Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/FLviDpoCYjCW_63xrRq0UlkeGIc.roa
File: FLviDpoCYjCW_63xrRq0UlkeGIc.roa (raw, json)
Hash identifier: H0hqMnv7YljchDPFso6svs5xveT85YGEImEQ0+eDPAk=
Subject key identifier: 14:BB:E2:0E:9A:02:62:30:96:FF:AD:F1:AD:1A:B4:52:59:1E:18:87
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 46B9
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/FLviDpoCYjCW_63xrRq0UlkeGIc.roa
Signing time: Thu 21 Apr 2022 00:30:08 +0000
ROA not before: Thu 21 Apr 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18105 (0x46b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 21 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=14BBE20E9A02623096FFADF1AD1AB452591E1887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f5:04:af:96:d5:47:18:c9:af:b5:5f:06:b8:
d2:7a:ea:ed:ee:0a:db:83:4a:b2:72:29:c6:5e:6b:
db:07:1c:1d:b0:4a:6b:f4:61:10:26:bb:6f:ca:c2:
44:65:e7:4a:8f:b7:5e:c5:64:34:fa:46:b7:c9:c7:
3e:20:84:e6:8d:a0:41:da:19:5c:e9:fa:61:d6:a5:
5b:04:26:ed:2d:03:35:2b:a9:b2:5b:d9:3f:c9:e1:
84:bf:55:45:f3:f1:1c:ba:61:4b:40:d8:7f:58:86:
81:d8:3e:d9:3c:b1:92:43:e2:e8:15:7f:02:86:5c:
bd:ef:8b:3f:6e:60:9a:92:b4:1d:1a:c3:81:8b:79:
a3:94:64:35:52:a9:78:a4:bb:1c:7f:e2:65:9c:6e:
1a:6a:f0:18:11:1d:44:67:9e:f8:d7:2c:fe:3e:4a:
af:cd:d1:c5:07:46:a3:72:fc:7e:27:10:ff:fe:6c:
c8:f5:ac:d9:9c:58:46:55:8f:3a:5b:6f:13:1d:b4:
ea:0c:9d:7c:0b:a6:41:48:c8:ba:14:ca:c5:33:02:
37:28:d5:bb:1d:17:15:29:e8:c5:54:82:d2:40:59:
22:95:22:99:94:da:32:c9:a5:0e:ec:fb:b8:5b:f6:
8f:9f:5b:73:18:a8:f3:b5:ce:3c:2f:d1:39:b6:cc:
2d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BB:E2:0E:9A:02:62:30:96:FF:AD:F1:AD:1A:B4:52:59:1E:18:87
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/FLviDpoCYjCW_63xrRq0UlkeGIc.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
99:bc:46:ad:d5:d7:b7:2f:86:6c:07:ca:c7:ca:63:eb:02:ef:
42:e4:f4:77:43:43:2a:ba:f1:c8:22:60:c6:c7:62:55:98:73:
2d:ae:31:ba:05:74:f7:46:a7:be:5f:2b:23:76:72:66:01:18:
d3:85:ec:04:63:1c:aa:8b:87:f2:73:cd:32:fc:5e:32:39:c5:
cf:e1:94:51:af:b2:cb:8b:a0:02:14:37:d5:7f:80:09:00:0b:
c9:44:8a:7e:49:f9:a6:dd:1f:d8:5b:83:56:7a:d7:b1:49:a4:
2f:29:b9:f9:f5:05:94:39:74:22:73:0d:1b:36:4d:59:b9:cd:
9d:2c:41:33:bd:fe:09:fb:c7:d4:ce:54:7c:b5:34:c9:cc:4d:
25:52:f8:0a:f0:f9:c3:0a:17:ce:5b:1a:1f:94:71:e1:b8:a4:
22:ec:35:af:d3:c9:13:c0:b7:8e:80:01:d9:81:e4:2a:c2:0e:
95:ca:1b:4c:8b:74:dd:f4:ee:78:4b:0c:8c:60:d4:a5:2e:b2:
e5:ac:c2:7e:60:12:b5:b7:93:7b:c7:58:eb:7f:e0:a5:f2:15:
bb:c6:06:6a:93:75:dd:92:2f:77:b7:99:de:fc:e5:e6:9e:1b:
2e:93:96:ad:9b:2f:be:d1:21:1b:b3:41:05:1b:ab:05:8e:6b:
3e:42:8c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org