Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/a-Jg_R_rbUsfNPpo9RadYKi96bg.roa
File: a-Jg_R_rbUsfNPpo9RadYKi96bg.roa (raw, json)
Hash identifier: szDmKw2rZsFsPAbi607Jh7YDGmceBMIzV6LI2BU+0sk=
Subject key identifier: 6B:E2:60:FD:1F:EB:6D:4B:1F:34:FA:68:F5:16:9D:60:A8:BD:E9:B8
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4897
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/a-Jg_R_rbUsfNPpo9RadYKi96bg.roa
Signing time: Wed 25 May 2022 00:30:07 +0000
ROA not before: Wed 25 May 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18583 (0x4897)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 25 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=6BE260FD1FEB6D4B1F34FA68F5169D60A8BDE9B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:af:e4:5d:d5:90:f4:76:f6:dd:d3:b5:3f:eb:
b3:d4:20:26:b5:9c:83:ac:ab:57:88:59:ec:97:8f:
fc:aa:57:2e:e9:86:ad:12:c7:95:4c:5c:81:6e:d0:
f3:73:73:58:ec:e0:77:9b:44:af:d5:a4:15:72:c5:
55:52:8f:1a:80:94:02:4e:84:f3:b0:7c:7a:fe:c8:
1d:32:90:0a:f2:fd:ce:0e:0a:84:2b:1f:89:a3:1c:
d5:18:15:2d:61:58:30:c0:09:66:73:36:9d:fa:30:
00:73:77:d7:c6:2a:49:19:22:0f:7a:a1:ae:fe:9a:
fa:6d:c0:75:37:fe:fa:0a:a4:de:c4:cd:01:e3:8c:
9d:f3:9b:ee:26:76:73:b5:bf:1f:69:70:19:71:04:
4b:a8:4f:6b:28:44:0a:4c:a1:d7:e3:01:39:9a:3f:
52:da:fc:55:f3:90:b1:58:72:4e:bf:b8:1a:d6:5e:
a0:26:de:30:89:fd:43:b9:4a:48:2e:c3:3f:9e:e5:
ed:39:7c:72:01:89:d6:0f:64:82:75:a7:6e:71:f2:
6c:36:ac:ef:98:a3:b4:11:7b:16:76:de:8a:fe:60:
18:b9:d0:ea:f7:32:bd:6c:85:97:51:72:c2:51:40:
59:55:2d:b1:a8:44:10:20:cc:df:fd:dd:2b:ff:2e:
79:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E2:60:FD:1F:EB:6D:4B:1F:34:FA:68:F5:16:9D:60:A8:BD:E9:B8
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/a-Jg_R_rbUsfNPpo9RadYKi96bg.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:9f:ba:51:46:ea:6f:d5:75:31:0a:6c:2c:d0:6a:a4:1c:ae:
12:fb:17:a7:f6:1d:2d:c8:72:31:14:2b:5d:2a:47:6c:bd:76:
f7:5e:5b:c0:73:07:42:d6:f2:4f:6d:7b:78:16:6c:7d:1e:25:
e0:4d:e1:b8:47:7c:06:80:8b:8a:11:a8:49:c3:74:04:d4:95:
5e:ed:f3:72:d4:ba:66:89:04:db:d7:f8:71:94:db:be:77:ab:
a1:29:44:20:ac:ef:05:7c:dc:63:61:0b:aa:23:30:62:17:69:
e4:5e:85:7c:c3:a2:9d:2b:02:9a:fe:79:12:2c:7c:3b:37:3d:
69:b2:5e:91:df:cf:96:73:50:b6:b8:c7:82:27:79:42:04:5c:
13:66:87:06:7f:da:c0:d3:be:7a:11:0c:40:03:60:09:77:9e:
4e:97:d4:7e:ef:07:fb:57:7a:07:f2:bc:da:20:fd:7e:6b:ff:
ba:12:89:bb:25:31:7f:8d:7e:2c:0e:88:41:59:43:33:9a:32:
99:51:49:f6:75:79:a2:97:5f:fb:b1:1e:6e:2e:53:dc:58:63:
2b:48:dd:e4:e8:53:0a:0e:02:2a:6f:f3:b5:30:31:8a:c2:75:
74:6e:e6:ce:6d:3c:03:64:8c:6a:ee:db:f8:03:b9:64:56:b4:
19:db:d2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org