Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/64oV2H58E3HKxp1CcT9v5bhRJwU.roa
File: 64oV2H58E3HKxp1CcT9v5bhRJwU.roa (raw, json)
Hash identifier: bzoTcKLUtSZ1ZyaWdakh4apnVDUNnIz/2R1Gr+f6RCw=
Subject key identifier: EB:8A:15:D8:7E:7C:13:71:CA:C6:9D:42:71:3F:6F:E5:B8:51:27:05
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4583
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/64oV2H58E3HKxp1CcT9v5bhRJwU.roa
Signing time: Wed 30 Mar 2022 00:30:07 +0000
ROA not before: Wed 30 Mar 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17795 (0x4583)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 30 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=EB8A15D87E7C1371CAC69D42713F6FE5B8512705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d3:be:fb:57:bf:90:f9:9b:3f:c4:79:bf:61:
33:ff:ce:36:64:45:27:c6:ec:db:fc:fd:d1:28:31:
1a:9d:71:b6:63:0b:00:3e:ce:5a:bc:cc:1a:46:42:
8e:ae:05:10:2b:7e:22:c8:aa:8a:08:8f:c1:01:6c:
14:54:fe:e1:64:cc:57:c6:90:4a:04:1b:27:55:67:
e6:44:58:e9:24:8e:1a:88:9a:48:4d:1d:57:e3:c0:
ce:53:c3:58:7d:5d:12:36:48:79:f7:e0:71:38:e9:
0e:b5:1d:16:85:50:84:ce:96:79:84:43:2e:be:d3:
ae:6f:47:01:0e:d3:88:39:b9:64:89:08:6c:4f:27:
fb:5e:cf:99:8a:59:bf:1c:24:3a:f2:9f:31:ac:e8:
f6:1f:d7:16:e1:48:8d:f5:f9:e0:27:74:cc:17:74:
e1:d6:2e:82:d1:fb:b8:67:a9:5c:d8:bd:e9:7b:26:
c1:fb:e6:30:6f:90:4a:69:6a:ee:cd:0c:b6:e7:05:
59:58:83:66:7a:3d:2b:e8:4b:fa:7f:ba:7e:5c:b3:
fb:b7:6f:8b:5c:1d:cf:41:6b:52:6a:60:63:29:8d:
0b:62:aa:87:9d:16:c0:0d:22:02:92:12:c3:2b:92:
d2:aa:db:11:2e:7d:2c:22:15:c2:08:e3:f9:fd:64:
70:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:8A:15:D8:7E:7C:13:71:CA:C6:9D:42:71:3F:6F:E5:B8:51:27:05
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/64oV2H58E3HKxp1CcT9v5bhRJwU.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
32:9a:38:fc:d1:49:c3:bc:c8:fc:bc:62:3e:66:59:c1:64:df:
5b:b7:da:d7:e1:9c:0a:57:93:b5:6d:35:c1:63:53:43:33:20:
12:3f:fe:de:60:15:d4:f2:5c:9e:38:6a:0a:bd:de:33:83:6e:
2e:5a:7f:73:fc:6b:f1:98:b8:11:6f:86:fb:39:78:ca:b5:43:
dd:ba:34:ed:da:58:01:8f:71:f0:58:d4:a4:a0:fc:84:c1:33:
dd:fc:86:83:41:31:5a:11:64:aa:35:36:9c:72:d6:08:fb:53:
f9:ab:61:e4:f5:89:45:e3:3a:41:27:4d:03:6c:41:16:f3:7f:
6a:10:d0:c9:ac:2b:de:7e:b4:b9:76:1d:4e:63:10:ad:5b:58:
be:e4:69:6e:d2:68:0d:12:e4:5d:f1:d0:d8:72:42:d3:12:b3:
67:8e:36:9c:81:63:7f:94:66:fe:af:dc:15:b7:6d:a5:b9:53:
07:84:bf:fd:0a:c7:8d:95:9e:01:de:12:71:fd:d9:bd:25:64:
cc:73:74:52:e4:5f:8e:1e:4c:a9:5c:3f:a3:2d:dc:69:8c:6f:
3c:04:46:15:0f:1c:0d:ad:e4:08:d7:35:60:22:3b:bd:3c:32:
7e:d3:d3:8a:a7:e6:30:b3:f6:2a:e2:ba:95:58:fb:d1:a0:f4:
aa:45:8e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org