Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/2Rd0CdM3OBtSXx0LjeE47uukzbQ.roa
File: 2Rd0CdM3OBtSXx0LjeE47uukzbQ.roa (raw, json)
Hash identifier: fZS/p9Tub+uoHpWhSgoWfcb4tfJuQjnBR47XECUrSss=
Subject key identifier: D9:17:74:09:D3:37:38:1B:52:5F:1D:0B:8D:E1:38:EE:EB:A4:CD:B4
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4665
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/2Rd0CdM3OBtSXx0LjeE47uukzbQ.roa
Signing time: Fri 15 Apr 2022 00:30:07 +0000
ROA not before: Fri 15 Apr 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18021 (0x4665)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 15 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=D9177409D337381B525F1D0B8DE138EEEBA4CDB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c5:da:6b:21:72:66:b9:3b:e6:67:93:08:04:
3e:cc:ee:bf:a6:06:b2:45:c1:09:dc:9b:a7:ac:7f:
d2:d8:ab:cf:4c:51:44:c9:c1:8d:8d:ae:04:c6:71:
c0:4f:32:17:a8:49:60:82:01:a2:e9:dd:3d:26:1c:
ce:e9:6a:12:8a:d3:52:51:b0:f2:b2:70:7c:7f:90:
b2:a0:71:f7:66:71:71:a8:ef:ee:73:e0:f0:87:19:
f2:69:c6:8e:e8:3b:52:88:d1:cd:8a:fb:1b:05:bc:
48:3a:64:fc:38:71:1f:a0:64:8e:c1:8a:97:6f:09:
da:34:40:b6:2d:47:30:8d:a3:37:68:00:ee:f1:15:
5e:8a:96:88:37:3a:d0:5b:d5:88:f9:0b:af:f9:14:
90:26:27:ae:57:fa:cb:e9:43:90:f0:e3:0b:72:ff:
c4:39:54:22:ef:e5:50:55:7c:21:70:f6:19:e1:52:
93:39:9b:35:a7:6c:91:70:31:df:91:6f:92:e8:0a:
da:bc:5a:6b:2b:a9:e0:7b:d4:13:e6:66:91:03:c2:
67:48:19:6b:4d:e5:7a:b3:b4:0f:ac:64:1a:1f:c8:
b5:2f:dc:c2:72:a5:5f:5e:56:25:8b:a2:5c:3e:b2:
b1:5a:92:85:76:ec:67:54:ac:02:b1:ea:f8:0b:45:
49:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:17:74:09:D3:37:38:1B:52:5F:1D:0B:8D:E1:38:EE:EB:A4:CD:B4
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/2Rd0CdM3OBtSXx0LjeE47uukzbQ.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
35:ef:96:42:6c:fe:bf:3d:ce:15:52:20:87:6e:4c:4d:fb:5d:
b4:4a:91:4f:1e:07:69:02:1d:88:0c:d6:8c:fc:f3:a8:f2:07:
2a:36:a3:bc:63:f7:61:40:13:b5:17:6c:a6:46:01:36:f2:9d:
f3:9e:e0:48:a8:d4:d1:a0:a8:4c:cd:14:d4:0d:c2:95:ee:c6:
f7:26:a2:1b:22:fa:8d:34:8b:b3:e5:dd:54:92:10:76:99:25:
d4:96:cc:54:44:f3:32:e6:97:5d:f0:0b:65:fe:f4:50:bd:20:
5c:8c:74:2f:cc:c1:9b:3c:6e:a4:8c:62:50:01:17:62:8d:ac:
1e:d8:86:5b:b8:d4:1d:db:b2:fa:4f:76:f1:94:af:ea:83:95:
6f:88:f4:77:48:f4:30:44:72:91:c4:4d:e4:1f:a8:05:10:fa:
84:b4:23:34:5c:ca:bd:b3:86:a9:01:c1:4a:38:4d:ea:3c:b0:
ed:4a:f6:ec:07:ba:a7:00:e4:54:33:56:53:18:8f:66:6f:de:
6e:80:64:ad:ff:df:19:76:b9:6e:e0:6b:93:50:ea:4c:8a:40:
fe:62:09:5e:d8:4b:18:f9:7c:92:aa:60:d7:f7:08:3f:97:12:
81:43:8a:63:75:32:5a:82:72:02:ee:63:20:d1:1a:98:48:a4:
ef:2d:a4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org