Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/mQU45z4q7P2rhLEg6TwZkd6TX3k.roa
File: mQU45z4q7P2rhLEg6TwZkd6TX3k.roa (raw, json)
Hash identifier: edgaFcKLgTjow5m1i5W2A4pJnzzCCxSUlRXtSBF99vk=
Subject key identifier: 99:05:38:E7:3E:2A:EC:FD:AB:84:B1:20:E9:3C:19:91:DE:93:5F:79
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4744
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/mQU45z4q7P2rhLEg6TwZkd6TX3k.roa
Signing time: Sun 01 May 2022 00:30:06 +0000
ROA not before: Sun 01 May 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18244 (0x4744)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 1 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=990538E73E2AECFDAB84B120E93C1991DE935F79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ce:7d:cb:40:6a:f9:80:6b:04:da:0f:df:d1:
c7:3f:5c:66:a0:96:1f:d5:15:01:e6:57:39:a4:30:
1e:2e:b9:a9:e4:58:79:2f:55:5f:4f:8f:04:dd:1e:
80:48:f9:15:5d:7f:7f:60:fc:d6:7a:9d:90:db:74:
26:72:01:1b:05:09:fa:2e:ce:74:82:b0:a0:c6:f3:
cc:91:27:30:3b:9c:aa:93:b2:87:ec:82:37:f3:21:
79:d3:25:0b:53:62:f4:69:c1:7a:d7:ae:41:b3:08:
67:f2:2e:5b:28:2e:8d:51:61:85:15:30:b3:15:08:
62:3a:c0:17:7a:ae:bb:11:c8:10:fd:32:d1:1d:b0:
b0:0f:1d:d5:a6:76:c5:2e:49:e0:c9:f9:79:b7:b6:
68:91:08:1f:a8:5e:c1:1b:5d:26:a8:58:18:e4:4c:
3d:f8:d8:2d:8a:ec:94:3a:1a:06:e8:20:7e:b8:01:
32:d6:4b:a2:65:54:27:98:2e:01:98:68:86:6e:f8:
b7:51:06:6f:ac:25:7a:c8:60:fe:8f:ed:3f:3b:15:
0b:ba:da:e6:0c:46:66:b3:3d:d5:86:df:72:db:c4:
82:23:16:15:9a:73:7a:89:15:39:ea:92:84:9b:e1:
ae:2d:5b:9d:9e:2a:34:56:4b:ac:9a:c1:de:26:a7:
23:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:05:38:E7:3E:2A:EC:FD:AB:84:B1:20:E9:3C:19:91:DE:93:5F:79
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/mQU45z4q7P2rhLEg6TwZkd6TX3k.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:51:ca:1f:b0:34:af:46:49:26:5d:5f:0b:2b:34:37:01:6d:
a2:a2:52:17:5b:7c:bd:66:29:ba:ba:f1:35:33:a5:95:ba:7d:
5f:47:4c:ec:48:19:00:32:6f:6b:f7:24:55:b1:6e:b8:81:46:
04:b5:2f:87:d0:12:a8:14:df:0d:6d:ea:4c:3e:ca:64:f4:ec:
fd:72:a3:5b:b6:70:7a:98:37:87:86:c8:ba:c4:58:ef:d9:7b:
c1:a9:8c:f1:82:c3:96:ad:ff:3a:3f:e6:0c:d9:ef:45:1d:7a:
86:0f:52:03:46:6d:ba:1e:13:33:bd:83:8c:e7:9c:62:7e:a1:
f0:49:f8:1c:2b:fc:ac:e3:87:bc:4a:c4:e5:83:64:57:5e:99:
13:e4:d5:a5:77:24:7b:ed:34:a3:10:37:a8:fb:4b:4d:94:4c:
af:80:64:45:80:bc:04:c7:8e:08:11:3f:0f:29:fb:b7:bf:c3:
0f:25:13:c4:7d:db:01:61:dd:f8:40:10:3a:e8:73:cb:7f:e5:
e8:41:0b:a9:8a:53:b3:d8:30:45:fd:c4:15:38:d5:76:f5:96:
31:0a:ba:67:37:c0:57:6c:21:b6:46:b6:49:de:85:40:e1:47:
c1:e0:6e:cc:c7:df:94:b9:d1:74:c4:9a:b6:cf:d1:42:3f:c0:
51:85:30:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org