Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/CV0ElO3AfvW7iZRwU9M-3H-ycZc.roa
File: CV0ElO3AfvW7iZRwU9M-3H-ycZc.roa (raw, json)
Hash identifier: mlQlY96SvpypNfPG2/O0o/bEufJK7QmGTgop3XQLLYM=
Subject key identifier: 09:5D:04:94:ED:C0:7E:F5:BB:89:94:70:53:D3:3E:DC:7F:B2:71:97
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 48EA
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/CV0ElO3AfvW7iZRwU9M-3H-ycZc.roa
Signing time: Tue 31 May 2022 00:30:07 +0000
ROA not before: Tue 31 May 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18666 (0x48ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 31 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=095D0494EDC07EF5BB89947053D33EDC7FB27197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:94:90:3e:52:d2:f4:5a:a0:84:7e:54:4b:42:
6e:ba:01:ac:60:9f:d5:19:13:75:53:ed:d3:0b:7a:
6f:5d:ec:b1:8e:3a:90:38:b6:4a:78:d3:44:65:6b:
c3:c6:c0:93:db:c0:51:8c:1e:85:14:47:80:28:76:
35:f4:60:4d:e9:df:94:9d:2a:8b:75:32:61:ea:e9:
5c:bb:31:bf:5d:13:47:53:93:18:9d:e1:17:b2:c9:
4f:78:10:6c:de:2a:cc:dc:e5:a5:3c:89:41:95:f6:
75:ef:a5:de:57:db:76:4e:8f:db:93:51:d9:92:91:
4c:2d:a7:ff:97:e6:8f:5d:67:84:5e:b8:82:c9:aa:
92:ac:3d:b0:78:42:54:60:1a:3e:3c:9f:66:21:ca:
67:53:da:81:9c:78:45:5c:f8:fa:9d:64:b6:4f:07:
4d:92:b5:50:3b:1e:a4:98:c4:ad:c5:65:7c:cf:fb:
c6:cd:9c:54:b0:9a:56:1d:f4:af:50:c4:9c:d0:38:
88:86:3a:a1:b0:f8:86:eb:3b:fb:05:cb:b4:f0:1e:
bd:3f:73:e5:8d:d7:f8:9c:b7:4a:4d:70:5a:08:51:
9b:a7:4f:a0:97:da:25:5c:76:c6:d4:01:a8:55:44:
c5:a3:3d:af:e3:9b:ab:fc:3d:40:20:55:b5:8b:d6:
12:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:5D:04:94:ED:C0:7E:F5:BB:89:94:70:53:D3:3E:DC:7F:B2:71:97
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/CV0ElO3AfvW7iZRwU9M-3H-ycZc.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.14.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:1a:d6:93:ae:31:69:e0:36:6f:cd:42:c1:57:11:ee:e9:8d:
64:76:b9:13:1f:54:54:14:0f:d9:05:64:f8:20:d7:a3:2b:da:
11:d1:4c:29:2c:4f:0d:f2:a6:fc:ce:54:f2:54:b7:52:c0:90:
3a:8e:86:47:0c:03:9a:90:b5:54:89:24:79:41:3c:05:c6:ef:
79:8c:bc:a0:34:42:2b:93:05:04:16:be:e0:6b:7d:91:72:6c:
32:30:aa:89:77:6b:59:7d:0f:10:3c:0f:78:6a:25:b3:a1:81:
d4:98:39:49:08:9d:31:6e:5c:61:60:ea:7e:50:c4:22:33:61:
8e:cc:49:f4:7a:f1:2a:f7:14:de:83:6a:93:25:b2:b2:b2:78:
a7:54:54:d8:bc:08:18:0b:0e:4a:de:7c:05:5b:33:da:b3:6d:
4f:d2:59:ca:b4:a1:3d:61:1c:6b:fd:f8:0c:ef:00:26:c3:5a:
c0:a9:2d:13:ee:65:47:c5:ba:85:9d:e3:df:9f:58:9d:96:7b:
68:58:fe:9c:6a:f0:f8:4e:c3:be:69:2b:da:8d:15:38:8f:40:
75:00:d1:2b:c2:d8:4c:ab:e2:ad:97:54:bf:df:2e:fa:b2:13:
71:4f:7c:77:77:ec:f5:cc:84:12:a0:cb:d9:00:44:59:3b:fc:
33:be:dc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org