Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/dqsuZq1WC5Alikyj04ZPAA8hAJs.roa
File: dqsuZq1WC5Alikyj04ZPAA8hAJs.roa (raw, json)
Hash identifier: DVm3CfdWJz7YIek3jyuPgZrXcS/kDZisys+0uBr5qLY=
Subject key identifier: 76:AB:2E:66:AD:56:0B:90:25:8A:4C:A3:D3:86:4F:00:0F:21:00:9B
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 45BF
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/dqsuZq1WC5Alikyj04ZPAA8hAJs.roa
Signing time: Sun 03 Apr 2022 00:30:09 +0000
ROA not before: Sun 03 Apr 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17855 (0x45bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 3 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=76AB2E66AD560B90258A4CA3D3864F000F21009B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b0:82:82:e9:82:15:c6:4d:97:6b:24:35:53:
ea:aa:20:f4:8d:32:80:a6:10:99:bb:fd:b7:25:27:
87:15:d1:8b:c6:46:de:08:46:00:f6:43:13:c1:9b:
0c:a4:86:81:d5:12:23:a8:b1:1f:5a:4d:71:5d:c7:
1a:17:ec:20:44:d6:91:6f:9e:92:35:f7:9e:aa:28:
72:7c:dc:73:99:94:e8:7c:ed:1c:95:23:73:6a:b7:
03:a2:21:b8:5b:ef:b0:d6:b1:d6:94:36:ac:3b:29:
d8:03:92:af:8d:31:f0:ad:1a:6f:23:57:09:86:bd:
f1:fe:c9:9b:79:4e:dc:68:16:7d:30:60:6f:56:e5:
c3:f6:a5:83:94:a2:f0:bc:24:8e:25:1d:4e:0e:f0:
d2:96:47:12:f1:d2:c7:98:5d:5f:11:3d:8f:2c:f1:
0c:1e:5f:c7:b1:f6:36:2b:07:47:46:d9:fb:82:8d:
94:44:46:65:bc:43:34:4c:ad:eb:06:73:23:22:57:
20:4f:15:34:21:08:d9:b3:d2:97:40:06:6b:66:ea:
23:c6:44:f2:bb:77:6f:cf:cf:12:a0:98:34:54:0b:
7a:e7:a0:a6:22:0c:93:13:08:af:e4:00:4c:ee:1a:
bf:1a:b9:19:13:09:3f:e6:c7:1f:b2:91:f4:26:35:
c5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:AB:2E:66:AD:56:0B:90:25:8A:4C:A3:D3:86:4F:00:0F:21:00:9B
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/dqsuZq1WC5Alikyj04ZPAA8hAJs.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:a1:80:df:34:05:d7:df:40:10:31:3e:5c:0c:40:c4:bc:39:
75:5b:54:41:dd:9d:71:27:df:90:3a:7c:3f:8f:de:05:22:57:
01:a8:d0:5c:ad:2d:d3:1b:8a:d6:9c:b8:cc:21:62:18:78:6e:
cd:5d:01:e2:c3:6d:6f:43:58:ca:f1:9a:0e:42:66:90:2a:bd:
5e:81:de:78:cb:4f:33:ba:75:03:b1:38:35:73:ec:ae:b1:2e:
3e:1e:f8:07:99:6e:15:3b:97:fd:1c:fb:39:ea:7f:ff:7f:10:
b9:46:37:08:1d:ad:e5:67:6b:61:02:f9:eb:81:85:7e:3a:f5:
36:e5:da:98:fd:7d:bf:4c:60:d4:e7:eb:80:da:e2:2c:9d:8f:
81:48:fc:44:00:03:7a:03:1b:9c:a1:86:6b:af:21:3b:f8:8c:
13:f5:f1:c9:41:e2:8b:c4:e7:30:2d:36:cf:00:4b:41:69:3a:
88:e0:46:7e:58:f2:b7:c6:7d:45:a0:10:79:7f:28:a4:41:8b:
cd:f5:91:3a:8b:4d:0c:b3:33:8e:13:45:87:16:d8:68:0a:cc:
7a:27:66:9b:84:50:32:64:6b:c5:3e:4e:fb:c8:5f:6d:2a:c7:
ed:a1:45:fd:69:ce:76:f6:d5:fc:78:f0:4a:84:28:9e:30:00:
30:60:f2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org