Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/fs4EPqeSxJY-qg0SvJKXHyEmySQ.roa
File: fs4EPqeSxJY-qg0SvJKXHyEmySQ.roa (raw, json)
Hash identifier: V7fdwcANfWsLU7/ahVF4MgZUaCNZxg5elXAobXhFVmo=
Subject key identifier: 7E:CE:04:3E:A7:92:C4:96:3E:AA:0D:12:BC:92:97:1F:21:26:C9:24
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4360
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/fs4EPqeSxJY-qg0SvJKXHyEmySQ.roa
Signing time: Fri 18 Feb 2022 00:30:10 +0000
ROA not before: Fri 18 Feb 2022 00:30:10 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17248 (0x4360)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 18 00:30:10 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=7ECE043EA792C4963EAA0D12BC92971F2126C924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:13:f3:44:28:90:64:e1:8e:f1:c9:4b:a4:40:
41:44:c3:eb:1c:6d:31:72:a4:23:65:72:b1:e4:6c:
6e:1a:e4:79:08:0b:19:2c:2a:78:6c:c9:5e:24:9b:
b0:35:76:79:81:3a:9f:df:dc:6b:65:56:e7:6f:9d:
d7:6c:0d:c0:a6:64:e9:54:64:a1:bd:03:71:75:7c:
e3:c2:3e:2f:e7:21:86:72:ee:33:92:8f:86:ad:1c:
f3:0c:55:94:66:93:df:11:d5:38:ed:ce:33:87:96:
be:5f:cf:83:43:96:ee:0d:e3:da:27:bf:66:c0:5c:
cf:ac:6e:3d:0a:ba:35:99:a6:bb:f7:ae:a0:0f:78:
7a:d5:f5:9d:73:80:68:3b:58:85:0e:6e:8d:3b:75:
1f:5f:d9:9d:bc:e1:3a:ee:aa:e3:a8:68:93:86:24:
6c:33:fa:d0:29:4c:03:e2:58:05:3d:34:c1:fb:21:
fc:eb:4c:bb:4c:9a:8a:be:05:52:40:8b:cf:ff:82:
37:3e:0a:d6:06:4e:28:94:21:31:bf:d8:d8:77:b2:
9d:9a:20:d7:dc:c0:a4:46:7f:dd:56:61:cd:e0:80:
b1:e9:92:78:f0:0a:8c:c0:a4:3e:53:35:bf:5f:96:
5f:5d:60:18:62:b3:ce:76:97:f0:98:6f:f8:4c:0e:
e5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CE:04:3E:A7:92:C4:96:3E:AA:0D:12:BC:92:97:1F:21:26:C9:24
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/fs4EPqeSxJY-qg0SvJKXHyEmySQ.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
18:38:11:87:b1:36:07:6f:7a:4c:a7:b3:cd:74:81:ed:ca:ee:
ce:ad:cd:96:7a:30:03:d3:53:89:16:c3:e4:41:d8:9e:7c:b2:
4e:2f:9a:8d:7b:98:44:95:5a:ef:23:b1:e2:33:68:d4:d5:57:
55:cf:fd:02:58:5d:8f:fb:1d:67:dc:6a:86:6c:d8:24:23:1d:
cf:4c:5f:c1:b0:07:19:19:7a:99:ff:da:14:b0:ad:fb:c0:9f:
49:c2:b0:40:7b:b3:61:6c:9a:6d:52:f4:d1:31:93:76:6f:e2:
84:7e:51:e4:e3:f0:13:20:81:db:8b:7e:c4:4d:8d:f8:da:52:
b3:2b:a2:f8:9e:f4:bf:df:36:71:87:32:21:db:9e:72:23:e4:
0d:e4:12:3b:d8:c9:6d:64:72:6f:58:cf:a9:4e:d2:29:2f:e8:
6b:ea:87:22:cd:26:d5:6b:7d:56:dd:be:e2:65:19:2f:ee:70:
d0:6d:f4:dc:62:17:7b:97:64:34:44:49:d2:15:e8:05:c7:d3:
9a:15:cb:4b:2a:d0:51:78:43:97:22:5d:58:08:5e:ca:55:ba:
1f:ee:eb:57:79:f5:e3:bb:f0:56:82:05:b7:15:a4:89:f3:c3:
2d:69:e1:61:be:42:b3:ec:40:7a:05:67:7e:85:aa:26:1a:7c:
08:62:3a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org