Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/EOVImhvtFLTLybTF8EtgDcwEkZI.roa
File: EOVImhvtFLTLybTF8EtgDcwEkZI.roa (raw, json)
Hash identifier: as5tt3cXA+tGDzvmOZ+E7mekN6Rg+ZBjxHjAtP+Q5HI=
Subject key identifier: 10:E5:48:9A:1B:ED:14:B4:CB:C9:B4:C5:F0:4B:60:0D:CC:04:91:92
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4359
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/EOVImhvtFLTLybTF8EtgDcwEkZI.roa
Signing time: Fri 18 Feb 2022 00:30:06 +0000
ROA not before: Fri 18 Feb 2022 00:30:06 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17241 (0x4359)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 18 00:30:06 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=10E5489A1BED14B4CBC9B4C5F04B600DCC049192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b4:45:1b:e2:a0:2b:76:2b:01:e4:0a:9d:68:
a6:fc:f1:ed:d4:c5:20:e7:5c:a0:cf:21:36:7d:83:
ad:7e:98:bb:c3:b7:d3:6a:24:4e:fd:59:bb:45:32:
ae:1a:2a:25:52:48:ca:6c:e7:eb:30:83:a7:bd:0a:
12:fd:27:ea:b2:58:1e:17:90:c7:e3:1f:8f:ab:fb:
8d:b9:d6:d0:df:c7:e4:db:13:2a:8f:be:91:4e:e0:
aa:95:75:57:d3:c0:ec:24:72:9c:38:45:52:2d:a3:
27:aa:9b:67:3e:38:6e:81:23:e7:03:d1:f6:20:59:
2c:15:fc:95:ff:6f:ee:90:2d:38:09:45:c2:dd:83:
9b:88:05:df:d8:76:bd:da:1a:85:3f:d8:41:6a:a4:
7e:ff:28:df:5f:85:9c:b9:ed:8c:7e:a6:78:0c:ae:
cf:f7:e2:d8:38:02:5b:cb:a2:c6:6f:0d:9f:12:2f:
e0:6c:f7:65:93:6d:e5:05:b2:59:69:b5:54:ed:47:
ee:3c:b9:e4:51:54:1e:3d:3a:35:f4:ea:c0:78:b4:
58:86:c4:1a:0f:e5:6c:48:97:6b:0c:88:c8:41:b8:
84:1d:18:2c:3c:58:ff:95:84:37:9d:d3:03:cd:34:
24:de:2c:61:ec:24:66:9a:3f:41:2d:ef:c4:5b:ca:
a8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E5:48:9A:1B:ED:14:B4:CB:C9:B4:C5:F0:4B:60:0D:CC:04:91:92
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/EOVImhvtFLTLybTF8EtgDcwEkZI.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:c2:e9:91:a2:5e:be:d6:56:63:1a:d8:9f:90:9b:5e:89:0c:
eb:f1:5e:51:2e:2e:9a:0c:61:49:07:6a:2a:20:4d:93:d4:f3:
16:2e:9a:43:72:5c:c2:cb:ed:b6:43:78:a8:7f:6b:de:34:43:
70:3c:3c:e2:37:d0:c5:f2:19:bc:74:14:65:04:d5:58:7a:d9:
a5:45:9c:9c:ef:ec:b1:30:5d:63:82:49:0c:cc:8c:28:9c:63:
1f:ba:78:07:94:e2:5d:b4:fe:d9:76:92:23:06:50:e7:e5:6f:
bd:23:83:ef:88:82:dc:5e:37:bc:16:22:a0:06:70:a6:58:60:
db:09:02:83:82:39:c1:ee:af:34:54:67:c5:3c:4e:47:20:f3:
1e:64:1e:36:14:97:07:40:0f:a4:7f:88:e0:42:1b:19:58:2f:
10:7f:aa:03:0b:d1:33:49:f0:8a:71:59:a1:b9:f6:07:cd:7e:
fd:82:14:7b:36:3b:8c:91:f3:6e:ee:ab:76:6b:dc:24:1c:8a:
92:4b:fb:70:40:56:d3:21:4e:a5:ae:cb:ea:29:1c:29:54:83:
18:7a:d5:ca:67:2b:4b:90:31:e2:e9:2d:ae:cb:e9:61:2c:cc:
e6:fe:3f:e5:5c:4f:fa:5c:75:c2:5f:1b:aa:51:f3:c5:b5:41:
8c:ce:cb:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org