Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/bOLmajCHDzHgalmfJ9SD0SF2Aos.roa
File: bOLmajCHDzHgalmfJ9SD0SF2Aos.roa (raw, json)
Hash identifier: XMT7Zn4Aa5pwFvDT8H1c91acsiPAyPcrOu3d2c8h8PA=
Subject key identifier: 6C:E2:E6:6A:30:87:0F:31:E0:6A:59:9F:27:D4:83:D1:21:76:02:8B
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 479F
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/bOLmajCHDzHgalmfJ9SD0SF2Aos.roa
Signing time: Sat 07 May 2022 00:30:14 +0000
ROA not before: Sat 07 May 2022 00:30:14 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18335 (0x479f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 7 00:30:14 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=6CE2E66A30870F31E06A599F27D483D12176028B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:08:5a:cc:5c:d2:d9:fc:a5:21:67:54:46:a8:
93:d3:3f:c4:dd:98:73:f5:83:dc:7c:ba:81:e2:15:
09:4c:d5:7f:80:67:b3:cc:88:06:c7:34:07:d3:bc:
09:13:f9:c0:6e:1f:9f:48:24:1e:65:a5:bd:66:88:
ef:9d:f0:fc:cf:3f:e2:25:0f:c2:ea:76:6a:84:b0:
8a:a2:7a:02:ef:51:3d:b0:73:f4:7f:84:64:37:05:
82:a9:25:f6:46:3e:e5:62:fb:e2:97:04:0a:2b:de:
30:c9:f8:7b:c9:01:43:bc:0a:e3:2b:57:07:fc:a5:
cb:7e:4f:0b:e6:b4:3d:42:12:21:49:d9:a8:cc:ef:
db:12:c0:25:d3:37:5f:d0:70:03:99:9c:a9:7d:72:
e9:e0:fa:b1:cd:0c:c7:48:a2:08:17:61:d7:e8:a6:
0f:0f:61:80:50:c2:fb:f5:55:b1:5e:20:49:dc:08:
ea:d1:83:69:6e:e6:67:45:50:bc:72:62:74:20:df:
e1:89:99:70:5e:5d:f2:ea:1d:1a:b0:e2:0b:db:ce:
f6:95:7b:55:8a:93:56:1f:9a:07:17:29:3c:c2:f1:
cf:8b:32:7c:ff:5d:d5:27:9a:51:65:94:28:0b:38:
f6:5b:ec:a0:ea:75:e3:43:f3:db:8f:bb:c3:4d:72:
84:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E2:E6:6A:30:87:0F:31:E0:6A:59:9F:27:D4:83:D1:21:76:02:8B
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/bOLmajCHDzHgalmfJ9SD0SF2Aos.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
31:ff:a1:02:98:b9:ea:1d:a5:ae:a5:3f:9a:91:39:6a:74:c4:
84:1f:9b:40:ce:d3:75:99:d4:9d:5b:f7:e2:8b:24:1d:70:bd:
14:31:7c:79:df:89:3c:b9:61:ad:5c:43:b8:5e:7f:de:90:e1:
81:e6:6b:e1:3e:3a:06:dd:c6:3d:e0:af:6b:40:b6:07:b4:ae:
bf:28:50:5e:f4:c3:d0:16:e6:ff:4d:52:42:df:d7:d0:87:ec:
28:3e:24:47:b0:55:e0:d8:63:9a:5c:04:71:8c:66:c7:14:73:
aa:e0:11:3e:58:b1:cd:7b:ce:08:a8:e3:ce:fe:a4:51:6c:82:
1a:67:50:44:11:e7:4e:3f:d7:e0:99:b3:f2:32:69:a2:4f:ed:
fc:b1:17:eb:eb:aa:a6:54:3e:23:7f:9e:b9:9b:f9:ad:43:01:
4c:90:85:ef:e0:5e:21:65:a3:a3:9e:22:b0:8f:48:ad:d0:b5:
8d:7b:00:20:f1:27:85:13:ec:75:9d:7e:c4:65:f5:a0:4c:10:
50:b0:b9:fa:d8:f5:d2:c5:be:a4:42:b3:72:10:78:ae:d0:3f:
cc:21:da:7c:5a:b8:d6:66:a0:d7:6e:a9:06:5c:2d:b3:bc:00:
13:b3:7d:98:19:16:4b:5b:37:cf:7f:35:88:ad:f0:7b:77:eb:
52:db:ce:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org