Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/84JkGehE50b1yQVEA-kncyKa6Ys.roa
File: 84JkGehE50b1yQVEA-kncyKa6Ys.roa (raw, json)
Hash identifier: bVoLXOoYHyyXInfXvrHACe5Uq1TtQPWQMwyvxiT376A=
Subject key identifier: F3:82:64:19:E8:44:E7:46:F5:C9:05:44:03:E9:27:73:22:9A:E9:8B
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 480C
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/84JkGehE50b1yQVEA-kncyKa6Ys.roa
Signing time: Sun 15 May 2022 00:30:07 +0000
ROA not before: Sun 15 May 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18444 (0x480c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 15 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=F3826419E844E746F5C9054403E92773229AE98B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:62:a1:ec:5b:c7:ec:ad:47:c3:3e:b7:a4:aa:
2f:cf:5f:85:de:72:f2:fe:cb:ba:06:02:ea:a3:6a:
82:66:89:e2:79:8d:6f:28:29:01:0c:de:52:fe:fe:
1d:b4:5e:36:87:36:44:ab:d8:8c:0c:94:32:64:85:
24:11:88:60:c7:56:a1:89:65:4e:6d:2c:46:55:ca:
94:71:cf:a3:81:c2:eb:96:4f:ca:65:9f:d9:df:ef:
63:15:7e:a1:4e:c0:59:c5:86:98:ad:2d:15:09:9f:
d5:d8:9b:92:bd:b6:f9:0e:e3:48:b2:63:80:1c:a8:
8a:c4:8a:8c:f1:d5:b8:5b:f2:80:c0:11:f2:1f:53:
ee:20:77:b1:c6:e2:54:4b:8d:9d:c3:38:0a:eb:0e:
0f:84:1d:3b:44:22:7e:d5:ca:1a:06:dd:2d:22:06:
6f:9c:ff:5c:2d:c7:c3:1b:6b:80:1a:c5:04:36:51:
80:de:56:7e:83:b8:80:cc:8d:ee:67:6b:fa:0e:a8:
24:7a:d2:9d:9c:f6:b9:12:b4:4e:49:ab:3c:e4:60:
e9:32:62:ce:db:c2:c9:d7:5b:6b:e4:5f:94:ea:66:
34:f0:9f:7e:9a:06:64:f3:fa:a4:75:9f:96:d7:cb:
c7:15:1d:b5:3e:4d:ce:09:cf:4d:f3:7e:ca:b1:e6:
1f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:82:64:19:E8:44:E7:46:F5:C9:05:44:03:E9:27:73:22:9A:E9:8B
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/84JkGehE50b1yQVEA-kncyKa6Ys.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:ee:c6:a9:72:8e:38:fd:66:5c:e1:a0:ef:43:1b:ab:15:e0:
6c:27:59:f0:e9:7b:ed:57:04:22:29:ec:d6:b3:dc:5f:6b:75:
df:22:fb:b5:88:2a:83:45:c8:2d:fa:68:bf:c7:9f:a0:2b:9a:
45:22:8b:ac:0e:68:b9:c1:fa:3d:d5:67:c4:55:de:ef:bf:59:
79:75:78:11:03:4f:70:03:04:24:9f:2e:d6:bf:b8:27:bf:1f:
5f:68:99:3b:a5:53:ae:93:e7:d2:5f:ab:27:9c:5c:2d:41:99:
fd:d5:9c:bf:12:a3:60:6a:01:1f:41:d3:49:3b:1f:30:43:eb:
9a:45:ed:f3:32:36:fa:4c:48:64:95:67:8d:22:8a:f6:06:ed:
a6:e4:1e:de:7a:82:12:9e:8f:61:fb:4b:c4:37:e4:24:a9:d3:
b7:60:6f:09:d0:87:08:c5:21:51:ed:9c:ae:db:6c:27:6e:70:
44:ab:cd:27:f9:15:ea:ae:bc:d7:fa:3a:e7:01:06:5a:89:0e:
13:a9:b9:c7:32:e3:22:4a:bf:66:55:94:fe:df:6a:61:77:b8:
42:88:1a:ac:97:81:53:df:a9:8c:e2:25:f0:3b:46:b9:51:36:
a5:96:dc:6a:4b:ac:b0:b5:a6:88:fb:3b:9c:d6:67:68:d8:5f:
e7:44:cc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org