Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/viKkcpRvhVIP0OM6YDjxJ97LWFc.roa
File: viKkcpRvhVIP0OM6YDjxJ97LWFc.roa (raw, json)
Hash identifier: kCJZoatTPtQhOWhRWsy0X1EHmSvhxYdz7l1UN3gsDVo=
Subject key identifier: BE:22:A4:72:94:6F:85:52:0F:D0:E3:3A:60:38:F1:27:DE:CB:58:57
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4457
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/viKkcpRvhVIP0OM6YDjxJ97LWFc.roa
Signing time: Tue 08 Mar 2022 00:36:44 +0000
ROA not before: Tue 08 Mar 2022 00:36:44 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17495 (0x4457)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 8 00:36:44 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=BE22A472946F85520FD0E33A6038F127DECB5857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2f:b6:b7:34:00:a9:b2:0b:4c:e6:df:d5:a7:
87:7d:1a:88:1a:b2:51:16:cb:95:b6:86:91:72:0d:
86:20:1b:32:5e:ac:9c:5a:23:e5:0a:79:08:d2:35:
0a:25:c8:7f:b2:87:65:e6:1a:6e:9e:1e:7d:3a:35:
c9:be:c9:07:27:2d:d6:cd:51:fb:45:42:7a:32:88:
6a:8f:5e:e3:93:79:8e:04:73:46:82:1e:35:33:4b:
bd:86:d0:0c:f3:e7:f9:46:6c:2b:5b:eb:1a:0b:f9:
61:b8:c5:e5:97:e9:90:1d:07:ef:b5:e1:45:4f:b1:
a4:8a:40:f5:d5:05:0d:c3:b4:8c:c8:6e:e5:a4:6a:
c7:da:2a:ab:2a:9e:9c:37:8a:ad:de:93:b3:b9:50:
58:61:cb:0d:eb:08:d0:00:ef:da:32:39:c4:c2:16:
71:23:9d:2c:d7:72:32:69:8d:5b:ed:02:44:7e:b4:
9b:05:51:35:1e:80:b0:48:17:ee:23:52:70:53:a3:
e4:34:13:c4:ab:4d:dd:46:0f:ef:df:3a:b5:b0:a0:
ff:9e:4e:d1:bb:65:ac:f0:10:29:13:b0:62:87:b4:
9e:84:63:eb:f6:7d:25:6d:c6:fe:b5:b9:af:60:dc:
17:5e:a7:5e:1c:83:24:ec:74:8b:42:b8:ce:41:91:
41:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:22:A4:72:94:6F:85:52:0F:D0:E3:3A:60:38:F1:27:DE:CB:58:57
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/viKkcpRvhVIP0OM6YDjxJ97LWFc.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
10:47:80:ff:08:b1:97:38:8a:c8:53:2d:f2:11:6c:e7:45:41:
ea:a2:b4:89:b2:dc:f3:cd:48:73:3c:eb:08:37:fb:00:f1:0f:
03:12:c3:a8:4e:2a:4d:96:e8:f7:2c:a0:d6:61:1a:48:89:95:
9c:c3:c7:18:cb:9c:05:d9:c4:a4:ca:b0:78:5b:03:67:88:e5:
68:17:d7:1e:d8:40:39:d8:f4:80:7e:99:d4:20:4a:69:f1:be:
94:77:15:78:a0:d8:2a:46:02:99:70:37:d9:34:2e:3e:d1:26:
ca:b8:e2:b1:61:f3:e6:cf:32:55:dd:af:6a:34:e5:03:af:fb:
58:7a:4c:28:88:3e:57:e3:fd:b7:d1:11:ef:29:a9:29:3b:78:
a8:94:4c:5c:d3:86:b9:44:c8:fb:15:c5:08:f0:ce:d4:4d:8a:
fa:21:9f:f0:0a:13:e2:cd:55:07:52:b4:bc:6b:11:ca:c1:b6:
f5:55:b1:21:7a:88:6f:99:15:73:e9:36:fa:0b:e5:7c:00:02:
93:8d:a6:c9:0c:bb:55:0e:bd:64:8a:b9:eb:6d:78:fa:a2:bc:
3e:e7:1a:d7:56:3d:b7:1d:6c:c2:9d:e5:4c:d5:9a:b9:a0:16:
a5:96:8f:3e:fd:5f:31:a3:a1:c6:d6:40:09:f9:9b:df:74:38:
dd:96:3b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org