Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/nzVH9ecGr9GQYm7ecM8kJnIYv_A.roa
File: nzVH9ecGr9GQYm7ecM8kJnIYv_A.roa (raw, json)
Hash identifier: WnEtg2ixXLfBBct2chaHBtloO2YlUW0trBtEF9SmT7A=
Subject key identifier: 9F:35:47:F5:E7:06:AF:D1:90:62:6E:DE:70:CF:24:26:72:18:BF:F0
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 42E0
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/nzVH9ecGr9GQYm7ecM8kJnIYv_A.roa
Signing time: Wed 09 Feb 2022 00:30:07 +0000
ROA not before: Wed 09 Feb 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17120 (0x42e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 9 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=9F3547F5E706AFD190626EDE70CF24267218BFF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ea:79:69:35:9c:7c:eb:e6:79:d6:f8:0e:4f:
58:e4:2b:83:dd:4a:96:ce:3f:13:b1:62:e9:55:bc:
ff:02:71:38:77:cc:b3:55:3c:6d:f0:63:52:2d:cf:
3b:ca:bc:e2:57:2a:b1:6d:1a:6f:61:44:ed:d9:47:
5f:fe:d0:d2:c7:57:22:4f:57:f0:4b:31:e9:05:af:
3a:54:aa:72:0d:70:df:c6:48:cd:9c:aa:1e:2b:ac:
d3:9c:63:1f:aa:e0:4f:a7:0a:3d:02:15:37:0f:33:
e8:50:46:f8:21:bf:9c:ec:7e:3b:1d:e9:d8:18:f4:
fc:18:1c:6c:9c:e6:74:e2:3f:fb:2f:45:80:3a:4a:
db:d8:16:38:04:86:f7:d6:0f:4a:f8:86:d1:bb:e3:
ab:a3:37:bc:e7:ee:3c:69:4b:e9:14:e1:38:c8:4a:
a9:7b:c6:5c:a5:02:32:d7:0f:55:e2:ee:92:6d:a4:
0a:a2:d6:88:4a:dd:21:4a:8a:cd:92:d3:d6:49:6d:
a9:9f:f0:fd:d2:4a:9b:59:70:82:80:bf:59:6f:11:
7c:19:f7:0b:10:a1:fe:0b:35:87:8d:e8:af:43:0e:
8f:28:34:07:63:fb:f8:c9:79:c6:ce:f7:c8:1f:32:
8d:7a:f4:a6:73:2b:90:9e:34:b2:e5:a6:9b:78:62:
e9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:35:47:F5:E7:06:AF:D1:90:62:6E:DE:70:CF:24:26:72:18:BF:F0
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/nzVH9ecGr9GQYm7ecM8kJnIYv_A.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
02:30:b2:3f:67:48:76:cd:34:74:c3:a7:ed:a2:4b:17:7c:77:
58:df:af:13:f6:5c:df:50:f4:41:d9:e5:7e:e1:38:e9:98:9d:
c3:3c:5d:41:9c:41:47:9c:5b:eb:db:70:ab:b7:61:65:a5:d5:
a1:f9:61:98:4f:8b:22:ca:be:b7:47:c3:b3:fd:9b:ff:6e:23:
17:38:73:76:3d:03:00:56:12:f1:de:df:d4:59:28:f0:b8:1f:
e4:8c:8b:7e:2b:c3:6b:89:03:3c:10:bb:c8:39:6e:73:0b:47:
26:55:c3:27:d6:f1:66:9a:d0:47:63:a3:c6:d0:e3:5d:2b:df:
78:b0:48:19:b3:df:2c:42:20:e1:7c:97:44:9a:ec:df:f9:de:
ab:1f:c7:42:c9:3a:4c:be:ca:ae:b3:92:51:0d:59:df:5c:b6:
d5:4d:57:a1:17:56:1b:b3:5c:27:a8:5f:95:72:5a:3d:07:d3:
71:36:57:4e:67:9d:33:61:b7:ff:04:0b:e9:26:44:9a:5d:08:
73:8f:61:67:2d:79:64:44:5c:c7:49:5a:34:49:01:fd:88:6b:
f4:1a:a5:21:54:bb:09:21:11:41:88:5a:72:54:38:1d:8f:ca:
bf:aa:69:e1:86:c6:a9:52:36:3f:49:c1:1e:c2:49:27:80:e4:
7e:94:ea:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org