Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/n6760s9HPoz-B06yKzzlZdYJukQ.roa
File: n6760s9HPoz-B06yKzzlZdYJukQ.roa (raw, json)
Hash identifier: GTCxbMAFkJ8ZAePObKGmrOgo95u994pO7OMivxR9jsM=
Subject key identifier: 9F:AE:FA:D2:CF:47:3E:8C:FE:07:4E:B2:2B:3C:E5:65:D6:09:BA:44
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4450
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/n6760s9HPoz-B06yKzzlZdYJukQ.roa
Signing time: Tue 08 Mar 2022 00:36:40 +0000
ROA not before: Tue 08 Mar 2022 00:36:40 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17488 (0x4450)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 8 00:36:40 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=9FAEFAD2CF473E8CFE074EB22B3CE565D609BA44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cb:ae:f0:54:82:ac:89:57:4f:31:f4:34:0e:
97:f8:a9:d8:64:f8:40:65:ca:ff:eb:85:bd:ea:de:
7a:04:9c:0d:98:4d:b6:34:0b:2d:57:b0:80:93:05:
39:1a:8f:46:d8:7e:df:87:f6:d1:c6:61:cb:da:06:
8d:6d:9a:4e:44:cc:c6:4e:71:46:b7:a5:78:21:6c:
0e:59:3a:da:29:dd:a3:e0:f5:0e:90:38:3e:d8:09:
d4:a6:0e:52:0a:aa:21:b6:e8:1a:ff:87:c5:36:22:
27:eb:cf:1a:46:82:ba:6c:64:74:87:16:f8:82:b9:
0f:81:8d:80:a2:82:9b:11:e9:98:72:b7:b1:e9:33:
9c:bd:b3:6b:b9:5a:7b:7d:8c:d4:13:57:a7:34:58:
df:90:1d:b5:8e:6a:cc:dc:15:22:ab:a0:4d:64:9c:
e4:4a:43:46:63:52:d5:a8:6f:05:d3:f3:4c:af:32:
13:8e:4b:76:59:89:4f:b2:f3:2c:3b:c8:52:6b:85:
36:4d:78:f9:a7:40:b1:47:88:33:45:6f:fb:fa:3e:
ed:55:96:ca:f1:cc:bf:c6:bc:50:51:da:d8:56:03:
98:4e:f4:8a:1d:49:17:e8:54:bc:f0:9f:48:23:7b:
b9:0e:2e:c0:eb:09:b8:a5:71:08:3d:97:2a:ea:59:
53:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AE:FA:D2:CF:47:3E:8C:FE:07:4E:B2:2B:3C:E5:65:D6:09:BA:44
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/n6760s9HPoz-B06yKzzlZdYJukQ.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:ab:cc:1a:a4:3d:17:9d:9c:8f:bc:0d:6f:48:de:ed:fe:9d:
4d:cf:5b:e7:51:d4:cb:96:5a:26:99:95:ff:5c:5a:66:03:a6:
31:88:16:e3:dc:e8:c4:ec:28:85:17:f8:90:b8:d6:97:a3:dc:
f8:d7:db:1e:df:9a:99:40:15:71:36:19:e7:88:db:7e:af:79:
a1:c1:82:d6:2d:7b:b7:dd:f9:8e:26:41:20:80:eb:4d:bf:22:
c2:87:6b:70:9c:74:59:75:3e:51:36:5e:4a:3b:53:5b:06:ef:
cb:55:d3:b0:1d:6d:a7:6a:1c:45:5d:6c:9e:1c:ca:d7:ef:f0:
24:3b:58:25:7a:8c:50:19:53:e1:8d:88:4e:8b:a4:85:c8:cb:
1d:cc:36:ce:41:97:c3:22:8d:8b:ab:ed:af:d4:76:72:06:83:
f3:af:1e:ac:98:5b:8d:1d:8c:cc:fe:35:17:d5:7b:65:72:ac:
bd:41:da:ce:94:6b:1e:d7:7b:c8:e4:f0:9e:82:3d:c7:cb:3c:
b0:3e:e1:43:50:56:60:d6:0d:8d:bb:2c:1c:0f:9b:63:48:b1:
4a:2c:f5:ad:fd:8c:40:de:4e:ff:d4:36:8a:8c:af:7f:be:26:
8f:d1:be:40:6c:06:d9:38:88:2a:40:66:75:9a:57:78:39:08:
d6:45:3e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org