c5:91:d5:42:46:60:
96:2e:cc:a2:ca:b4:4c:77:f2:75:7b:3c:d8:8c:1d:
99:f1:3a:52:b2:b1:2b:1a:fe:59:d2:22:1a:5a:e2:
7f:5e:61:29:24:e7:cf:17:da:f5:8f:26:58:05:c8:
c2:60:a1:fc:a4:dc:5a:f3:37:dd:4d:ce:d7:98:df:
70:a4:65:45:fd:3a:40:d7:36:d4:99:5a:2f:c8:13:
46:f4:72:ab:4b:ad:70:3e:49:fe:99:4a:45:c2:f1:
99:41:9c:99:5d:dc:a1:3d:70:da:d9:a1:71:ad:73:
33:ab:df:97:c6:89:a4:ea:be:cf:4f:24:00:dd:4f:
78:51:de:7f:c3:77:46:fd:23:a2:f2:06:ef:0f:c2:
19:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:BA:73:59:2D:9C:BE:DC:0A:2B:C6:17:59:00:5E:7B:7A:A9:30:D1
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/XrpzWS2cvtwKK8YXWQBee3qpMNE.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:4d:cc:1f:23:b7:7d:5a:a5:0c:e4:d2:01:c3:bf:fe:0a:33:
bf:2b:34:fa:0c:68:8b:bf:46:cc:e0:a2:f1:b1:3c:50:74:f7:
f7:35:46:7f:cc:e1:b3:ce:42:bf:54:83:3d:c7:71:1c:3a:81:
48:b1:3f:78:64:3c:8c:98:d4:20:a8:50:20:23:07:84:b3:0d:
bc:d2:e0:08:fd:75:db:c4:8c:3d:0f:b7:50:86:9f:ec:31:e4:
53:0c:06:48:0e:48:99:d3:d1:b8:a0:b8:ad:fc:5d:ee:df:3f:
fe:00:25:13:ae:ce:fd:46:c5:a3:e8:bd:4c:3e:a0:8c:3b:34:
0d:85:a2:16:f4:bb:60:db:04:e7:6a:ab:94:b4:5d:dc:dc:33:
4c:b1:d7:ec:3e:b9:4d:2c:e2:77:dc:d1:3c:c4:72:26:48:8b:
4c:e1:fa:45:9b:5f:e6:63:98:99:88:59:31:2c:bd:2c:a0:5a:
81:98:b4:a6:b1:76:71:dc:f6:18:7b:88:4f:e4:34:b7:67:a1:
2e:7f:5e:d9:d7:8a:a8:77:95:f8:af:73:74:ae:a4:e9:aa:b9:
f2:53:fb:1e:53:f3:75:85:19:d4:e4:7e:b0:60:f4:56:1f:e0:
b3:c2:92:26:43:02:06:ce:30:9a:0a:c2:95:0d:c7:7a:2d:49:
0e:f9:d5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org