Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/6nkrx8X_0bDPHBHVt8bQ80MYuDg.roa
File: 6nkrx8X_0bDPHBHVt8bQ80MYuDg.roa (raw, json)
Hash identifier: utJTrmzPUIyGKNfBTjInSPgyyfr9+wDM+bvh5kB7d28=
Subject key identifier: EA:79:2B:C7:C5:FF:D1:B0:CF:1C:11:D5:B7:C6:D0:F3:43:18:B8:38
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4307
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/6nkrx8X_0bDPHBHVt8bQ80MYuDg.roa
Signing time: Sat 12 Feb 2022 00:30:05 +0000
ROA not before: Sat 12 Feb 2022 00:30:05 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17159 (0x4307)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 12 00:30:05 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=EA792BC7C5FFD1B0CF1C11D5B7C6D0F34318B838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:62:33:8c:b2:b8:8d:47:eb:b8:40:f0:29:cd:
84:d2:63:e7:9c:12:c3:c3:8f:57:66:17:55:92:66:
94:dc:85:1d:d4:58:7b:68:18:01:59:ea:e1:c1:b1:
d0:9c:c6:60:9d:56:f5:bf:be:c9:c1:07:b3:0d:13:
e5:f2:8b:34:88:ed:74:3d:69:aa:93:03:65:5a:20:
62:e9:de:63:1c:36:b4:04:03:4a:37:4b:00:b1:43:
f3:15:9c:9d:f0:bd:de:b1:55:41:ea:9d:70:41:06:
9d:a9:0c:8c:b2:a1:15:f0:c3:5c:7e:dd:97:8d:4b:
87:c2:cf:8d:ec:96:62:8e:ef:f2:c4:6f:58:0f:5f:
33:02:85:78:77:bf:a3:aa:5d:8e:30:b4:2e:51:ff:
9e:cb:04:79:95:db:bd:66:46:c7:80:4f:4c:37:fe:
3f:5d:41:c0:f0:7f:d9:81:fb:47:f0:40:af:a0:07:
3d:e5:59:1d:10:47:82:2d:1e:cf:cf:d9:70:e5:ac:
01:4d:ac:1b:48:16:2b:fa:50:02:70:1a:8e:8d:db:
e8:d2:39:c8:aa:cf:86:0f:9f:43:b1:7c:80:fa:16:
84:06:a0:be:92:74:a7:34:14:cb:94:14:9e:8f:39:
08:1a:66:a3:9a:bd:2e:3a:2d:6b:8f:9f:00:df:c9:
16:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:79:2B:C7:C5:FF:D1:B0:CF:1C:11:D5:B7:C6:D0:F3:43:18:B8:38
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/6nkrx8X_0bDPHBHVt8bQ80MYuDg.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
30:75:30:14:8b:c1:51:96:67:18:57:57:60:03:b5:ef:da:35:
0d:5c:48:4f:52:cc:a4:e9:bd:af:8e:13:38:53:88:e1:52:94:
c0:9f:7d:51:52:45:09:ec:78:f4:e7:11:d8:ea:34:e2:39:9d:
8e:d2:69:d0:fb:f3:f3:90:1e:33:f1:86:3d:74:94:02:87:ee:
a9:e3:ad:2a:1f:2d:2b:b9:71:92:5e:d5:61:f9:b3:3e:bd:87:
89:13:45:0f:c8:de:20:e4:0e:22:c2:e7:50:61:64:d7:7b:a6:
2e:51:c2:89:9c:af:89:fa:5e:c5:f3:94:5e:ca:c7:ea:fe:a9:
cc:63:91:01:68:ec:ed:20:89:75:9d:30:7d:84:b4:28:c5:a9:
54:65:ba:72:20:2c:ec:f8:f8:02:a4:49:6d:2b:d7:77:8c:75:
27:25:f5:2d:f3:f5:e3:b3:a4:08:e1:2c:39:40:73:de:a2:56:
da:65:d9:9d:40:93:c1:9a:b1:42:72:0f:d1:6f:35:39:ab:f8:
89:ce:e4:9c:f7:42:74:98:bc:af:d4:56:8c:a8:64:31:09:45:
a1:8a:bc:26:af:1c:30:0a:d0:33:f9:ea:d9:58:f2:68:b1:fa:
65:c7:ea:26:c1:e9:03:ec:46:e3:85:e6:fc:cb:66:62:95:18:
f3:6f:8e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org