Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/HtcQtPGywA_P3aX1TeWRZwZHJsI.roa
File: HtcQtPGywA_P3aX1TeWRZwZHJsI.roa (raw, json)
Hash identifier: qDOqq6NjKEP1o+D1tKfG9qNVwgbXDvWEpo7ex+X8Qbk=
Subject key identifier: 1E:D7:10:B4:F1:B2:C0:0F:CF:DD:A5:F5:4D:E5:91:67:06:47:26:C2
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4729
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/HtcQtPGywA_P3aX1TeWRZwZHJsI.roa
Signing time: Fri 29 Apr 2022 00:30:08 +0000
ROA not before: Fri 29 Apr 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18217 (0x4729)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 29 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=1ED710B4F1B2C00FCFDDA5F54DE59167064726C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:d5:14:61:1b:b9:50:34:17:c1:13:1f:a0:26:
c3:ca:75:72:22:68:eb:72:e5:c2:bf:86:48:97:ba:
d1:1e:2c:e9:ff:4d:04:4b:9b:c5:23:d3:30:5e:5a:
8d:5b:dd:2e:1e:26:0c:98:c6:f1:10:e4:53:91:1e:
43:69:d3:c2:2b:2f:14:be:6c:e8:02:c3:a6:fa:10:
4e:5f:4d:de:30:f4:ad:e2:c7:7f:a6:40:aa:4d:b5:
52:7b:01:31:af:a4:80:3f:f2:62:3b:70:4e:aa:b0:
67:31:5f:0d:59:fe:8b:4f:be:d0:ce:32:6b:0e:26:
89:89:9c:80:21:df:93:5b:73:05:5f:14:c0:a8:79:
a8:0c:c1:4c:a4:d7:20:98:f7:57:1c:66:ec:47:40:
2c:10:6b:83:d6:be:60:92:ae:e4:f6:b6:fb:ca:ad:
0d:28:86:c3:57:8a:21:8b:70:ac:f5:8c:8e:37:51:
40:f4:22:07:9c:8f:da:fe:36:cf:3b:d2:42:f5:9d:
1f:81:2d:ae:7a:a9:66:22:96:c5:bb:7a:5c:ab:1f:
b4:bc:c9:04:d2:7d:cc:21:82:5e:c8:e2:b0:8a:77:
3e:31:b8:8f:76:73:c2:3b:85:2c:fe:87:16:29:e3:
c7:d9:91:14:4a:b4:7f:a7:53:66:74:d7:33:e7:b1:
ba:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D7:10:B4:F1:B2:C0:0F:CF:DD:A5:F5:4D:E5:91:67:06:47:26:C2
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/HtcQtPGywA_P3aX1TeWRZwZHJsI.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
39:36:49:f2:1a:5a:98:38:43:05:46:20:84:5d:6d:39:19:4d:
d9:95:b8:bf:9b:72:ee:fb:52:43:a5:9a:7c:49:28:0a:f1:65:
59:a2:71:40:d6:94:e7:5b:9e:2c:ff:d7:58:5d:28:89:e8:81:
17:ae:0a:2d:9a:2a:97:f8:9b:2c:dd:ed:4d:7c:ae:b3:eb:03:
f3:d1:0b:a9:38:cc:93:78:46:bf:0e:83:34:6b:e9:6e:3d:fa:
c6:a3:dc:e3:c3:c4:96:37:e2:e7:d2:1e:c9:a6:ac:65:81:c2:
ce:25:ee:5f:e6:fd:8a:56:d0:46:ee:f2:02:86:62:b6:8d:53:
c5:13:d7:8f:5a:38:9c:d7:98:82:e3:61:4e:8d:32:74:65:b6:
a3:87:09:19:91:8b:61:9e:fa:8b:35:90:9a:fb:02:a9:a0:7c:
9d:63:b3:c1:6a:15:53:21:2b:34:43:79:01:ad:af:1a:f4:17:
48:c0:31:36:ec:d1:b5:8a:c9:01:cf:ca:8b:71:16:74:c4:c6:
c4:ce:5d:cf:3d:e8:12:71:23:45:b6:8b:df:c9:8e:84:a7:fb:
66:69:7f:f5:69:f2:75:2a:87:6d:96:b0:c7:52:98:12:bd:6f:
67:a5:69:1b:ba:76:f7:b1:55:fb:d4:fb:d5:22:be:a1:62:b4:
e5:ac:59:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org