Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/_ntQIt-9VB6gvm0XUs75d1sqXuE.roa
File: _ntQIt-9VB6gvm0XUs75d1sqXuE.roa (raw, json)
Hash identifier: 9BoUwIJm6aCATQHmzBhCQcT/3vVQgCVkJnDuQnJnlkQ=
Subject key identifier: FE:7B:50:22:DF:BD:54:1E:A0:BE:6D:17:52:CE:F9:77:5B:2A:5E:E1
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 49A8
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/_ntQIt-9VB6gvm0XUs75d1sqXuE.roa
Signing time: Fri 10 Jun 2022 00:30:08 +0000
ROA not before: Fri 10 Jun 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18856 (0x49a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 10 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=FE7B5022DFBD541EA0BE6D1752CEF9775B2A5EE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:67:d5:5d:bc:07:9c:68:b3:3b:3e:48:eb:61:
ee:e8:3a:e4:5e:dc:a2:80:5e:67:9c:49:b3:b4:cc:
5f:50:1f:0a:ea:1b:30:59:50:ad:82:be:dc:0b:24:
5b:95:a3:ac:6e:3d:73:4a:68:8d:2d:a6:1a:ea:ff:
c1:34:a4:a2:c6:24:ee:7e:ac:32:45:ed:81:72:84:
9e:52:c0:22:0a:25:09:ee:e0:47:7a:89:f9:16:da:
f9:67:7e:01:38:cb:90:a6:c4:41:ce:21:de:ab:01:
b6:86:6f:7d:8a:39:6c:df:8e:46:cd:3d:57:d1:e9:
69:80:32:18:90:54:04:56:28:58:c5:61:79:48:7e:
3d:7d:d2:c3:af:f4:ac:bb:b9:c9:a0:80:52:df:ec:
a0:6b:d1:33:22:cc:b2:e3:e8:4c:c9:38:d7:4d:bf:
70:8c:c6:0a:4f:d3:b9:aa:ac:8c:7a:16:8f:6a:1b:
bc:9d:1f:cf:c8:f5:a5:3f:69:da:b2:ef:61:db:6b:
f6:e3:3d:e9:ce:07:52:c0:f0:06:52:89:1e:ea:c0:
61:0e:12:37:f3:fd:46:a7:64:58:0d:19:55:99:6f:
89:f1:1f:5e:2f:1f:b1:b2:86:ab:a0:9d:2a:17:8d:
8c:c0:08:c3:5b:c7:bf:63:6e:f9:8f:f5:3a:11:43:
f0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7B:50:22:DF:BD:54:1E:A0:BE:6D:17:52:CE:F9:77:5B:2A:5E:E1
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/_ntQIt-9VB6gvm0XUs75d1sqXuE.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
49:80:dd:30:a5:a3:aa:4c:1d:3a:7b:18:c2:69:10:14:1f:d8:
b3:80:03:79:e9:18:dd:8f:37:30:33:47:cf:2a:70:43:0b:dc:
48:41:82:6a:2f:a5:55:a3:27:ac:af:bf:7c:f8:71:df:60:5c:
96:e8:b7:df:49:07:f6:db:d4:da:92:d8:20:e3:18:46:10:b8:
7f:38:72:1e:91:53:f5:fb:7d:41:b6:65:0d:5a:2e:84:46:ad:
e1:3a:c8:56:4f:f2:15:ea:53:12:26:da:07:06:00:c2:65:56:
34:42:35:b4:e7:ca:f7:d2:f0:b7:74:14:46:0b:20:ef:c1:0c:
60:6b:73:3e:bc:2c:32:aa:ea:ca:b1:68:ce:41:ed:52:f2:f1:
5d:85:59:85:90:26:ea:67:44:c9:2b:7e:cd:77:3c:b9:73:af:
ae:39:be:1a:b8:21:af:08:f9:6a:c1:f1:96:45:e8:9c:68:94:
9f:1e:49:67:9f:69:3d:54:5b:b0:37:f6:46:df:51:81:91:77:
59:94:a1:ad:61:3c:37:95:59:b9:3b:ef:8a:06:5c:68:00:78:
c3:a8:fe:ef:61:32:72:33:54:46:62:c1:e6:75:df:c6:fe:3f:
49:48:1a:df:98:9e:ec:7a:04:6d:13:ba:8b:8d:40:33:dd:d1:
45:fe:4f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org