Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/HEdYcRP_RSy6GDW61cg1QTW2RAA.roa
File: HEdYcRP_RSy6GDW61cg1QTW2RAA.roa (raw, json)
Hash identifier: LRV7+1ckBQxn5nmE+F5H9AaCXj5ZvHAMaur5SnpxnRc=
Subject key identifier: 1C:47:58:71:13:FF:45:2C:BA:18:35:BA:D5:C8:35:41:35:B6:44:00
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 42A5
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/HEdYcRP_RSy6GDW61cg1QTW2RAA.roa
Signing time: Sat 05 Feb 2022 00:30:06 +0000
ROA not before: Sat 05 Feb 2022 00:30:06 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17061 (0x42a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 5 00:30:06 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=1C47587113FF452CBA1835BAD5C8354135B64400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ec:3d:0b:09:1d:69:e1:5d:a3:9e:cb:5b:a3:
b3:9b:56:57:4a:f6:5c:07:fd:02:3e:f4:61:9e:48:
d8:a4:8c:91:14:bc:d5:fe:8d:83:1a:6c:61:fb:f7:
ec:16:05:82:b7:86:05:ed:19:8b:92:69:c2:30:22:
c1:8c:3c:5c:12:87:90:f4:75:55:06:6a:c7:6c:8e:
e1:44:be:ac:9b:e3:5f:59:c8:72:dd:80:0a:3c:69:
35:2f:3f:bf:88:54:b4:8d:8c:46:da:85:05:d5:0b:
cf:82:85:70:b8:1c:6d:c1:55:d8:90:cc:3a:cb:de:
fb:64:69:fe:13:4f:6f:b1:33:cb:5f:ca:d3:ce:79:
8f:9e:d9:45:e5:a1:d3:da:d6:7d:7b:94:da:74:1d:
21:a1:f4:7a:91:c1:b6:1d:4b:10:9c:b4:2c:e8:c0:
88:a9:a4:55:bc:a7:26:e7:22:eb:72:88:2a:3f:67:
36:4b:03:fe:d5:92:72:e2:c0:50:b1:5f:87:4e:79:
5c:4b:a3:93:f6:6f:17:36:0a:c2:31:36:85:bb:72:
a3:e8:9e:75:89:98:58:28:45:59:98:57:0e:0e:ee:
ec:ad:3c:20:8e:f8:6c:3d:05:89:45:b9:02:cd:5c:
74:6b:b8:d9:c4:e6:68:1b:6b:98:e9:c5:55:3c:68:
eb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:47:58:71:13:FF:45:2C:BA:18:35:BA:D5:C8:35:41:35:B6:44:00
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/HEdYcRP_RSy6GDW61cg1QTW2RAA.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:35:d4:8e:4e:e8:50:a4:b8:7c:63:7c:d0:d3:ce:a4:51:65:
ca:64:78:9a:1c:b4:44:2e:12:e4:44:01:36:94:8d:a4:eb:25:
86:cc:a8:15:c9:c1:5c:82:b0:b0:0f:50:86:81:df:12:82:33:
85:5a:cd:cb:85:c2:a6:b0:be:6f:7d:5f:b9:25:bd:af:c1:33:
6b:47:35:cb:7e:46:7d:0c:00:98:46:d9:b3:a1:f5:08:1c:fa:
fd:63:b5:f5:c4:59:f7:81:35:25:64:d4:e8:38:b7:70:8a:9d:
0a:01:00:8d:37:c3:b7:4f:49:40:99:91:95:8a:09:f8:56:aa:
52:35:ac:c8:67:a8:9b:54:a3:c8:df:c9:b4:e9:ba:97:e1:56:
f7:0d:40:2e:c6:41:c7:28:6a:63:07:e8:cc:34:96:e3:12:04:
d2:04:a8:8e:a7:d7:77:3f:6e:4c:35:5c:21:42:3f:8b:76:c4:
3c:5e:79:bd:36:25:7a:a3:42:5d:e3:ed:23:ef:03:40:24:ff:
90:40:9f:13:b0:9a:60:fe:8c:59:4b:0c:a9:10:58:47:89:69:
0f:ff:ca:c2:94:da:06:a8:b3:91:ff:e4:bf:e3:f1:c3:ae:9b:
e5:5d:aa:69:f8:64:2d:af:3f:73:db:e7:2b:a9:22:0c:3a:be:
61:f9:83:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org