Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/eDbHIXUQb2shsqiEWkf-HYkxWSc.roa
File: eDbHIXUQb2shsqiEWkf-HYkxWSc.roa (raw, json)
Hash identifier: xRQCspv5sCaqRgiDRl0opQMg+2rEyZVKKPcm9F/2lwg=
Subject key identifier: 78:36:C7:21:75:10:6F:6B:21:B2:A8:84:5A:47:FE:1D:89:31:59:27
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 45DD
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/eDbHIXUQb2shsqiEWkf-HYkxWSc.roa
Signing time: Tue 05 Apr 2022 00:30:07 +0000
ROA not before: Tue 05 Apr 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17885 (0x45dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 5 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=7836C72175106F6B21B2A8845A47FE1D89315927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9d:ce:b8:7f:2d:6f:74:7f:d5:dc:fd:cb:e4:
6e:e4:ec:90:af:34:41:00:27:3b:a9:37:41:31:ce:
6a:a2:1b:18:d8:8e:14:2a:cd:36:c3:6f:30:38:dc:
3e:04:84:15:9c:6a:1b:16:6d:13:9d:1f:f9:da:a4:
1b:f5:63:43:29:6c:4f:39:55:01:1c:ee:9c:60:bb:
a9:22:4d:ad:2b:1e:93:5d:0a:4d:41:ac:a5:72:ca:
6d:bf:82:a9:c7:c7:be:ed:b1:65:c4:b3:14:9f:de:
b8:30:4f:b6:6d:51:0d:f9:94:0e:05:d8:07:4b:63:
b7:32:49:60:31:b8:56:10:91:66:fd:91:35:58:18:
58:3b:5b:eb:54:60:a4:a6:f0:16:fb:d9:75:d9:7b:
4f:0e:1e:3f:92:55:ac:d5:fb:f6:1e:d1:a4:43:c5:
1c:7b:1d:5f:8f:05:90:08:7c:10:e4:e9:60:3a:0a:
49:8e:07:06:95:24:23:83:7d:c8:8e:4e:85:fc:67:
4c:3c:12:92:00:78:5f:7b:8b:90:dc:95:b0:80:a6:
34:fc:a1:72:f7:4a:68:6b:f9:f3:f9:70:bb:82:c0:
ea:b8:5e:17:82:32:60:9e:8e:b4:0c:5a:98:7a:a6:
4c:dd:c8:08:c4:f2:1e:ff:b4:86:f5:90:2f:0a:58:
61:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:36:C7:21:75:10:6F:6B:21:B2:A8:84:5A:47:FE:1D:89:31:59:27
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/eDbHIXUQb2shsqiEWkf-HYkxWSc.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:84:54:4e:e9:27:71:85:e6:c2:24:01:cc:81:11:6d:0a:d5:
af:10:75:a7:b7:58:a5:35:6f:07:b4:59:0b:56:d6:01:25:5c:
60:43:e9:f2:92:fb:be:07:c7:65:f2:28:dc:3a:9b:45:5e:0a:
c7:5c:f1:6a:c1:76:4d:62:8c:08:6c:33:d3:1c:fd:7f:64:71:
54:18:3d:73:fa:37:c8:ae:ce:e8:d1:94:e2:91:79:14:1f:f0:
61:67:6d:d8:5c:36:06:e5:1a:8d:a1:f2:79:63:d7:08:cb:89:
4f:8f:40:34:0f:ec:7e:6b:d2:a8:da:3e:a9:64:31:b4:ad:e6:
7a:85:a1:a5:b4:d0:17:d0:b9:9b:0a:29:bb:39:a2:d0:2d:9d:
4b:cc:94:eb:54:65:69:47:89:10:b0:86:05:5e:11:c4:63:13:
f3:22:e8:1a:2b:09:80:72:95:a3:40:b8:6b:fb:e1:27:d5:49:
d7:ac:8a:7b:66:30:6d:66:18:50:7e:2f:53:a8:c1:6d:aa:c3:
92:ef:fe:e3:9c:37:23:15:8b:22:dd:84:fe:85:f4:31:4e:86:
9d:7c:84:e6:f2:b7:f2:bc:5b:1e:90:39:17:29:1c:72:75:27:
1e:75:8f:51:38:c5:c9:31:e0:99:b0:56:b8:c3:cd:09:c6:29:
89:ff:96:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org