Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/QXqYpaA5mLw44k4D0RUnRZUr8mU.roa
File: QXqYpaA5mLw44k4D0RUnRZUr8mU.roa (raw, json)
Hash identifier: lEPVVGRu0e9zqZabfJzh1W1leyXCHn6VeKkLwBC52wQ=
Subject key identifier: 41:7A:98:A5:A0:39:98:BC:38:E2:4E:03:D1:15:27:45:95:2B:F2:65
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4799
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/QXqYpaA5mLw44k4D0RUnRZUr8mU.roa
Signing time: Sat 07 May 2022 00:30:08 +0000
ROA not before: Sat 07 May 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18329 (0x4799)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 7 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=417A98A5A03998BC38E24E03D1152745952BF265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d4:bc:c0:9a:bb:74:22:8f:d9:ef:7e:8d:f4:
48:a9:86:86:da:15:35:8b:2b:ed:6b:9b:a3:7d:ab:
2c:4e:23:90:26:0b:ee:09:c1:e2:0f:c5:dc:54:a4:
91:5d:18:ab:05:d2:7e:48:ee:6e:07:f7:7a:10:72:
0e:56:c1:5b:69:40:6d:49:9a:13:c3:aa:4f:9e:b4:
d8:91:e8:f4:2b:dd:79:f3:ac:75:45:2f:56:b5:4d:
15:1e:ee:9d:7f:83:d1:d3:b7:2f:be:67:af:0e:28:
43:44:64:9a:56:17:07:28:f8:fd:d9:ff:e9:92:92:
c9:5c:ac:47:df:c3:13:ec:05:77:84:dd:9c:68:52:
08:1b:aa:98:ea:30:ff:f7:be:2a:fc:bb:e4:49:1f:
15:84:7a:b1:5f:4c:30:8e:95:c1:9a:91:32:74:64:
59:33:a4:86:e5:d9:c3:c7:e7:47:02:08:c4:75:e6:
c9:5c:a8:84:1a:4b:79:d4:3f:5d:f6:49:77:d4:e5:
05:3b:f4:96:7b:5e:72:56:f6:5c:2f:47:4d:d4:39:
fc:73:4d:2c:41:38:d0:a6:1d:26:c6:a7:aa:01:af:
09:ec:d9:47:25:2b:a6:f0:a0:0e:71:7b:17:15:4d:
86:0d:b0:be:82:f6:1d:15:22:b0:60:9a:8c:0e:53:
ca:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:7A:98:A5:A0:39:98:BC:38:E2:4E:03:D1:15:27:45:95:2B:F2:65
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/QXqYpaA5mLw44k4D0RUnRZUr8mU.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:79:4c:4c:b4:0b:45:c2:45:73:bd:01:5f:a0:1a:6d:6b:b8:
f5:19:06:97:b8:d2:a3:84:37:eb:63:03:40:cd:fd:b5:df:77:
44:5a:c8:70:78:5c:a9:dc:f5:37:60:2b:68:7c:c6:9b:81:13:
0b:a4:23:47:c5:ab:e9:56:dd:35:98:50:35:4d:da:fe:7e:49:
36:9d:9e:52:5f:35:4a:65:c1:59:dc:cb:fa:8a:0d:33:2c:e6:
9b:f2:65:42:d5:24:e7:85:5c:94:59:57:2c:a1:d1:66:90:ad:
51:70:bd:7a:04:e0:52:e8:bd:01:44:38:e4:a6:ef:ee:74:31:
31:d6:4e:dd:c3:10:eb:bd:14:c5:03:53:06:e4:7b:5b:65:1e:
c8:4b:87:72:9f:5b:a5:45:cc:bb:5e:c7:1c:ed:3d:88:b1:6a:
21:30:db:07:59:39:bf:d1:b1:24:1e:7e:cb:72:9f:34:4c:fb:
33:b6:b4:80:62:36:61:25:75:bc:8b:c5:4c:1d:35:df:60:90:
a8:d9:ca:7d:26:7f:c8:58:61:c1:7d:1e:26:03:7a:c8:55:cb:
8b:51:c6:c5:b5:ef:35:64:f8:1e:dc:cb:b3:45:70:27:10:da:
d9:c8:2d:a6:d5:40:ce:4a:f8:47:e7:f4:56:83:da:4b:c7:af:
80:67:7e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org