Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/VmoedqFqssordkkqagV3nDjg9pE.roa
File: VmoedqFqssordkkqagV3nDjg9pE.roa (raw, json)
Hash identifier: ruBQI5Gt1SZ0Ji94H7j/Yxs83iYfkIrSisPQU0QusCc=
Subject key identifier: 56:6A:1E:76:A1:6A:B2:CA:2B:76:49:2A:6A:05:77:9C:38:E0:F6:91
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4603
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/VmoedqFqssordkkqagV3nDjg9pE.roa
Signing time: Fri 08 Apr 2022 00:30:06 +0000
ROA not before: Fri 08 Apr 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17923 (0x4603)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 8 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=566A1E76A16AB2CA2B76492A6A05779C38E0F691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c8:d9:48:2b:25:0c:6f:0d:80:60:78:5c:40:
73:ca:64:4f:17:63:4f:cf:e7:57:b6:49:14:77:93:
76:8b:1e:e5:8d:35:8d:ad:de:cd:2a:38:f2:a9:ce:
a9:30:b4:bd:b0:52:52:51:4c:85:3c:53:2b:3f:ed:
ab:a5:f5:a5:6b:78:6b:70:38:ef:42:0c:a3:48:79:
11:06:95:03:83:14:58:95:f9:16:eb:e0:a5:98:dc:
b8:d8:23:e5:f1:7d:dd:6a:7e:58:db:65:a4:22:b3:
16:ab:ce:bf:8b:e5:46:58:5f:e2:c8:b0:ae:4e:23:
04:1c:06:58:6a:ed:a1:f3:f7:17:6b:0f:e4:e9:3e:
2f:a8:d6:78:41:9a:be:6e:54:38:b0:12:b5:e2:4f:
e3:fd:5f:89:8a:12:02:4e:88:ed:0a:2f:88:da:21:
6b:89:28:90:18:cd:7f:27:94:43:ae:77:64:48:b6:
b3:29:8f:0a:fc:8d:af:82:e8:40:a5:2f:d3:25:20:
c8:53:fc:0f:22:1e:1a:ff:10:9e:d3:7c:e0:a5:d6:
c2:44:46:49:f3:75:b2:c6:46:65:2c:29:f3:3b:2a:
83:1a:cb:b3:e7:aa:f7:48:5a:da:00:cf:59:ad:1e:
4f:12:1e:4e:7c:43:97:90:eb:b8:66:cf:96:b7:92:
09:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:6A:1E:76:A1:6A:B2:CA:2B:76:49:2A:6A:05:77:9C:38:E0:F6:91
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/VmoedqFqssordkkqagV3nDjg9pE.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
33:be:ed:e7:08:73:ed:9a:36:84:aa:0e:2e:2c:d3:30:7c:21:
ff:80:f6:3e:35:97:26:96:5c:ae:b6:8b:33:f7:d8:3c:d9:68:
4f:3c:90:70:f4:e1:b6:f5:f9:7f:1a:20:63:76:6c:c2:6b:fd:
c9:b4:16:b3:7b:a6:d1:4c:d4:b6:f3:61:72:96:b6:db:8e:fb:
c9:40:10:b8:2c:79:a6:4e:25:89:7c:2f:fa:78:25:b3:f2:e5:
24:85:48:05:ee:ab:9c:83:df:e1:7a:63:5e:08:a7:c3:07:c1:
0a:04:bb:7c:13:7e:5f:43:c2:b8:bf:24:e0:9e:7b:fb:e6:eb:
be:2a:15:02:15:47:12:ef:28:c2:37:1d:10:bc:f4:cf:c9:53:
1b:79:29:48:6f:4b:0a:3f:de:3a:bf:67:a9:18:d4:01:3a:74:
bf:20:b9:dc:3f:b6:ca:b7:73:73:b4:3d:41:35:ac:27:b2:ee:
23:06:ac:30:dc:e3:5f:96:11:9f:a8:a5:13:0e:17:27:14:a2:
f8:30:c7:61:01:13:2d:11:81:17:ad:5d:83:64:54:9e:c1:69:
43:fd:91:6f:8a:03:b0:b3:94:6a:85:72:75:22:da:7b:ee:d4:
cc:30:38:99:fb:6e:b1:e1:54:58:f0:6c:a8:f2:3b:14:6f:2d:
a4:4d:e3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org