Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/q0p_a2S_qVHFhCSDVv2g1nrr2Kg.roa
File: q0p_a2S_qVHFhCSDVv2g1nrr2Kg.roa (raw, json)
Hash identifier: w98kXseQuQMQ47Kbzc2sWTiiIErGThAmyznwXZwxTRY=
Subject key identifier: AB:4A:7F:6B:64:BF:A9:51:C5:84:24:83:56:FD:A0:D6:7A:EB:D8:A8
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 428C
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/q0p_a2S_qVHFhCSDVv2g1nrr2Kg.roa
Signing time: Thu 03 Feb 2022 00:30:08 +0000
ROA not before: Thu 03 Feb 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17036 (0x428c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 3 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=AB4A7F6B64BFA951C584248356FDA0D67AEBD8A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:84:91:75:e7:2e:ab:f6:c1:a5:ab:6d:6d:44:
ed:ef:23:cc:54:cf:e4:01:72:65:55:33:37:c8:d1:
f9:de:93:9a:74:9b:cd:48:27:3e:b3:89:bf:e2:d7:
95:a0:8a:64:0b:75:78:5a:ac:f8:1c:fa:4b:e1:40:
cb:cf:c3:77:bc:94:5e:3d:e1:1f:e9:75:4d:53:f9:
36:39:53:4c:78:d6:79:64:a8:72:38:01:40:51:42:
78:00:bf:f2:6f:69:ae:80:56:9f:1a:82:ed:30:57:
2c:8f:5d:89:d3:37:bd:70:70:4a:67:a4:59:9d:3b:
b9:b8:b7:69:d1:11:fa:d8:dc:d0:c9:e5:57:ff:05:
ed:30:32:4d:a6:e0:f3:b3:37:e7:e7:63:fb:9e:e9:
83:98:a6:83:98:6c:2c:8b:a6:0b:2a:74:5e:21:16:
c9:e9:76:fa:f4:7f:e6:3f:d8:7d:79:a8:3e:2d:66:
98:78:c6:00:35:98:3e:82:33:6e:eb:12:05:aa:df:
14:40:d2:b9:4f:0f:d7:81:49:be:79:2f:3f:d8:2c:
6a:ab:1a:18:69:b9:fc:ce:56:ba:c5:59:fe:2a:f4:
1c:93:0c:0a:90:c8:10:d3:65:5f:26:c3:41:e8:3b:
6e:43:4b:2b:3e:17:65:41:cb:c2:4c:87:6d:9f:2d:
b9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4A:7F:6B:64:BF:A9:51:C5:84:24:83:56:FD:A0:D6:7A:EB:D8:A8
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/q0p_a2S_qVHFhCSDVv2g1nrr2Kg.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
76:2f:41:15:21:c9:21:cb:f9:0b:e2:b1:08:c4:75:4c:7d:a3:
20:a2:82:d3:df:84:59:f3:4a:c0:e6:dd:33:b7:6c:54:a2:eb:
48:3b:40:e9:b6:13:13:1e:78:83:55:0c:c9:7c:bd:8f:d2:9b:
05:49:56:c9:30:6d:92:77:42:40:d8:2d:1c:e5:28:9c:8c:f1:
42:76:36:4b:f2:9b:54:e6:af:49:b3:c6:b3:98:ae:5d:93:35:
77:a6:90:d6:91:1b:37:8e:b3:62:39:d5:65:03:10:81:5e:ae:
28:f4:00:4b:76:d9:18:9f:b6:ea:2f:1b:20:4f:01:9e:f5:46:
ea:8c:db:d0:29:d3:f6:3d:90:ad:8d:01:e8:19:07:31:37:a5:
57:d9:65:84:a2:b3:29:34:ce:05:1c:d8:87:86:cf:62:95:2d:
e3:86:26:eb:71:6c:14:15:8e:ca:0f:70:c2:12:e1:96:85:04:
62:b2:ae:24:e9:94:32:fd:dc:53:1b:82:fa:ce:2f:5a:6a:b0:
8a:4b:a8:10:17:16:55:72:4c:45:8e:ee:cd:a9:75:c1:e8:a1:
09:8b:73:34:1f:4c:8c:6d:4d:23:01:19:68:c9:ab:4d:4c:9b:
f4:a8:78:9b:db:7d:e2:9f:9f:79:0d:a7:15:67:b0:bf:0e:d5:
eb:2f:50:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org