Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/HAKwneZP5Rqg_ZGgnjvTKnxJREU.roa
File: HAKwneZP5Rqg_ZGgnjvTKnxJREU.roa (raw, json)
Hash identifier: 96jdKD2Tsuyfduys+zhsjfep3j2Snep+A1o9dvScP3Y=
Subject key identifier: 1C:02:B0:9D:E6:4F:E5:1A:A0:FD:91:A0:9E:3B:D3:2A:7C:49:44:45
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 46D5
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/HAKwneZP5Rqg_ZGgnjvTKnxJREU.roa
Signing time: Sat 23 Apr 2022 00:30:07 +0000
ROA not before: Sat 23 Apr 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18133 (0x46d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 23 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=1C02B09DE64FE51AA0FD91A09E3BD32A7C494445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:70:e5:65:6e:7c:a6:ce:41:bc:df:19:81:00:
23:a6:d1:57:62:9c:d7:1e:f9:db:81:93:ae:43:f2:
c2:a7:cc:bf:f8:49:82:55:47:d3:00:6a:e5:cf:20:
82:97:f1:7a:89:db:17:47:0c:77:8b:a0:59:47:0d:
38:7e:2a:38:9f:d6:b6:d1:e3:0c:9b:68:da:0e:fc:
f8:82:9d:b1:e2:f9:06:bc:2d:ff:5b:29:31:89:2c:
2b:c2:14:9e:48:c2:17:34:b5:b9:83:47:63:01:68:
ed:cf:62:34:49:32:1b:69:cf:74:06:f3:37:46:ee:
ce:e9:26:cf:4f:05:b8:4f:10:79:a3:8e:4b:f3:78:
a8:df:16:4d:78:a3:a6:32:38:d2:77:b2:d3:28:3f:
86:4e:69:73:fd:f8:41:09:43:50:7c:dc:1c:cd:20:
0f:d2:53:77:eb:15:d7:2f:fb:c6:88:6c:7b:90:09:
3c:1f:e8:cc:f4:ba:2b:36:d3:19:d4:f4:87:b7:f9:
45:84:b8:7a:3a:e8:ba:48:71:d6:61:d0:f5:93:f2:
22:d3:0e:a9:3f:f1:15:a1:ea:a8:a5:1e:94:d0:cf:
f4:5b:b3:40:ff:66:7e:1b:c5:a7:fb:0c:59:17:86:
cd:77:03:0f:23:f6:be:62:1a:cf:8c:25:67:8d:5a:
47:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:02:B0:9D:E6:4F:E5:1A:A0:FD:91:A0:9E:3B:D3:2A:7C:49:44:45
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/HAKwneZP5Rqg_ZGgnjvTKnxJREU.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
76:74:63:cf:1e:82:c5:b1:80:28:aa:98:31:ab:74:2a:53:da:
90:23:fe:c6:6b:43:b3:01:00:5e:82:00:e9:f7:a3:07:0d:b3:
22:22:46:94:4d:c9:0a:cb:ef:6a:89:8c:b7:8f:f4:79:b1:e3:
32:57:23:b9:3e:af:65:fb:f3:26:a8:84:3d:17:4f:21:4b:6d:
bb:7b:81:6a:83:fa:06:33:1c:0a:7e:17:df:fa:81:dc:e9:1d:
91:31:7d:51:4c:46:c2:70:ac:6d:e2:c0:10:b3:43:b7:2e:a1:
1d:02:7c:8d:e6:47:75:0a:7a:b6:c2:12:a3:fe:c7:c6:e6:a9:
09:a8:a7:04:a9:67:bc:ce:be:25:ad:06:a9:e6:66:df:73:1e:
af:ac:f3:c5:62:93:10:84:a9:e0:26:10:dd:91:17:8a:d9:80:
a2:dc:4d:26:ed:f4:47:cf:00:c2:7f:37:4f:39:a8:b5:77:a8:
d3:58:1f:1b:f7:8a:c4:52:fb:ed:9b:4f:c8:ea:f6:6a:eb:7d:
19:39:8b:68:82:5e:d2:13:a5:b0:c5:91:6d:f9:62:b4:2f:aa:
e3:e3:45:f5:55:38:cc:06:8e:b4:15:05:ea:ad:66:5d:72:50:
a5:79:4c:92:2e:16:a3:d6:06:0c:33:cd:b9:f1:d5:7f:a1:71:
de:8f:64:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org