Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/YpgXkgHErQZy6ISk61bLJzTVqaQ.roa
File: YpgXkgHErQZy6ISk61bLJzTVqaQ.roa (raw, json)
Hash identifier: MSjV8pvWbRPlpXbQ9J8cmVF3NSSDd6G2FhZ7wOnhf+o=
Subject key identifier: 62:98:17:92:01:C4:AD:06:72:E8:84:A4:EB:56:CB:27:34:D5:A9:A4
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4602
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/YpgXkgHErQZy6ISk61bLJzTVqaQ.roa
Signing time: Fri 08 Apr 2022 00:30:06 +0000
ROA not before: Fri 08 Apr 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17922 (0x4602)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 8 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=6298179201C4AD0672E884A4EB56CB2734D5A9A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fe:d4:d3:64:ec:eb:66:bf:33:19:7a:3e:7f:
6f:3d:5a:d2:6a:ae:ff:4f:73:98:f3:5d:27:7c:44:
39:e7:55:43:d7:69:be:34:81:2d:94:ee:20:f1:63:
93:fd:25:bb:c4:0e:52:95:41:5c:89:e6:5e:73:48:
f6:5b:8a:bd:b2:56:2c:16:6a:fb:6e:5e:a1:c4:07:
81:54:f8:d8:2a:2e:fc:d1:47:76:4d:06:02:f7:74:
4a:b5:ad:6c:64:d8:2d:d6:2d:fa:4b:bb:16:41:d2:
a5:a6:81:4e:48:0c:26:81:33:cd:fc:bc:c6:33:9c:
ba:73:e9:4f:73:8c:a6:3a:1c:54:6e:ea:58:e3:38:
e9:d6:fe:9a:c2:e6:ce:ff:35:d8:08:a4:a3:fc:a2:
ba:65:2e:98:f1:be:8b:c5:30:ed:55:c0:8e:8b:12:
c6:74:ea:d3:a2:2e:6a:14:56:85:48:2a:a4:e7:13:
67:80:34:5a:5e:39:5c:19:51:55:f1:8c:c6:35:d6:
2c:66:2d:18:7b:5a:9d:4f:38:c3:8b:a2:91:65:f1:
32:05:b7:75:8c:55:1b:7f:ef:6c:22:59:ad:56:95:
f1:47:25:fc:df:e0:e1:c2:f1:f5:37:99:f9:b1:a1:
b2:b8:59:8b:16:72:5d:d8:c2:99:c0:1b:7d:24:4c:
db:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:98:17:92:01:C4:AD:06:72:E8:84:A4:EB:56:CB:27:34:D5:A9:A4
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/YpgXkgHErQZy6ISk61bLJzTVqaQ.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:d1:2c:c2:21:ff:e6:d6:39:48:ce:79:43:e8:1c:64:49:8e:
84:29:05:1d:79:4c:0d:a0:51:5c:82:e3:c1:c6:62:69:af:40:
46:a2:48:73:db:db:0f:75:ca:e7:3e:56:8a:7c:e4:ac:87:be:
37:e3:70:ae:25:79:c9:53:0e:8d:3f:67:3e:b2:0f:2a:ae:25:
39:ba:54:cb:83:cb:b7:75:ec:ec:39:a0:a7:eb:28:6a:15:4b:
6a:11:fb:99:48:3b:d6:7c:1f:53:f3:9d:e5:f6:83:45:5a:88:
4d:16:56:f6:93:b9:ae:6a:53:9a:39:b2:a1:ce:e0:a0:1e:c9:
89:54:cc:f4:3d:80:f4:55:15:b1:9d:83:4f:38:d0:cd:1d:58:
f8:88:db:79:96:4b:ab:a2:62:d4:6e:71:80:5e:30:2a:8f:af:
10:bf:19:2e:44:ab:cc:ff:b8:31:90:1e:29:7d:37:ef:b6:60:
60:99:89:f6:4f:96:bb:d6:7b:c9:d1:11:ea:c1:d7:7b:0f:a6:
39:8a:4d:88:ef:01:41:72:e7:b8:f6:a6:04:b2:2f:f5:ae:03:
4a:03:83:64:8c:4d:cf:24:44:8c:f5:71:38:71:32:4d:61:0f:
fa:4c:61:72:84:c6:55:2f:a7:f4:60:31:54:21:8d:a4:c7:d0:
6b:38:01:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org