Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/4Em-pXzRvsWtNt0VP_rMEg9FLII.roa
File: 4Em-pXzRvsWtNt0VP_rMEg9FLII.roa (raw, json)
Hash identifier: ce6nEnHkn4/Nsw17/NzIMTmXNXwcg3/LIcDsNw2srrY=
Subject key identifier: E0:49:BE:A5:7C:D1:BE:C5:AD:36:DD:15:3F:FA:CC:12:0F:45:2C:82
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 44E3
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/4Em-pXzRvsWtNt0VP_rMEg9FLII.roa
Signing time: Fri 18 Mar 2022 01:07:26 +0000
ROA not before: Fri 18 Mar 2022 01:07:26 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17635 (0x44e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 18 01:07:26 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=E049BEA57CD1BEC5AD36DD153FFACC120F452C82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3f:98:7f:d5:8c:81:84:73:bf:13:56:5f:63:
b6:c3:5e:93:a2:4a:15:bd:8d:be:23:71:68:fa:4c:
b3:52:67:74:73:5d:5e:1f:7e:59:d9:b7:fb:55:4f:
40:82:e8:f2:6a:6b:ad:b0:5b:a9:42:ab:43:2a:42:
f3:f9:32:63:5b:1e:e3:29:e5:79:31:e1:5e:85:4e:
08:1f:10:70:3a:89:6b:50:16:74:89:58:41:9f:a7:
bb:6a:0b:b1:9b:b6:4b:1c:df:c8:7c:9d:02:d6:81:
84:28:02:1d:1d:ca:3f:03:10:ee:10:39:bf:ac:7c:
0f:62:46:a9:99:5d:54:26:13:a4:d9:65:71:76:6c:
e6:7b:21:cf:a1:96:47:1e:85:19:54:63:f5:4f:cb:
51:84:27:af:b1:ae:6f:96:01:7f:e0:5b:84:0a:1e:
53:e0:98:b1:7d:cc:21:e4:9e:ac:1c:8a:80:dc:d5:
a9:6c:56:f9:2f:f4:dc:93:1f:a9:91:54:49:95:64:
29:36:0d:4c:7c:9a:e1:99:c6:31:b6:4d:2d:c9:c5:
0a:d8:2a:2a:a8:a1:df:78:5f:32:54:78:4d:f1:04:
a3:a4:5b:7b:66:12:a1:49:12:6d:db:7d:80:3f:84:
04:da:2c:98:7f:df:a7:7b:96:17:57:11:e5:30:3d:
c3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:49:BE:A5:7C:D1:BE:C5:AD:36:DD:15:3F:FA:CC:12:0F:45:2C:82
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/4Em-pXzRvsWtNt0VP_rMEg9FLII.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.14.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:28:34:bd:77:8b:b8:88:1c:cd:47:7f:51:9f:2e:51:79:3e:
6d:b7:8b:00:28:e7:f4:55:a1:e5:c8:46:ab:d8:c5:09:df:e6:
58:89:3a:b7:eb:4b:6d:3b:4e:4f:24:c1:3c:aa:f6:73:38:6d:
9d:c4:9d:52:2b:6d:9e:37:29:6a:cb:74:94:22:10:c1:d3:e1:
c0:f2:c0:2b:8e:c3:a9:5c:14:24:1f:ac:27:97:b6:67:dd:64:
51:ef:7e:6c:67:24:2d:2e:d3:c1:76:82:9a:ed:3c:11:6d:55:
41:a0:0e:38:9a:b2:09:3c:ed:8f:a5:98:6f:05:16:8d:30:a8:
9f:f4:8d:b0:54:1c:dd:21:9a:36:79:be:f9:53:e1:64:18:82:
73:90:98:be:f3:8c:44:d7:b6:e1:ce:62:77:47:c8:b7:c5:2c:
88:5a:87:43:79:20:3d:80:6f:0b:c7:49:5f:fe:58:d5:cb:0e:
fb:82:30:67:4c:eb:a4:74:15:7b:ad:0f:c7:ed:e4:f9:69:bf:
19:6a:d6:13:b1:ea:53:fe:59:37:a5:09:46:89:58:d3:2e:25:
05:cd:ae:bd:d3:cc:74:38:6c:ba:8b:3e:63:ed:d9:54:3d:57:
0c:b0:00:23:4c:20:25:f8:5b:ed:62:75:68:d5:c8:14:dd:4b:
32:a9:e8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org