Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/LetAmMfmkUo8ePhu4y2wvgbJA4o.roa
File: LetAmMfmkUo8ePhu4y2wvgbJA4o.roa (raw, json)
Hash identifier: HmPyd/UAvKYNKovWOP1UVCoVKcZl7gTzmqQ6qOdAIyk=
Subject key identifier: 2D:EB:40:98:C7:E6:91:4A:3C:78:F8:6E:E3:2D:B0:BE:06:C9:03:8A
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 49C1
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/LetAmMfmkUo8ePhu4y2wvgbJA4o.roa
Signing time: Sun 12 Jun 2022 00:30:07 +0000
ROA not before: Sun 12 Jun 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18881 (0x49c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 12 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=2DEB4098C7E6914A3C78F86EE32DB0BE06C9038A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:8e:28:f7:6c:e7:52:32:bc:da:c6:a1:a3:9e:
bf:92:75:8e:f5:9f:57:30:31:f0:2f:80:31:bd:38:
0e:44:3f:d2:49:6b:eb:93:87:ba:fe:53:f0:c2:2d:
1a:2c:cd:92:73:cd:de:9c:a2:13:93:b7:ba:0c:91:
01:c3:63:95:a7:c7:12:7c:fa:dc:b9:14:b7:95:51:
33:c0:bd:c3:2d:19:57:51:69:84:2f:ae:e8:2a:9e:
c9:cf:53:69:3c:d9:40:ff:07:3f:2d:20:2a:6c:10:
81:f8:83:c6:74:41:0f:34:9b:75:12:16:87:91:8e:
99:14:15:c0:48:7d:3d:3a:7f:f5:f4:ea:0e:ed:7e:
76:a8:2c:81:72:94:32:f6:0c:33:97:9f:df:1c:9a:
22:49:af:37:60:84:9c:91:52:4f:8d:17:0c:90:85:
25:c6:87:35:c2:28:5b:e6:9b:f2:b4:ea:42:14:76:
14:77:21:56:eb:0e:c6:e0:2e:d9:f5:5c:17:93:be:
27:95:24:4e:85:4a:30:0e:fa:7f:a6:91:dd:5f:d8:
3c:6c:8c:ac:79:f3:a3:27:8d:84:ac:49:bb:44:dc:
cf:11:55:c8:44:71:5b:fd:12:3d:0f:21:e8:1e:e9:
64:fe:55:87:6b:b1:82:8d:0e:21:fb:36:36:ec:b6:
94:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:EB:40:98:C7:E6:91:4A:3C:78:F8:6E:E3:2D:B0:BE:06:C9:03:8A
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/LetAmMfmkUo8ePhu4y2wvgbJA4o.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:70:9e:96:3f:36:39:d9:af:26:76:b1:0f:c5:84:2d:dc:77:
90:8d:44:c7:0d:2a:30:18:15:13:0e:70:7b:38:3e:a1:35:1f:
8a:6c:45:5c:f3:b7:83:fd:b5:0a:b0:9a:dc:fb:b8:60:86:eb:
04:be:12:1f:45:c4:79:e3:e1:70:43:0f:33:f2:d1:3c:9e:e1:
44:3a:5f:e7:46:ca:ff:da:96:b0:dd:da:07:e8:6c:03:47:bd:
be:5c:16:cc:61:53:9c:d7:dc:1d:db:2e:1a:ab:4c:69:26:87:
db:ce:08:cb:ea:63:dd:a0:6f:23:26:98:28:b6:51:e8:51:0d:
c7:a3:90:4a:b6:57:61:78:35:e4:8d:dc:08:cf:61:d2:44:6e:
f7:0f:3e:19:91:d1:60:f1:9b:20:03:9c:02:7b:d7:5b:36:be:
92:ec:95:30:3f:79:fe:62:f0:27:5c:c5:b2:a3:1c:16:82:93:
3d:50:a5:c1:a6:9b:b0:b4:56:e0:57:ca:71:c5:7b:da:b1:23:
65:94:80:16:99:d9:44:ae:d0:62:c7:35:9e:7c:74:59:57:7f:
4f:5b:2c:ee:6e:16:ab:45:62:d3:43:a0:64:63:1c:98:33:54:
af:ff:9b:a8:cb:aa:a0:f9:65:86:04:d7:56:0b:63:14:83:e9:
68:c5:9b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org