Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/eeWQfD0HwNOmawOiyZRVYMT888k.roa
File: eeWQfD0HwNOmawOiyZRVYMT888k.roa (raw, json)
Hash identifier: v8C6bh1U6tv2AJvP6zot/jJFtvJgv2fDsz9hJtzb3tk=
Subject key identifier: 79:E5:90:7C:3D:07:C0:D3:A6:6B:03:A2:C9:94:55:60:C4:FC:F3:C9
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 49A1
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/eeWQfD0HwNOmawOiyZRVYMT888k.roa
Signing time: Fri 10 Jun 2022 00:30:05 +0000
ROA not before: Fri 10 Jun 2022 00:30:05 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18849 (0x49a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 10 00:30:05 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=79E5907C3D07C0D3A66B03A2C9945560C4FCF3C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2a:af:e0:e1:4f:e7:68:46:57:1d:00:c9:7a:
4d:3f:2e:1f:ab:00:97:57:94:67:ca:a4:3a:45:09:
d7:0e:16:d4:7e:9c:f8:ff:26:87:7c:ea:78:df:7b:
31:39:49:3e:2e:b3:c8:b3:7e:d6:d1:6c:47:90:10:
67:75:87:39:4a:c6:31:94:e4:fa:aa:5d:0b:f8:46:
98:9a:fa:af:3c:46:da:5a:92:b2:8a:33:bf:d1:dc:
fd:07:4c:e3:32:a2:b6:5e:4a:b8:25:31:1d:6f:f4:
9e:ec:01:7c:02:17:49:9d:aa:3c:5a:4a:38:75:87:
35:f2:ab:3a:d3:5b:91:55:59:19:fd:b6:14:53:a1:
82:20:a8:45:1d:c0:02:40:8f:ea:99:3d:b6:20:32:
61:9f:71:78:6f:dc:a3:9d:cb:03:91:de:0c:5f:3b:
e2:34:de:31:22:ff:d8:f5:3a:9f:e3:d6:b4:7a:ff:
ba:92:c0:20:18:d7:9d:bd:f9:e0:15:8d:a7:30:64:
90:27:ba:c2:93:b4:ac:33:de:bf:65:82:3f:32:d2:
a1:a1:a0:05:c5:a6:8e:d0:3d:0c:38:1d:0b:e3:35:
70:37:30:79:cb:92:34:7b:69:b8:31:25:4f:17:21:
d6:79:83:47:25:f0:dd:e6:bc:b2:a0:e8:b7:98:4f:
e4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E5:90:7C:3D:07:C0:D3:A6:6B:03:A2:C9:94:55:60:C4:FC:F3:C9
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/eeWQfD0HwNOmawOiyZRVYMT888k.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
28:81:6e:d4:4a:99:1c:c8:90:33:f4:c2:9a:fb:47:1b:1b:ec:
1a:44:ec:0e:69:fa:9d:18:ea:0b:b3:74:71:31:d2:ea:52:1d:
1b:e3:f8:fe:c6:e0:cc:18:22:4f:2c:f2:c9:12:e5:94:ce:e2:
69:19:a8:c0:ac:3d:15:a6:69:84:e7:5e:76:27:7e:3d:e6:08:
9b:f0:d8:d1:b8:c5:d0:fb:63:36:3d:1d:b3:d7:5e:e6:f8:e1:
b2:f0:eb:b0:8f:8d:8d:5a:bc:dc:2a:bf:81:05:48:d9:3d:64:
b4:c8:cd:0f:ae:20:ba:11:22:cf:14:6b:95:ed:ef:5c:93:a1:
14:a8:e0:7a:fa:44:72:2c:1f:f9:36:cc:f6:de:22:c6:45:9f:
5e:d3:00:c9:df:6d:fa:34:5c:bb:ad:1d:82:1f:f1:78:93:ca:
a6:d7:93:ae:c4:30:b4:75:da:66:6a:c6:c5:0f:32:3c:74:5c:
e6:84:1c:af:cb:a7:9b:b3:a7:1e:5b:a4:ed:c7:28:40:c4:81:
70:03:a4:d5:4c:f8:14:9c:e3:8d:d8:fc:06:dd:f6:8f:be:ca:
fb:0a:23:96:7e:1f:4c:ac:02:b8:c0:03:25:70:84:b1:50:cb:
6e:0b:49:46:76:c8:bf:5d:8e:56:be:f6:d2:90:72:9b:b1:f2:
5e:e5:70:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org