Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/1pj8So2WlS7J1sgpj-onuM9EHqU.roa
File: 1pj8So2WlS7J1sgpj-onuM9EHqU.roa (raw, json)
Hash identifier: Hpqf8YUuMJKzL5LgRdCG2bD7HLkMGT20epMQQZcbGx4=
Subject key identifier: D6:98:FC:4A:8D:96:95:2E:C9:D6:C8:29:8F:EA:27:B8:CF:44:1E:A5
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4343
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/1pj8So2WlS7J1sgpj-onuM9EHqU.roa
Signing time: Wed 16 Feb 2022 00:30:08 +0000
ROA not before: Wed 16 Feb 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17219 (0x4343)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 16 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=D698FC4A8D96952EC9D6C8298FEA27B8CF441EA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:88:e8:0e:80:2a:24:f8:ae:d9:f9:0d:06:23:
52:3e:5a:8e:84:f7:11:d0:fd:6e:40:2c:3d:4c:6e:
b3:60:28:e5:51:1c:38:7f:c4:58:d8:3f:0a:65:a4:
69:ef:cd:f3:9e:0a:1d:3d:74:d9:8e:a0:a9:e5:c2:
74:05:4e:3c:14:52:c1:e3:7e:fb:14:9f:0a:6d:3e:
39:34:5e:4e:ef:a2:b7:25:99:82:f5:83:70:01:81:
e5:c1:c4:48:06:69:de:da:46:05:3c:72:d2:8e:36:
ef:28:12:18:b1:00:67:a0:65:f3:5f:2c:7e:8c:44:
1d:05:e1:11:7a:47:5f:8a:09:fb:00:91:08:e8:39:
f7:80:ff:68:31:25:33:65:fe:dc:86:75:6f:b9:19:
4e:a2:ec:9a:1c:59:5e:bc:c8:f3:03:02:eb:e2:5b:
8e:6d:3e:68:6f:b6:16:07:b2:3d:b2:a3:74:eb:15:
e9:f9:3f:52:92:25:48:11:a2:e8:78:a6:58:e0:2d:
38:bb:ca:aa:cc:e6:a9:08:77:3c:bd:b6:2c:51:c8:
9e:c2:ea:0e:bc:7a:37:4b:c2:03:54:dd:c0:63:3c:
96:3a:f9:04:95:66:b3:fa:ea:5d:bd:bf:c3:ff:9a:
64:b6:77:c2:f7:8b:82:08:2e:d3:18:50:8c:e2:8b:
8f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:98:FC:4A:8D:96:95:2E:C9:D6:C8:29:8F:EA:27:B8:CF:44:1E:A5
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/1pj8So2WlS7J1sgpj-onuM9EHqU.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
26:41:4d:ba:ad:7a:3b:c3:f6:e1:4b:d6:34:9e:10:3a:6d:13:
ba:07:6e:6f:82:9b:19:6c:b3:91:12:f9:47:06:f2:fc:36:97:
78:46:2b:2d:34:72:cd:fa:a8:e5:1c:5c:fd:07:7e:19:64:c8:
97:42:cd:53:51:28:78:c5:95:ff:8d:94:c2:c7:bf:82:02:b2:
3c:a9:ee:f7:e5:f1:bf:41:cb:ca:f4:31:64:c2:19:23:1c:50:
f6:13:cc:8e:91:44:44:c3:cb:04:61:5c:0e:58:46:e0:17:03:
d0:05:f3:2b:fc:61:38:a7:d3:f6:43:e9:f4:54:82:5d:20:1a:
8f:69:d6:77:df:1c:9c:14:a3:6d:d5:51:f2:29:4c:24:60:13:
a1:fd:ae:0d:04:97:8a:f6:e1:7a:1a:0e:f2:f6:6b:9c:59:a6:
53:76:bd:f8:46:ce:46:fd:7f:af:9a:dd:54:c4:6c:c0:d2:86:
fc:51:95:97:7e:58:d7:8b:05:1b:2d:03:17:34:31:e9:49:2a:
44:8a:50:5f:17:a2:62:ab:5e:5d:54:3c:84:13:b9:75:1a:68:
4a:3a:08:22:f9:0a:97:fb:f1:27:53:9e:4b:db:08:99:6f:54:
bc:4c:0d:0c:3b:27:8c:29:2d:1a:04:c9:79:77:7b:dc:66:db:
d9:f6:9f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org