Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/l765MZGU4krlDht2mB_TsnQK8Lw.roa
File: l765MZGU4krlDht2mB_TsnQK8Lw.roa (raw, json)
Hash identifier: iCFNwD9Y03I7SNFuUE4IQ1M+FApR0sAne0U8JWTOfDg=
Subject key identifier: 97:BE:B9:31:91:94:E2:4A:E5:0E:1B:76:98:1F:D3:B2:74:0A:F0:BC
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4449
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/l765MZGU4krlDht2mB_TsnQK8Lw.roa
Signing time: Mon 07 Mar 2022 00:30:13 +0000
ROA not before: Mon 07 Mar 2022 00:30:13 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17481 (0x4449)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 7 00:30:13 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=97BEB9319194E24AE50E1B76981FD3B2740AF0BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b1:d6:94:ba:12:15:67:6e:39:99:76:9c:c4:
fa:90:fb:a0:7f:05:31:f1:6e:c9:55:2b:2e:9f:47:
59:1b:5e:cd:be:06:b7:e3:3c:7b:ae:e7:1c:e5:b4:
f1:ea:ea:31:ed:74:4d:eb:b5:16:88:7f:fe:6a:0b:
30:ac:9f:97:84:0f:b8:01:58:0b:bf:04:36:e3:46:
fa:e2:f5:8a:1f:0f:af:6f:07:53:7d:23:b9:16:11:
84:15:6b:d4:31:c6:a7:1d:d2:25:47:1a:32:0c:1b:
85:34:16:f7:52:a1:4f:5e:2d:8f:e3:cb:66:f3:6c:
91:b3:21:3b:d3:96:8f:27:b2:09:52:2b:ea:4e:36:
d0:78:84:7a:72:53:c4:9e:b4:86:f7:7c:01:a0:b4:
ae:a6:2c:e0:04:3e:10:78:11:bb:c9:a0:53:05:c8:
53:d1:af:0a:28:11:dc:7e:67:1f:e7:6e:79:c6:bf:
45:9b:d7:d3:50:8b:91:a5:43:c4:0b:e0:35:f8:c3:
4a:fd:aa:35:6c:51:3e:e5:59:3d:43:fc:63:ac:dc:
52:4b:8e:35:13:1e:37:db:52:16:2e:e1:4b:f2:03:
e9:b1:78:de:5a:89:75:ce:cf:09:e0:29:52:f1:98:
6c:43:54:18:c4:e6:67:85:35:c1:02:ea:d9:94:b9:
2d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:BE:B9:31:91:94:E2:4A:E5:0E:1B:76:98:1F:D3:B2:74:0A:F0:BC
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/l765MZGU4krlDht2mB_TsnQK8Lw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:00:aa:a3:4a:4f:95:45:f0:1f:1d:8b:6a:ab:fa:b3:39:c8:
e6:65:1b:6e:66:4e:9e:f3:91:00:6e:ff:d2:4f:61:4f:2c:bc:
1b:24:7f:f5:21:0c:67:66:92:a9:5c:0a:a6:72:35:e4:60:f8:
ee:f7:e6:a5:cc:f1:c7:86:a8:96:02:e5:8f:8f:e2:00:8b:a5:
0b:66:4f:c1:6c:b0:d4:90:f3:1a:a5:f1:87:67:9b:c4:9a:c5:
6a:7b:d7:6e:31:dc:61:a2:8c:a9:62:ee:ff:50:40:4b:6e:ee:
dc:e0:42:d3:fd:58:10:5f:aa:a4:37:f4:43:fb:70:92:5e:f5:
2e:e8:ff:c0:02:b6:b7:3c:90:eb:ef:ab:6f:16:48:55:b8:40:
be:d7:1c:5f:33:a2:a0:1d:65:37:de:e2:c7:9d:29:ca:7d:b7:
47:9d:75:5f:dd:7d:ae:57:72:ba:e8:95:cb:23:e1:ff:3b:a5:
63:3c:08:40:ad:fa:cf:d8:2a:6d:cb:05:ba:38:83:df:f0:26:
1a:e7:cd:d8:f6:61:fa:23:25:eb:44:e7:b5:87:22:4e:1a:f7:
3c:6f:66:c6:6e:c7:7c:dc:0e:a7:b0:a4:4e:1b:52:94:2c:64:
97:af:ed:b1:84:88:d1:8a:05:2f:2b:ac:cf:e7:32:33:0e:44:
ae:59:da:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org