Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/VMj0l9Vz93A-8RwJYoRxz5Zb0DI.roa
File: VMj0l9Vz93A-8RwJYoRxz5Zb0DI.roa (raw, json)
Hash identifier: CZmAn/gXxqxO6WdhK9dVBRu+To5pXLfJ14vqbqCm/bU=
Subject key identifier: 54:C8:F4:97:D5:73:F7:70:3E:F1:1C:09:62:84:71:CF:96:5B:D0:32
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4898
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/VMj0l9Vz93A-8RwJYoRxz5Zb0DI.roa
Signing time: Wed 25 May 2022 00:30:07 +0000
ROA not before: Wed 25 May 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18584 (0x4898)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 25 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=54C8F497D573F7703EF11C09628471CF965BD032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6e:e6:65:09:b0:9b:b9:42:ae:92:06:20:f9:
df:89:80:81:63:c4:91:94:15:2e:1d:f2:57:8f:8d:
66:8e:cc:11:50:be:a0:24:2f:28:c9:bb:a6:2b:dc:
09:05:0f:7e:33:2c:0a:24:c9:fb:d4:9f:2d:e1:48:
ae:8d:1b:62:61:c6:4f:4f:46:30:c6:66:f0:bd:d4:
c6:64:a1:2d:98:fa:78:17:3a:f6:81:c5:3e:8b:71:
6c:6a:82:43:d7:b2:22:78:df:57:33:8a:60:6d:1c:
cb:6a:ff:03:46:18:f6:1f:c5:59:af:12:0f:d3:02:
d4:ac:d4:25:de:bf:96:11:35:85:91:ef:32:35:7d:
57:c5:7c:47:80:27:97:ee:c2:dc:2a:bd:a0:8b:73:
a9:ff:71:54:78:80:56:39:c4:83:a5:9b:83:28:ee:
6b:cf:8c:11:26:5a:c4:03:a1:b0:69:be:be:e4:d8:
fd:ad:c2:95:f0:4d:90:88:56:27:af:c1:f5:d0:1b:
26:da:2d:75:6c:e8:31:ff:8e:be:6d:ba:79:82:23:
8b:f6:28:d8:ad:62:71:ba:a0:f7:45:94:75:84:80:
da:20:f8:a5:a6:fd:ba:45:fc:4e:d8:81:e2:de:2b:
2f:93:a8:64:de:b2:b9:64:91:96:ef:31:cb:e8:02:
a3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C8:F4:97:D5:73:F7:70:3E:F1:1C:09:62:84:71:CF:96:5B:D0:32
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/VMj0l9Vz93A-8RwJYoRxz5Zb0DI.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
15:e8:dd:d5:2c:61:0b:62:5b:ef:1b:72:d6:29:23:81:c1:74:
c9:86:9c:de:4b:8d:c6:9e:8b:7a:9f:46:78:85:d3:1e:b0:23:
a9:f9:4e:e0:80:ea:ac:62:4a:07:5b:dd:dd:88:2e:8a:e2:c6:
df:33:40:22:c4:c2:a9:95:80:04:16:a3:3d:0b:f9:e9:1b:e1:
7f:10:46:8c:b5:ed:a8:a6:1a:ce:d6:6a:67:d9:97:6f:ca:50:
14:8a:3d:71:60:01:96:4a:d4:67:84:4e:17:19:cb:3b:7c:c4:
98:fb:fa:09:7d:8b:8f:ed:6c:23:03:7f:1b:d8:e4:a7:fc:de:
3b:e2:78:47:4b:4c:80:2b:0f:e2:0e:af:25:9d:29:22:de:ef:
c2:d6:31:7b:8b:54:4d:cc:84:c9:80:7f:25:4a:ff:10:d8:5a:
2c:0b:c2:b1:fa:fa:ad:bd:af:fb:9d:61:ea:b2:40:c2:f7:2a:
51:d2:2d:a3:fd:a7:7e:47:85:5b:35:aa:24:62:68:d5:12:2a:
4b:7d:1b:f7:00:80:75:4e:2c:21:ea:71:da:33:ff:42:6c:25:
6e:27:18:fb:2f:51:6a:ac:82:5b:37:8c:8e:bc:7d:10:46:70:
68:b7:ae:ad:ba:00:4d:61:56:25:e0:08:c1:3b:56:6b:0d:f0:
d6:52:f9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org