Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/Zpbr5MA9-BW2SQpp17Iwzm37YSw.roa
File: Zpbr5MA9-BW2SQpp17Iwzm37YSw.roa (raw, json)
Hash identifier: Lmh7ow83k56OuPNkNBkaOYgVzaCKlCmLmE5FJ8yC1QI=
Subject key identifier: 66:96:EB:E4:C0:3D:F8:15:B6:49:0A:69:D7:B2:30:CE:6D:FB:61:2C
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 497E
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Zpbr5MA9-BW2SQpp17Iwzm37YSw.roa
Signing time: Tue 07 Jun 2022 00:30:09 +0000
ROA not before: Tue 07 Jun 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18814 (0x497e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 7 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=6696EBE4C03DF815B6490A69D7B230CE6DFB612C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d1:48:03:22:ca:b8:c8:d9:81:78:24:21:75:
c3:30:d4:f8:2e:16:77:93:72:71:cb:b8:74:9c:1b:
36:62:a0:f0:14:5d:bc:19:ff:0e:c3:15:6e:07:d1:
b5:3e:ca:02:58:e7:f8:cd:53:89:7e:3a:a1:67:f6:
1e:82:d6:22:95:80:71:20:00:d8:17:79:b3:cb:91:
d7:53:d9:4f:66:94:72:40:d3:45:8e:f6:41:66:7b:
cf:ab:e3:50:a5:bc:6f:77:21:b5:89:59:4b:85:98:
ff:ac:f7:0d:ba:e3:95:0d:b1:9d:bc:fd:77:11:60:
b0:16:58:05:7f:6c:ff:f6:30:48:6f:57:f7:eb:9f:
b4:58:15:32:f5:02:af:bd:1a:08:20:89:8c:4a:58:
9e:2f:82:51:ce:20:14:48:f6:50:06:ec:c1:b1:bc:
9d:97:76:bd:e8:62:01:f2:8a:40:c0:d3:f7:60:e3:
f9:b5:d3:0d:e5:4b:60:00:b9:c4:0f:f1:14:95:bf:
f9:9c:e4:f3:3c:bf:2b:b5:d8:30:79:d0:d9:61:64:
b7:7e:da:41:c5:7f:fd:d8:00:0e:4e:21:6e:80:2c:
d9:bb:b3:da:43:7b:33:df:38:32:8c:cc:66:db:4f:
52:10:60:bd:bc:f1:ef:46:b1:ad:2e:ef:9d:57:2f:
af:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:96:EB:E4:C0:3D:F8:15:B6:49:0A:69:D7:B2:30:CE:6D:FB:61:2C
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Zpbr5MA9-BW2SQpp17Iwzm37YSw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
85:0c:70:4e:3d:a8:b5:8c:1e:f0:e1:fb:91:63:8f:95:c8:74:
6e:e2:f3:31:e3:a4:19:17:cd:a6:cd:0a:45:66:e5:4b:b2:93:
09:cc:e9:1d:2a:94:b0:3c:02:7c:3a:82:cf:42:6a:00:72:9b:
9a:59:d6:43:c2:32:94:75:38:77:d9:cc:8d:4d:d8:07:01:9d:
9a:74:79:7c:4f:49:13:47:79:c3:73:c8:e0:79:77:e7:8e:d4:
a7:14:04:6e:d0:aa:1a:d8:94:bb:4a:cb:0b:73:d9:6e:a3:14:
5c:44:aa:eb:14:cf:56:e1:8c:18:e2:c2:97:0c:01:f3:56:b0:
7f:87:00:0e:d0:ab:9a:ed:64:78:56:c5:b9:6c:cb:45:61:7e:
ae:9c:be:e9:88:c2:16:ce:e4:4c:44:94:84:80:b8:06:ac:3d:
e2:08:ea:08:4c:a1:47:2a:d3:46:87:26:63:7f:e3:1a:49:c8:
fb:46:77:d2:97:df:5b:4f:dc:81:98:ec:25:9c:c8:92:23:57:
08:d9:52:e4:7f:26:ec:57:08:23:f3:36:b7:1b:4f:1e:8f:38:
75:bd:41:2c:74:1a:78:fd:71:c5:0b:63:51:db:05:80:3f:90:
dc:9f:17:ca:8b:a1:41:ac:b7:f7:4b:39:f8:06:d5:b9:ee:39:
01:3a:cd:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org