Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/ZLaCDhUuAgrnVcoD4o8x9ozJJ3Y.roa
File: ZLaCDhUuAgrnVcoD4o8x9ozJJ3Y.roa (raw, json)
Hash identifier: ryDApBGRwY1lZT3qFmza6lrrNT1ypZYA1bUZJaOzAvY=
Subject key identifier: 64:B6:82:0E:15:2E:02:0A:E7:55:CA:03:E2:8F:31:F6:8C:C9:27:76
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4659
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ZLaCDhUuAgrnVcoD4o8x9ozJJ3Y.roa
Signing time: Thu 14 Apr 2022 00:30:10 +0000
ROA not before: Thu 14 Apr 2022 00:30:10 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18009 (0x4659)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 14 00:30:10 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=64B6820E152E020AE755CA03E28F31F68CC92776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0a:53:49:6f:3d:3a:d3:97:3e:a3:2c:f3:86:
ee:83:6f:0c:1e:a9:40:94:c2:d1:96:8c:50:9f:55:
1a:d2:2f:d2:18:46:24:ce:36:de:47:f9:b5:a1:a8:
89:4f:f1:8a:4d:57:d8:e0:56:82:bf:59:1f:d5:08:
60:f8:16:a6:05:87:17:ca:c8:0c:4e:aa:62:73:bd:
eb:58:8e:b0:aa:48:81:bd:b3:d2:1e:05:34:95:ae:
87:be:dd:90:49:3a:32:2d:53:bc:92:6a:90:00:c4:
d3:78:66:76:0a:53:8e:ea:57:f4:41:99:95:b8:a9:
ee:77:b5:61:a4:6d:c8:67:de:f9:bf:4f:b8:3c:d7:
c9:a5:a6:c6:f6:33:77:c4:3e:22:85:5d:0e:b3:40:
22:b1:c7:9e:19:be:e9:93:47:50:97:b8:0d:18:04:
cb:8c:7a:f3:cc:44:66:db:95:e2:5b:e1:cd:29:0c:
f5:02:90:73:e2:d2:ce:0e:89:8c:be:71:92:fa:2a:
0c:2a:8c:7d:cb:30:a0:8e:f6:9b:bc:ff:88:67:67:
ad:96:09:49:e7:ad:1e:09:f4:bc:68:6f:cf:08:8a:
46:e9:69:38:3c:03:5c:b1:55:83:ee:44:e1:7a:7f:
b7:80:3e:e7:1d:73:e6:3a:5c:9b:e6:4c:9c:6a:2d:
d9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B6:82:0E:15:2E:02:0A:E7:55:CA:03:E2:8F:31:F6:8C:C9:27:76
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ZLaCDhUuAgrnVcoD4o8x9ozJJ3Y.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:16:48:a2:7c:e3:51:9e:f6:59:5c:6c:6f:0f:89:61:77:b4:
09:31:9e:8b:70:ba:17:54:ef:a6:87:cb:91:fe:ec:f8:0b:24:
30:37:a2:0b:ad:00:c2:09:a0:f2:6a:d0:53:d4:e4:e8:c0:99:
48:3f:76:ee:a7:0e:d1:9d:50:02:49:1a:1a:8d:bb:6e:b4:8d:
11:59:8e:19:c4:82:d8:42:c4:ba:81:ca:1e:61:5d:37:e5:69:
a0:85:74:9d:0e:b3:a2:44:c8:13:c2:a6:52:be:85:ce:14:a9:
98:53:2f:b7:da:95:ee:27:9e:15:b7:5d:a4:8b:ec:46:0a:39:
83:a5:32:c9:d3:1a:23:a8:fe:d4:bd:dc:b7:66:77:92:97:db:
b8:bf:7a:d1:97:e6:51:3a:71:b1:b4:74:d4:7b:82:b3:db:42:
f9:3f:f2:2e:90:e3:be:5e:c2:9a:e8:59:51:93:6b:1a:b6:85:
06:4f:e9:bc:38:0a:9d:d9:7b:fe:da:d7:bb:4a:e8:a7:e3:28:
72:c0:ea:f0:88:c9:ca:56:3c:39:72:7a:5d:f0:52:ab:94:65:
05:57:48:cb:40:ee:be:d0:49:25:76:1c:79:87:e5:02:2e:fa:
ab:ef:0c:e8:24:44:01:eb:30:d5:ac:70:a1:53:b7:2d:d9:ad:
64:1c:ca:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org