Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/4Yj9ws3O4h1x5WoFiztKq0yV768.roa
File: 4Yj9ws3O4h1x5WoFiztKq0yV768.roa (raw, json)
Hash identifier: mi5tzQP/BmGmliBue1WPiY//CN3fpzWak7DXJl0uSyQ=
Subject key identifier: E1:88:FD:C2:CD:CE:E2:1D:71:E5:6A:05:8B:3B:4A:AB:4C:95:EF:AF
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 495C
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/4Yj9ws3O4h1x5WoFiztKq0yV768.roa
Signing time: Sun 05 Jun 2022 00:30:06 +0000
ROA not before: Sun 05 Jun 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18780 (0x495c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 5 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=E188FDC2CDCEE21D71E56A058B3B4AAB4C95EFAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:67:e8:08:c5:a6:83:35:a7:ff:b7:d8:f8:7a:
29:25:00:25:a7:b7:8f:c2:80:9a:99:25:ed:47:69:
29:2e:d7:de:8e:b4:6d:30:75:5c:ba:ec:d7:07:3a:
d5:f4:23:bb:e0:1e:3e:23:78:9c:d3:a2:b0:7c:d9:
4f:6c:c2:fe:de:66:94:e1:e2:17:27:ce:c9:e9:95:
a5:1d:08:06:6d:60:c4:ff:8d:80:0c:f0:4d:84:ca:
5f:e5:1d:d4:e0:6a:94:9c:af:c8:69:1b:d2:fd:5d:
b8:7d:2e:0c:7f:23:a9:f2:eb:33:fb:41:28:da:35:
2b:08:9c:38:35:4b:24:78:02:2f:22:11:e3:1e:95:
98:25:80:c6:45:91:ad:ed:16:72:96:0d:ba:f7:17:
0c:5a:8d:6b:31:f2:47:e9:38:15:bc:52:00:ac:7d:
5c:37:e2:48:c7:d1:ea:49:f8:e9:91:76:cc:1c:0c:
12:d1:e1:5a:06:6e:c4:28:97:54:71:b9:6b:34:9c:
6c:bb:00:ac:ab:64:67:d8:ab:f8:c1:11:47:b7:73:
d3:a7:9f:5f:07:46:3e:18:e6:3f:42:d1:e3:da:53:
f6:5e:ce:16:cc:ab:da:80:54:d4:4c:72:e7:db:ca:
83:a8:8e:54:3f:21:66:b5:9c:62:1b:ae:8f:9d:f3:
88:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:88:FD:C2:CD:CE:E2:1D:71:E5:6A:05:8B:3B:4A:AB:4C:95:EF:AF
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/4Yj9ws3O4h1x5WoFiztKq0yV768.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:c2:4e:69:30:8b:14:d7:2a:e5:23:10:c4:9c:bc:6b:5d:d7:
62:bb:d6:ac:75:71:0e:9c:2f:c7:c9:4f:7e:93:75:42:73:f8:
de:17:38:2f:4b:dc:41:72:37:a9:da:f1:47:55:29:00:c0:ae:
0c:93:b8:fe:49:6b:67:67:57:24:c4:74:50:0d:93:65:65:21:
f2:64:6d:87:12:ec:58:a2:72:17:36:55:4a:1f:89:9d:bf:83:
c2:3d:ab:33:c6:63:ee:3c:1d:b3:c8:20:98:db:42:92:f2:27:
74:0d:46:14:ee:d3:3f:90:cb:94:cb:06:3e:6f:62:00:30:a4:
75:da:a0:19:72:29:24:cd:3a:10:69:76:6a:91:1b:4b:3c:5a:
bc:e4:47:a9:5e:bd:39:f5:27:94:db:aa:1e:b5:18:42:c3:1e:
33:0a:01:cf:dc:a9:ea:85:fd:15:f6:b4:08:f5:3e:35:f0:b7:
8d:5d:71:41:f5:7e:b3:4a:cf:8d:7b:22:16:87:29:54:98:a2:
14:31:a9:06:b4:9d:b8:99:ce:62:dc:22:e5:08:6c:f0:fa:cc:
b2:ba:ac:b5:7a:aa:02:89:72:4a:1a:9b:5d:09:e9:d1:08:3f:
b3:a6:fb:60:6b:0d:0c:7a:70:8e:51:28:0d:b0:37:8b:f0:ba:
69:71:04:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org