Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/qLVzOrtRuiTHVOvCd2xirJtKIoc.roa
File: qLVzOrtRuiTHVOvCd2xirJtKIoc.roa (raw, json)
Hash identifier: mY54e60LWs2okPxtCrwjGk/mK2MMFW0EI7vmKFzoFdY=
Subject key identifier: A8:B5:73:3A:BB:51:BA:24:C7:54:EB:C2:77:6C:62:AC:9B:4A:22:87
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 42D1
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/qLVzOrtRuiTHVOvCd2xirJtKIoc.roa
Signing time: Tue 08 Feb 2022 00:30:05 +0000
ROA not before: Tue 08 Feb 2022 00:30:05 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17105 (0x42d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 8 00:30:05 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=A8B5733ABB51BA24C754EBC2776C62AC9B4A2287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:58:9f:7e:92:85:e3:40:f4:3c:22:9c:5d:91:
d0:e1:89:36:1d:d9:0d:74:ba:e4:54:29:e1:44:20:
31:ce:eb:35:3b:19:56:d1:62:76:81:88:97:02:8b:
3b:de:36:3b:11:22:b7:2e:46:d3:db:78:2c:3c:40:
0e:d7:c5:c9:3e:a9:d9:6e:44:88:e6:69:c4:3b:1e:
05:d3:c7:e3:05:75:dc:27:34:39:e1:ce:8c:5c:cf:
d8:03:f9:30:89:a2:69:64:a1:1b:2e:02:1a:fe:cf:
6f:d8:a2:ae:f7:30:10:04:42:68:d1:9c:ad:83:fc:
92:31:4e:6b:59:64:a5:0d:f6:e8:dd:0c:0a:f8:f1:
5e:4a:5b:c8:21:a1:e4:5e:be:ba:3f:34:81:b4:b0:
92:21:fb:7d:1e:dd:9f:37:17:50:eb:d0:f6:35:a1:
ab:06:b7:3b:de:96:96:2f:db:dc:8d:36:fd:94:88:
f3:3b:93:c0:f2:33:bc:61:e8:eb:3e:21:cf:78:d2:
18:10:68:44:ed:e5:4a:9e:6a:9c:db:c3:04:a8:30:
73:c2:a0:28:1b:d2:59:ad:f1:2f:47:31:05:b5:7a:
3f:50:80:02:ac:f3:68:dc:4e:11:3f:4f:51:c9:5b:
d5:b0:52:f4:2c:5b:86:58:ee:ce:ff:eb:7c:6f:a6:
c9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B5:73:3A:BB:51:BA:24:C7:54:EB:C2:77:6C:62:AC:9B:4A:22:87
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/qLVzOrtRuiTHVOvCd2xirJtKIoc.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:42:1d:87:83:96:f9:81:0f:be:d0:93:37:c7:90:59:b9:3e:
6d:09:32:ce:6b:d8:f4:11:73:b0:06:2a:9a:35:4e:2c:28:24:
a4:9b:48:f5:9e:2f:77:c8:c5:74:5f:0c:eb:36:cd:83:ed:f9:
a2:2f:4f:b6:93:0e:1a:c1:80:c3:09:5f:75:3f:3c:61:93:b7:
8f:6e:d2:bb:27:54:63:57:b1:9e:b6:a1:d5:aa:2d:2e:49:9b:
8a:a2:2f:bf:6d:1b:46:af:93:0d:6a:8b:62:f2:2a:fe:9c:3a:
f7:34:3b:d4:00:fa:61:c3:e5:41:1a:8f:0a:6c:c4:6e:35:65:
75:75:a6:2e:36:52:a5:c8:91:8b:b0:59:3c:d7:bd:dc:9e:c5:
33:9f:bd:33:8e:f1:c0:65:aa:ed:89:8d:4c:6d:51:c0:a2:d0:
ba:47:2d:e1:99:83:30:c8:3c:fd:52:b2:a8:58:b5:1e:ea:0a:
b1:94:d0:51:97:f6:99:86:f9:47:f3:0c:d7:b8:97:82:85:89:
97:b2:c2:83:de:e5:c0:f2:6a:c0:b5:4b:1f:b8:1a:fe:8c:12:
80:44:5d:6a:53:2a:88:fd:3e:9c:6e:c5:f8:96:fb:ff:5d:e0:
c7:c8:ce:09:2c:76:71:1e:e1:e0:b9:9f:99:e9:a4:74:25:ca:
5c:6f:ce:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org