Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/ySerdJlmN0OAwDFkM4wb_6i65v8.roa
File: ySerdJlmN0OAwDFkM4wb_6i65v8.roa (raw, json)
Hash identifier: eJmgaZ1E+fJFXQZHLpU5Idtn4ALyRtR2HaUK+Zw7UKY=
Subject key identifier: C9:27:AB:74:99:66:37:43:80:C0:31:64:33:8C:1B:FF:A8:BA:E6:FF
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4427
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ySerdJlmN0OAwDFkM4wb_6i65v8.roa
Signing time: Sat 05 Mar 2022 00:30:06 +0000
ROA not before: Sat 05 Mar 2022 00:30:06 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17447 (0x4427)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 5 00:30:06 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=C927AB749966374380C03164338C1BFFA8BAE6FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a2:35:5d:98:34:48:81:d0:59:cd:1e:e1:01:
eb:a0:ba:2c:2f:2c:96:20:08:c6:32:f6:c6:eb:1b:
1e:77:fb:b8:70:38:58:c9:1b:56:34:70:fc:62:15:
d3:62:b7:c3:b9:02:11:02:b8:f1:58:26:aa:81:7f:
ba:9a:1b:19:3e:f0:ca:04:06:84:0a:6d:e6:c6:17:
f7:0e:1d:5a:54:3f:10:6e:60:0f:22:e7:a8:47:2f:
60:33:bc:6f:13:61:64:3d:8d:54:be:06:01:f3:fe:
33:de:34:9c:da:f7:52:8b:55:e9:4b:50:5e:66:5b:
a1:0c:ff:54:0b:43:2c:83:36:33:ad:7d:71:98:7a:
fc:d3:2e:b8:93:53:ba:7c:23:84:14:2b:a6:90:f8:
e7:68:ea:c3:f5:ce:b8:70:f0:2e:f4:42:af:59:06:
d8:42:c9:79:6d:05:da:cd:7e:47:a2:4e:b9:f9:a2:
23:db:fa:38:6d:e3:14:7b:9d:8e:2d:09:2f:94:2e:
76:9f:cb:32:d6:55:2a:eb:35:3d:0d:31:64:b1:42:
f5:1c:8a:0c:15:dd:f9:37:95:23:10:de:4d:a3:a0:
ff:51:88:e6:e6:24:45:e9:8b:c3:33:fc:d1:1e:e6:
51:ee:73:da:18:e3:e4:8a:e8:0d:43:a7:e9:2c:d9:
1f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:27:AB:74:99:66:37:43:80:C0:31:64:33:8C:1B:FF:A8:BA:E6:FF
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ySerdJlmN0OAwDFkM4wb_6i65v8.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:ab:03:8c:19:86:23:da:37:13:82:42:26:18:0c:75:fa:cc:
9d:fe:64:d3:29:7f:e3:00:7a:8d:b0:31:a1:2e:8d:38:29:5c:
64:ad:86:1f:70:cc:f8:17:c3:ac:6c:2b:00:86:da:cf:61:d4:
f4:fa:bf:f5:60:39:e1:b6:06:bb:90:72:76:08:e6:94:72:dc:
62:98:bb:ad:5d:dd:ae:34:ac:75:c3:56:05:a5:a6:25:cf:e0:
3d:e9:bc:31:62:08:32:fa:a3:ab:7a:30:d6:ba:2d:63:63:9e:
db:4f:e8:26:1c:20:9f:f4:ee:30:63:12:a4:9e:4a:05:72:75:
bf:9e:1c:07:06:07:00:c3:d7:7a:e3:c4:e5:c0:97:f9:6e:03:
55:71:40:58:73:47:e5:67:3d:e7:5c:2f:97:e9:da:f0:13:38:
ec:89:f2:24:17:81:03:1e:44:ea:12:2f:90:b3:7b:50:0d:06:
28:51:a6:ab:2b:62:e2:46:85:36:13:db:0c:2b:37:b3:44:fc:
f1:1f:c1:e2:12:eb:41:72:7d:05:0b:ea:f2:7c:1b:b3:58:a3:
69:dc:6e:8c:65:cf:7f:0b:f3:09:40:16:fe:af:df:de:13:6a:
3f:7b:89:b9:7d:58:01:22:23:87:ec:54:c6:f3:ef:b0:c3:bd:
9b:d1:a0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:53 2023 by rpki-client on console-ams.rpki-client.org