Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/m7uH4WruX8BcFzYeiyzUOAhlS-0.roa
File: m7uH4WruX8BcFzYeiyzUOAhlS-0.roa (raw, json)
Hash identifier: XuR/aQ7eOA90hyJEQS83KjtLqR2+ZPnYU/hNK83PvZ0=
Subject key identifier: 9B:BB:87:E1:6A:EE:5F:C0:5C:17:36:1E:8B:2C:D4:38:08:65:4B:ED
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 443A
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/m7uH4WruX8BcFzYeiyzUOAhlS-0.roa
Signing time: Sun 06 Mar 2022 00:30:10 +0000
ROA not before: Sun 06 Mar 2022 00:30:10 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17466 (0x443a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 6 00:30:10 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=9BBB87E16AEE5FC05C17361E8B2CD43808654BED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d9:b0:59:b8:61:eb:6b:a2:d3:3f:8b:be:8f:
87:e5:95:98:69:da:8e:34:cc:f1:36:a5:7e:9f:97:
b1:a8:57:0d:d9:e8:42:98:ec:80:93:e0:7f:db:a2:
94:4a:ec:b4:eb:51:a6:df:74:89:b4:36:5a:73:72:
ee:f4:ff:15:2e:98:61:bc:74:90:04:49:27:8a:d4:
1c:c6:74:1b:34:0d:63:b4:a5:8b:1e:5f:a4:4e:8f:
7d:f3:3e:80:0a:6c:38:ef:a8:69:1f:5b:6b:d8:c9:
05:90:37:67:0a:4b:39:aa:d4:d7:87:fd:6f:14:92:
8d:93:8c:3c:36:11:1a:e8:33:17:ba:3a:86:b8:4f:
67:00:61:47:00:88:70:49:c6:23:10:5a:bf:1a:90:
4c:70:0f:9c:b3:57:9f:e9:c1:15:22:79:5b:11:92:
2e:fd:c1:4d:f8:9a:92:e1:11:1f:d1:b4:91:05:f8:
97:a6:15:40:45:19:7b:30:3c:12:b1:b9:77:68:71:
31:94:3d:1c:3b:ae:99:de:6e:aa:66:7f:d0:a8:e4:
e7:7e:98:b7:ca:bc:82:44:f7:64:8a:78:72:16:a4:
49:08:dd:8d:e4:7a:ae:7e:9e:d8:4f:59:df:28:3b:
0c:8b:c1:33:aa:a7:6a:14:a0:d3:19:39:9d:80:6d:
cb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:BB:87:E1:6A:EE:5F:C0:5C:17:36:1E:8B:2C:D4:38:08:65:4B:ED
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/m7uH4WruX8BcFzYeiyzUOAhlS-0.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
42:89:91:80:8f:2a:87:8b:1e:59:60:39:3b:ce:e1:dd:97:18:
04:47:9a:74:18:dc:ad:c0:5e:27:f1:42:fb:d0:3f:01:c8:6e:
62:cb:75:58:71:44:32:bc:fb:3f:0c:95:65:b0:05:d0:52:f1:
4b:e5:79:d8:6d:d5:49:56:db:a0:bc:b5:1e:54:e1:70:46:3a:
a4:ac:e8:36:4b:b6:50:b8:7e:85:c3:24:0e:4b:c4:cc:b6:ce:
25:7f:74:f6:03:64:9a:79:2b:21:fa:02:8b:d3:3d:ef:8a:c2:
d8:4e:b9:1b:51:8c:e7:97:b4:2b:bf:20:e9:43:94:d8:dd:b3:
a0:f9:60:e7:35:dc:58:a8:e0:76:c2:51:53:ee:27:7f:e6:a2:
fb:3b:4b:16:7f:a9:76:bf:c8:a5:84:29:f4:cf:bd:f1:96:35:
ad:65:24:c3:70:07:79:40:22:20:2a:99:7d:f5:e7:63:d2:08:
f7:66:76:ea:9f:44:92:a3:46:37:ec:07:19:87:60:3e:c6:4d:
4b:11:38:06:f5:2a:0b:63:80:b6:2e:68:39:45:ef:3a:5d:f5:
3b:52:6c:81:a9:5c:c7:a5:8e:29:b3:05:96:cb:28:a7:f6:24:
19:bf:cd:f4:b5:f7:9f:4d:82:df:41:f0:3a:f1:ff:b1:e1:bf:
99:f1:8b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org