Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/-Ro0WXSsZrn8mCNKvfn6Cmo5zaM.roa
File: -Ro0WXSsZrn8mCNKvfn6Cmo5zaM.roa (raw, json)
Hash identifier: LQFDkq5xlPlvps6WUTS0HaK8ENhwuDlF4baU3M3VLaw=
Subject key identifier: F9:1A:34:59:74:AC:66:B9:FC:98:23:4A:BD:F9:FA:0A:6A:39:CD:A3
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 484F
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/-Ro0WXSsZrn8mCNKvfn6Cmo5zaM.roa
Signing time: Fri 20 May 2022 00:30:07 +0000
ROA not before: Fri 20 May 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18511 (0x484f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 20 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=F91A345974AC66B9FC98234ABDF9FA0A6A39CDA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8c:1e:78:08:ad:4b:5d:4a:38:4b:83:5b:3d:
9d:3e:1c:d0:0e:22:e6:45:75:07:11:e3:1a:f8:82:
e0:3c:0c:d3:b4:7e:a7:b5:90:5a:ce:c2:04:59:35:
5d:dc:24:c5:77:5e:22:07:32:c5:66:15:cd:0a:c8:
7a:2b:fb:78:8b:24:88:c1:32:6d:51:ae:2e:4c:36:
e6:aa:b9:7a:bd:c8:0a:a1:ae:cd:e1:1d:8c:a0:94:
b8:67:ef:04:61:e5:ee:6a:81:5c:a7:a9:ce:c0:b9:
83:c1:dc:bf:a7:ba:74:31:49:7f:57:cc:ae:66:7e:
ca:c2:b7:3d:22:e0:b3:80:5d:a1:f7:4d:3a:bc:ff:
08:ff:d2:e3:0b:47:75:6d:b8:a4:c8:bf:3c:85:6a:
a4:74:51:50:64:91:f7:80:1b:50:df:fb:a7:e1:4d:
bd:81:28:e7:84:4d:1e:de:f9:5f:e6:cd:85:53:4a:
75:e6:49:55:38:c1:51:4c:a1:c4:22:02:b1:f0:29:
96:9a:6b:11:d0:6d:51:c8:4e:a5:43:ec:f0:8c:dc:
a6:f4:10:d4:76:1c:1e:96:e4:01:74:c6:de:d9:ca:
c0:27:27:79:bd:1e:0f:cb:b2:38:0a:08:20:2c:6a:
63:48:73:87:cd:c3:df:95:49:79:af:2e:5f:69:ad:
8e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1A:34:59:74:AC:66:B9:FC:98:23:4A:BD:F9:FA:0A:6A:39:CD:A3
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/-Ro0WXSsZrn8mCNKvfn6Cmo5zaM.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:71:ff:0c:01:cd:d3:d3:10:67:a8:72:ee:7f:54:e9:45:a0:
07:ce:dd:77:8f:e2:26:d8:dd:86:1b:3b:70:03:ef:da:aa:f8:
1a:4d:68:f2:89:96:d1:45:d9:c8:49:b6:0e:7a:f3:54:5f:95:
c4:ad:23:cd:56:0e:94:41:c6:76:42:1a:81:72:5c:68:67:59:
d6:92:17:44:ee:32:69:be:d6:a8:21:14:ab:3a:b7:0b:cb:92:
52:03:3e:f1:f9:4f:5e:3e:7a:b9:11:a3:19:0b:81:0b:48:67:
ea:ef:b1:15:fc:83:4f:e5:9f:90:3c:d6:d8:43:3f:38:3f:63:
c4:24:3f:49:5d:5c:9d:aa:04:e3:d0:98:17:d7:ec:d9:e8:86:
b4:2a:53:b7:d5:4c:3d:fe:62:74:5a:3e:9c:f6:aa:6f:54:6d:
0b:a2:05:ca:be:93:7b:bc:a5:49:fd:54:e9:dc:50:51:49:9a:
0c:f4:d6:51:d1:eb:bc:42:1b:9a:f8:8a:27:57:bf:4f:60:73:
32:51:c9:1f:6f:87:92:62:83:82:f5:84:f9:0e:76:85:76:49:
b1:c0:1a:6d:06:d7:7a:70:c7:53:19:8d:fd:b6:35:d7:b7:c6:
a1:3f:15:54:46:bd:66:57:9a:b3:f6:fe:1e:e7:a1:19:b4:fb:
75:05:38:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org