Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/s8H5h8_r1_ksPAMAeJDaUSv0j-g.roa
File: s8H5h8_r1_ksPAMAeJDaUSv0j-g.roa (raw, json)
Hash identifier: 9xBGEu0RF2qZkPRhPSuPEtzkQWQ6oPzwtvJNMQmOCkQ=
Subject key identifier: B3:C1:F9:87:CF:EB:D7:F9:2C:3C:03:00:78:90:DA:51:2B:F4:8F:E8
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 443C
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/s8H5h8_r1_ksPAMAeJDaUSv0j-g.roa
Signing time: Sun 06 Mar 2022 00:30:11 +0000
ROA not before: Sun 06 Mar 2022 00:30:11 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17468 (0x443c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 6 00:30:11 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=B3C1F987CFEBD7F92C3C03007890DA512BF48FE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9a:4f:6f:cb:84:88:0e:14:e5:3f:c3:63:70:
14:7c:fe:09:82:03:af:1f:9a:46:2d:38:9b:e0:46:
f7:be:ac:f3:7b:56:d1:03:8e:d7:6e:72:cc:27:13:
22:e3:75:2e:ae:37:87:bf:7f:93:5a:56:1a:07:5d:
8c:ee:b5:c2:5c:25:78:56:2b:b0:ce:f9:6e:ca:d6:
ae:8b:e0:d0:0c:73:0c:9f:04:1b:03:d4:ac:98:92:
4d:85:25:ce:f2:88:2b:96:e9:fc:cf:39:e1:fe:f4:
39:30:5f:c6:ed:61:81:91:93:60:95:b4:9f:cf:02:
30:94:72:91:af:c3:3b:f7:55:e1:aa:09:0c:dc:f7:
c5:c1:89:31:e7:63:ad:e2:bd:2e:fe:8a:f4:bd:1c:
4b:e5:d7:4a:2d:c9:51:58:0a:8c:58:b4:d9:23:f8:
d3:cd:ec:5a:10:d5:5f:84:69:86:86:b4:5a:9e:50:
89:8a:c1:f7:f8:57:1e:23:71:72:71:f7:09:b0:70:
06:af:9f:97:6e:21:a6:9e:41:5b:83:32:69:df:20:
7a:76:be:01:4b:02:c2:de:66:e3:b1:63:ca:de:7f:
e0:47:cc:6f:06:c1:a7:bb:88:4f:f4:62:aa:3d:49:
e0:e3:49:b1:4a:af:85:11:2e:e2:01:23:a0:24:6b:
60:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C1:F9:87:CF:EB:D7:F9:2C:3C:03:00:78:90:DA:51:2B:F4:8F:E8
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/s8H5h8_r1_ksPAMAeJDaUSv0j-g.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:73:9b:0e:88:96:cb:cd:3d:0d:f2:88:41:6f:fc:a9:1d:b8:
40:ad:07:60:5d:57:9d:0f:7a:05:d3:4a:49:ec:8a:c0:5b:10:
e6:97:e1:3c:44:31:f6:19:04:7c:72:a3:d1:b6:95:f4:a2:3d:
1e:5b:a9:56:59:c4:e8:39:59:41:3a:12:9e:55:ad:55:f1:45:
ae:1e:fc:ae:01:3b:d0:88:c1:09:6a:f7:70:38:4e:42:6d:65:
84:41:68:84:8f:ec:b2:79:22:40:66:0b:54:bf:ff:d6:c3:75:
cf:a0:35:f5:aa:5c:a6:41:5c:b7:37:01:89:c8:2c:88:8a:69:
30:4e:d4:4e:82:b4:18:8d:6c:c2:58:36:2e:78:72:aa:db:99:
19:5b:76:5b:64:cb:73:13:9e:cb:42:a2:f7:4f:af:9a:dc:bb:
0f:4f:f9:73:17:70:1a:a4:2f:f1:f4:12:2c:4f:62:12:dc:38:
86:65:3b:f9:af:fd:61:b6:93:af:28:24:d2:37:75:3b:b0:1c:
f5:69:af:7a:f4:47:ca:e1:2d:9a:33:58:3b:9d:3c:ce:65:b2:
b0:66:56:5a:42:15:a9:45:97:9c:4d:c7:ac:9d:7e:fb:b1:9c:
4e:70:36:34:d4:b2:59:c8:b2:19:8d:6d:20:1d:7d:80:41:22:
da:bc:e1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org