Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/7qD83Wl2Jh-Hxv9C4XdF3vHUXzc.roa
File: 7qD83Wl2Jh-Hxv9C4XdF3vHUXzc.roa (raw, json)
Hash identifier: CDAsIepsV5JKtxmYOzsUCJJxL/H7iPcebXV6UyXKCVQ=
Subject key identifier: EE:A0:FC:DD:69:76:26:1F:87:C6:FF:42:E1:77:45:DE:F1:D4:5F:37
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 429A
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/7qD83Wl2Jh-Hxv9C4XdF3vHUXzc.roa
Signing time: Fri 04 Feb 2022 00:30:07 +0000
ROA not before: Fri 04 Feb 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17050 (0x429a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 4 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=EEA0FCDD6976261F87C6FF42E17745DEF1D45F37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6a:36:c1:98:f7:71:45:29:14:63:a9:2d:7a:
17:82:44:d2:65:37:e6:12:4b:c6:11:52:48:82:36:
9c:23:83:fc:2f:f8:52:df:17:43:6e:c6:d5:01:77:
ad:6b:4a:e3:d8:5c:81:e6:96:ba:0d:f3:32:ec:7a:
3e:26:6c:a2:31:1b:42:b2:f6:f2:ba:e7:1e:da:12:
61:92:8e:db:01:da:06:82:51:1d:f1:c4:7b:cf:1d:
d1:8b:88:3a:1d:fe:99:ff:59:77:41:5f:6a:78:bf:
dd:4a:00:2f:a0:a6:42:b5:6f:7a:40:87:43:a5:27:
0f:fa:ac:a0:5c:0d:53:ff:c2:99:23:d3:7d:4a:7b:
67:65:d0:3b:9b:b5:71:e3:e6:19:7a:f8:eb:60:4e:
be:e3:99:49:dd:52:ad:bb:d4:7b:0d:c6:a2:74:70:
05:54:f3:df:eb:99:43:f2:67:09:09:5d:e7:6f:84:
da:b6:cd:f8:5f:71:b7:13:2f:26:92:05:8e:62:f8:
d0:80:74:0a:cd:77:74:ff:17:1e:67:ac:87:f0:eb:
71:9b:51:98:ae:14:f7:6f:f3:8b:98:d2:65:38:59:
c4:cf:2e:ff:56:b7:e4:e7:f1:14:9f:bd:3f:43:d2:
cf:e1:29:21:de:dc:dd:fe:e7:28:70:45:54:86:96:
f2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A0:FC:DD:69:76:26:1F:87:C6:FF:42:E1:77:45:DE:F1:D4:5F:37
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/7qD83Wl2Jh-Hxv9C4XdF3vHUXzc.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:0c:af:b4:e1:57:00:6a:44:9a:a7:18:e2:47:4a:99:b1:0d:
fc:b9:4e:89:f7:af:72:ee:1a:d4:ad:fb:e7:b3:ba:d3:7f:2f:
bb:87:a2:d2:85:d3:9f:ae:f6:7a:81:8f:a9:93:53:8c:fe:e1:
73:9b:f2:1e:79:8c:01:43:8c:0b:f2:c4:58:b5:68:ab:06:5b:
3c:af:9a:35:12:a2:79:34:ec:5e:1e:98:8e:13:c2:7e:16:69:
15:1f:29:ed:75:c3:53:08:70:a1:fd:b2:b0:3d:2b:71:29:89:
5d:64:80:d8:4e:39:6c:45:36:39:d6:b6:73:72:30:90:7c:a3:
b3:e1:c2:7b:c1:3c:0d:89:4a:27:68:a9:48:ae:ba:e5:7a:13:
17:7a:1c:c3:87:36:58:98:fb:5f:3e:0f:5f:53:b7:58:3c:bd:
3f:33:99:27:e0:18:77:e4:36:95:27:fc:e4:0e:af:eb:b5:95:
92:0d:74:a9:3b:1b:07:bd:d6:42:04:ed:26:cf:02:8f:b6:af:
6d:99:95:fd:a3:73:69:7e:92:d1:cd:a2:f5:da:e2:c9:e4:ce:
4e:f1:b6:76:14:f7:80:91:f8:00:b6:4f:d6:a4:7b:6d:a0:44:
94:9f:be:9c:80:fb:9a:19:18:ad:73:66:9c:46:63:c3:8a:29:
af:08:91:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org