Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/ZOUGc6gW2wmmBEvEb0iuU7u3dxU.roa
File: ZOUGc6gW2wmmBEvEb0iuU7u3dxU.roa (raw, json)
Hash identifier: PqAUQzdViga6WVPGkjdeYoKyt+IOJd7xSnBUZS8E4f8=
Subject key identifier: 64:E5:06:73:A8:16:DB:09:A6:04:4B:C4:6F:48:AE:53:BB:B7:77:15
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 469F
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ZOUGc6gW2wmmBEvEb0iuU7u3dxU.roa
Signing time: Tue 19 Apr 2022 00:30:07 +0000
ROA not before: Tue 19 Apr 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18079 (0x469f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 19 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=64E50673A816DB09A6044BC46F48AE53BBB77715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d5:67:dd:4f:d7:9c:ab:d8:f2:11:e3:60:32:
d9:a5:42:c0:9d:65:d0:90:53:7a:d7:ca:92:73:9e:
49:2e:9e:7c:04:c3:ee:af:87:af:0d:5b:06:75:79:
24:fa:fe:5a:fa:d6:7b:84:ae:01:7e:75:79:c3:d6:
31:c6:51:a3:85:83:00:83:53:50:18:7f:1d:06:dd:
ce:a3:9b:17:14:8a:1d:2d:1d:9e:26:a5:b7:c8:19:
4c:2d:22:98:06:ef:77:4b:9d:c9:5e:91:83:1d:7a:
27:69:05:31:37:70:82:17:b1:72:0d:5b:cd:62:12:
ce:41:fc:ad:1c:83:4c:ba:c2:94:df:4c:a0:9a:52:
d0:27:a8:66:6b:fd:40:41:de:36:f7:f2:f4:76:de:
3c:8f:bb:2d:d7:9a:61:0f:66:a1:cb:e3:97:2a:96:
89:7b:a6:0a:10:92:d3:86:8c:cf:2b:bd:65:d0:64:
e2:62:e4:28:f3:6c:6e:ef:0f:45:30:11:0c:e4:90:
43:76:84:85:2c:f0:3b:fe:60:aa:f4:93:25:bd:6f:
5e:be:33:ba:e9:48:19:6c:6d:11:f0:27:2a:8a:f3:
b1:ea:1e:56:9f:f4:e2:8d:b2:32:a6:f6:e4:1d:3d:
fd:d2:aa:d2:0d:cc:cf:0b:78:2a:4b:f8:4f:3c:4f:
54:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E5:06:73:A8:16:DB:09:A6:04:4B:C4:6F:48:AE:53:BB:B7:77:15
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ZOUGc6gW2wmmBEvEb0iuU7u3dxU.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
99:2d:9d:25:2c:fd:da:4c:af:57:f3:f6:76:2c:ed:5f:6b:76:
a7:ed:5c:1b:1a:cc:87:b8:ee:54:e5:7c:14:c5:ac:f8:62:b2:
84:bd:f4:cc:e8:1c:81:db:91:e3:f0:09:78:b4:59:7b:c0:29:
10:f5:f5:37:0b:2a:06:51:28:98:d3:50:f3:12:56:7d:ea:d0:
68:70:d7:d7:9e:b0:63:b7:2a:4e:3d:10:20:ac:94:f6:c6:1c:
36:e7:39:2f:15:b1:0c:d7:b8:05:f0:58:1d:ef:0c:cb:fc:27:
5b:43:71:4c:02:b4:7b:8e:b8:80:0f:b9:03:60:01:d6:eb:a1:
57:21:5a:71:9a:59:0a:09:8e:c8:bc:ef:ef:20:e2:74:2e:ff:
c2:f3:ef:53:73:0f:93:b0:84:5d:87:9b:85:68:8e:52:d8:56:
de:23:c0:f8:1c:b9:05:88:9f:be:d9:8f:af:4b:f9:9e:63:e9:
d4:1e:a6:4b:62:1f:78:fe:04:09:d6:d8:20:a3:5a:9f:97:1f:
be:56:0e:8e:a6:a8:5f:fa:0e:ff:36:f6:e5:b7:2b:e2:3e:18:
32:59:74:a4:e8:e7:8e:29:67:db:11:50:44:9c:57:76:2e:49:
fb:f4:fd:a5:75:1e:8c:35:e8:1a:b9:5f:d0:d8:7d:29:75:ea:
23:f5:3b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org