Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/-Qb7lyL0Ftt7jN1ICg2gHgKK7uw.roa
File: -Qb7lyL0Ftt7jN1ICg2gHgKK7uw.roa (raw, json)
Hash identifier: z+p8MrQbB7s4zKEBk42wBlCkkhT7WSulMgY5A2Qn4j8=
Subject key identifier: F9:06:FB:97:22:F4:16:DB:7B:8C:DD:48:0A:0D:A0:1E:02:8A:EE:EC
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 45D9
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/-Qb7lyL0Ftt7jN1ICg2gHgKK7uw.roa
Signing time: Tue 05 Apr 2022 00:30:05 +0000
ROA not before: Tue 05 Apr 2022 00:30:05 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17881 (0x45d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 5 00:30:05 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=F906FB9722F416DB7B8CDD480A0DA01E028AEEEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:79:ee:81:bb:7f:f1:85:ad:bf:cd:60:f1:ae:
57:06:e5:6c:b8:2a:ae:0f:3f:80:ee:35:5e:16:37:
22:d9:16:54:7f:44:49:82:26:8e:a1:7a:b6:4d:dd:
40:74:af:9b:e1:e6:5c:fb:48:4e:7d:c5:ac:d6:63:
38:12:0d:5c:a1:da:99:81:0b:0c:56:f3:0a:84:24:
48:59:3d:02:dd:87:d1:4a:b4:83:47:52:b6:f4:81:
78:70:d8:41:d6:d9:18:de:60:da:66:c2:b0:3a:0f:
bf:cf:f5:5d:fc:61:13:9c:2b:c1:c5:35:32:00:d5:
39:34:bd:b4:84:22:d1:21:e0:b0:9a:d2:45:af:15:
0c:fa:ab:e8:31:47:54:ec:4c:ad:27:d4:b6:32:bb:
4f:a3:16:2f:d0:a0:b7:0b:0a:7d:79:36:dd:f3:01:
9a:0e:9c:4a:17:ec:02:84:00:d8:65:ff:1b:2a:44:
b5:0a:0d:3d:3a:0c:73:6a:71:31:ef:1e:e0:b6:81:
ad:6f:91:dd:1e:40:37:35:b5:8a:37:8e:9d:ac:c8:
81:f4:c7:53:df:5c:d6:73:89:5e:5a:60:5a:06:18:
d3:5e:46:f7:1d:db:0b:9f:c6:9a:e0:e7:e6:7c:a4:
6d:91:10:0a:1f:27:e8:d4:46:b2:13:6f:ad:60:1d:
1b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:06:FB:97:22:F4:16:DB:7B:8C:DD:48:0A:0D:A0:1E:02:8A:EE:EC
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/-Qb7lyL0Ftt7jN1ICg2gHgKK7uw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:d1:49:a8:9d:1f:a3:44:f0:9e:b9:a3:31:bc:41:f3:8a:22:
7c:13:de:ec:91:55:29:17:78:87:5b:91:05:65:26:a6:04:53:
2c:d2:0a:0d:be:20:9e:fe:b2:db:65:a3:28:c8:9c:18:ab:db:
6e:72:b8:d9:5b:1f:c4:58:d9:69:d0:bf:50:ea:a0:4f:e2:f2:
88:5d:00:95:06:4d:44:94:c4:43:7a:a7:11:aa:1d:b8:ef:50:
04:22:ce:37:1b:d8:b4:2f:39:8a:df:ec:c8:37:6d:12:46:b6:
44:9f:20:db:21:37:44:23:25:90:b8:e4:2c:63:9b:f2:41:fb:
e9:90:fe:ad:5e:7b:02:23:ec:3f:19:3e:53:68:19:20:6c:d0:
74:57:f8:27:b9:10:d2:c3:fa:a7:d3:06:48:79:1d:ff:d9:b0:
fc:34:5d:fe:69:53:0f:0e:7c:6e:77:ac:68:2f:73:d6:f4:a0:
0e:b4:cb:56:08:87:32:bd:f7:6f:4b:b2:ea:78:bc:f6:31:d1:
1c:ff:cd:cf:c5:57:d9:19:4e:36:0a:d8:78:3a:09:85:e3:09:
2e:f6:6e:06:f6:d1:1f:0b:61:93:37:b0:5f:17:7e:67:bb:e0:
01:f8:a7:80:74:62:ad:85:b4:53:b1:1e:3d:13:4e:4c:0e:45:
94:3f:a6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org