Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/k1nfa9oIX-9zlVyCmhU0Bg_L3Ec.roa
File: k1nfa9oIX-9zlVyCmhU0Bg_L3Ec.roa (raw, json)
Hash identifier: qfgRxp+Gjqp+3zCI0ZtT4eTaimPTXDIgdZfYpb4xLAE=
Subject key identifier: 93:59:DF:6B:DA:08:5F:EF:73:95:5C:82:9A:15:34:06:0F:CB:DC:47
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 47D3
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/k1nfa9oIX-9zlVyCmhU0Bg_L3Ec.roa
Signing time: Wed 11 May 2022 00:30:11 +0000
ROA not before: Wed 11 May 2022 00:30:11 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18387 (0x47d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 11 00:30:11 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=9359DF6BDA085FEF73955C829A1534060FCBDC47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:22:9e:c9:54:3b:5e:f7:12:ac:ce:77:b9:fd:
15:1c:07:b1:f9:27:29:8f:00:e2:9c:95:09:f0:46:
ab:2e:36:6a:56:a7:82:61:56:94:b3:43:68:3b:55:
3a:1e:b0:ee:8c:00:36:5e:10:5b:7c:54:4b:1f:79:
e7:10:c0:0a:d9:52:f0:10:40:a9:bf:22:3e:fc:48:
7f:bf:ec:d7:a3:cf:33:0e:f1:2e:e0:93:a8:1f:30:
27:a2:99:43:6b:4f:3b:d2:7b:f2:53:c1:3b:22:d9:
4f:43:01:a1:a0:8f:82:c6:c9:cb:e8:ee:34:60:47:
af:ce:f2:4c:b9:48:67:c8:4a:e5:5a:c3:46:b4:29:
b4:ac:98:18:a4:a1:a4:ca:55:f7:8a:25:ab:e4:fd:
96:21:2e:fb:e7:aa:bd:46:93:ff:73:68:59:82:c7:
57:87:09:81:e4:16:76:5e:9f:c3:35:f6:32:4b:35:
de:f8:59:ab:3d:f7:7e:b7:52:4a:d7:17:60:92:d6:
e3:87:04:2e:6c:d5:c8:20:da:73:3f:c9:08:fd:ef:
54:67:40:99:2a:3c:30:4b:67:5a:76:8b:00:f0:ed:
d7:40:e6:5a:d9:e9:04:53:29:ec:cb:c6:15:50:3d:
76:35:8f:96:d0:7c:0f:7e:2c:17:99:9c:02:2e:16:
fa:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:59:DF:6B:DA:08:5F:EF:73:95:5C:82:9A:15:34:06:0F:CB:DC:47
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/k1nfa9oIX-9zlVyCmhU0Bg_L3Ec.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:ea:e7:04:1a:20:46:f7:54:df:25:9c:13:f0:12:32:51:23:
04:8d:ce:4c:c9:08:b6:61:ba:3a:0b:fe:2b:7f:83:d3:b4:82:
0e:cc:09:5e:2d:aa:e2:33:f6:03:32:f6:7d:ac:5a:ee:47:53:
00:28:68:2e:e8:87:fa:4b:28:a2:61:0c:e5:52:61:80:33:a3:
d0:52:e7:f6:08:9e:4d:5b:a4:18:06:e9:88:d3:03:4a:87:7a:
29:f3:b4:a9:8a:ec:d8:74:7d:0d:02:cd:b5:74:e4:f2:d8:b6:
74:ea:80:4b:08:9d:f7:de:db:db:4c:6f:ab:66:d1:d3:6d:f3:
01:b5:30:10:ec:a3:dc:9f:c5:36:ca:a7:94:12:e9:51:66:48:
d2:c0:dc:9e:76:c9:e7:7f:ad:28:5e:cc:b0:63:71:31:71:29:
db:cc:04:32:34:81:57:37:09:0a:e9:6a:04:22:3e:54:17:6b:
3c:a3:8e:01:7c:b2:4e:69:70:39:4a:ab:57:3e:90:75:0d:25:
0f:c7:be:5d:3f:07:6c:ad:48:2e:c7:83:a2:a6:59:21:52:8a:
7b:85:2e:51:3e:17:41:b9:c0:9a:86:b1:0c:2e:9e:1e:05:98:
1d:e9:f7:cb:f9:dc:b5:63:bf:1b:4a:9a:62:3c:24:b1:c8:8d:
4b:8a:b9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org