Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/PI_PvWXUVMLDLgo-jwBJDVvCzCw.roa
File: PI_PvWXUVMLDLgo-jwBJDVvCzCw.roa (raw, json)
Hash identifier: I0FNuS6VvMw9SN330jh7HdUvc2NjQZ87o7cKgynZyRM=
Subject key identifier: 3C:8F:CF:BD:65:D4:54:C2:C3:2E:0A:3E:8F:00:49:0D:5B:C2:CC:2C
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4753
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/PI_PvWXUVMLDLgo-jwBJDVvCzCw.roa
Signing time: Mon 02 May 2022 00:30:08 +0000
ROA not before: Mon 02 May 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18259 (0x4753)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 2 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=3C8FCFBD65D454C2C32E0A3E8F00490D5BC2CC2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a9:6d:87:c7:7e:84:56:ff:62:68:87:50:ec:
cc:4f:17:6f:ff:aa:35:65:4c:4b:0b:b3:6b:2f:70:
10:c5:ec:f5:ee:56:6d:3d:bc:b8:e8:b5:20:a3:c7:
cd:8a:02:97:cb:e1:96:20:be:e9:db:91:1d:1d:23:
5f:23:68:ba:12:4f:a6:1e:70:86:30:7c:b8:91:ec:
31:22:23:fb:6c:54:b6:00:68:b5:6e:06:15:20:e3:
fa:2b:a9:c9:46:8c:b3:d6:85:20:dd:88:ad:21:5c:
90:75:b1:a4:65:d8:ee:01:04:18:1b:1b:b0:8f:d7:
54:ce:7c:81:9e:00:3c:0b:57:50:fa:0a:7f:42:02:
cb:e7:a7:c9:4f:15:19:74:e5:03:c8:2a:ad:e3:5d:
dd:08:21:43:4e:a4:79:be:33:6a:7b:f9:63:ed:c9:
71:01:15:7a:51:0e:59:88:22:98:3e:30:fa:50:94:
43:67:f8:ec:cf:09:3e:69:15:fb:31:3c:90:11:b4:
03:aa:28:09:25:16:3b:9a:b9:5b:5c:b7:47:9b:d1:
36:a8:6a:01:08:78:67:7f:8a:ae:d6:81:c3:1c:22:
8d:01:3d:5c:d7:f3:93:e7:3f:cd:67:d7:04:b4:b5:
2b:4e:0c:53:73:b8:bb:48:a6:cb:2d:33:03:6d:a9:
2e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8F:CF:BD:65:D4:54:C2:C3:2E:0A:3E:8F:00:49:0D:5B:C2:CC:2C
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/PI_PvWXUVMLDLgo-jwBJDVvCzCw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
33:ea:d1:55:00:ba:b5:34:29:9c:01:1f:f7:ed:7a:17:97:46:
f1:96:44:9a:de:55:54:86:dc:bf:f0:7b:9e:fb:cf:31:39:53:
0e:c4:46:29:34:4b:25:35:a6:4f:99:31:4f:4e:7a:7d:a2:a9:
9c:d4:02:f4:6c:c5:32:8e:2a:6f:e5:9c:26:0e:f9:b6:97:fe:
b5:08:60:91:23:11:33:1e:e8:e0:da:8d:a9:eb:39:eb:b9:2d:
30:75:e9:d8:16:64:ce:b3:6c:61:45:e2:58:bf:59:0c:37:be:
60:cc:2c:fe:76:b4:83:c3:9b:c8:c4:8a:10:98:e0:01:64:f8:
fc:91:09:cf:da:6c:e2:9f:c3:7e:08:54:b9:f7:bf:58:47:2f:
72:aa:39:72:ca:8e:9c:d6:b9:9b:45:8e:e8:48:7b:eb:7e:c0:
06:12:08:02:56:d2:ca:83:8c:bb:92:eb:5b:53:59:3a:af:c1:
66:ab:c3:02:64:c1:fe:be:c4:63:0d:37:bf:86:48:cb:10:66:
a6:08:77:e7:ea:e7:5e:8b:c8:6d:af:0b:b8:4e:78:a7:a2:45:
5b:04:ee:4c:02:cd:f1:a7:ed:e0:24:d2:4d:dd:57:39:77:8a:
f8:f9:9c:41:5c:91:e5:07:2b:39:be:ee:54:db:84:92:71:99:
a3:cc:c4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org