Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/WOLGestkuuyGQkl8ZBCVmM0gLwg.roa
File: WOLGestkuuyGQkl8ZBCVmM0gLwg.roa (raw, json)
Hash identifier: s3j6+ZIyiljEwtCy21iYag5KYcFZXohU6iXZNx9GGfc=
Subject key identifier: 58:E2:C6:7A:CB:64:BA:EC:86:42:49:7C:64:10:95:98:CD:20:2F:08
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4916
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WOLGestkuuyGQkl8ZBCVmM0gLwg.roa
Signing time: Thu 02 Jun 2022 00:30:07 +0000
ROA not before: Thu 02 Jun 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18710 (0x4916)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 2 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=58E2C67ACB64BAEC8642497C64109598CD202F08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ed:5c:d5:9e:a8:e1:dc:c3:07:bd:a9:0b:97:
39:56:48:30:a8:66:d1:32:7e:78:85:4d:69:2a:bb:
78:c6:9c:53:02:6d:28:ab:97:6b:20:b1:af:2d:1b:
ff:e8:3e:8b:25:00:dd:0e:03:d8:20:d7:6e:19:9e:
89:4f:97:92:ea:e4:cb:fd:0d:cb:84:59:95:30:e1:
30:6c:03:2f:e1:b4:31:6b:51:86:d9:36:15:09:f7:
e3:dd:ea:b0:51:a3:88:e3:df:90:53:97:e6:5d:f4:
94:01:f9:34:41:4f:d3:76:24:85:3d:74:2e:d5:18:
37:0a:64:90:c7:4b:04:e4:eb:57:ff:e6:9f:eb:b8:
bd:ff:62:45:ef:35:1c:34:fb:16:2b:a5:11:19:eb:
29:7e:8c:60:66:25:98:56:9e:ca:e1:c8:28:79:4b:
a5:db:e7:43:bf:cc:dc:b3:50:01:03:88:33:49:1c:
30:50:09:b4:c9:bc:d5:61:7b:45:05:0d:77:22:91:
62:4d:e2:d8:c1:44:c3:76:df:15:8f:b8:f0:2b:77:
1a:47:82:20:8d:0a:e1:a4:9f:71:07:31:c0:c1:e0:
ee:94:4c:d3:06:86:a6:49:0a:db:49:10:5a:f3:b7:
b3:80:69:3c:da:ed:fd:ec:9c:0c:a7:24:9a:7f:3e:
a0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E2:C6:7A:CB:64:BA:EC:86:42:49:7C:64:10:95:98:CD:20:2F:08
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WOLGestkuuyGQkl8ZBCVmM0gLwg.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.6.0/24
Signature Algorithm: sha256WithRSAEncryption
31:f5:d5:68:9c:49:3a:a3:9b:76:0d:00:31:0e:9d:5f:2b:79:
57:f5:33:c8:39:9d:54:bc:78:83:7d:89:69:6b:5b:72:97:dc:
ca:bb:57:c7:87:73:f0:13:47:6e:1b:4b:e8:16:c1:b8:f2:93:
ea:7b:9d:c3:28:57:05:8d:30:40:3e:2a:44:fb:d9:d0:93:aa:
ed:c3:14:94:e2:57:8e:eb:5d:30:ed:74:40:b4:9f:02:45:3e:
dc:09:80:08:c9:39:99:3b:ff:81:a0:2f:5b:bd:db:e7:6d:11:
10:87:63:8e:6e:b4:cd:aa:87:80:7a:2a:29:94:df:1a:53:33:
e4:7d:b2:f1:e8:87:56:a3:1c:45:a6:00:a5:31:3e:9a:5f:c9:
36:04:53:ea:ee:c3:80:a6:3f:44:f0:00:82:b3:e1:c1:8c:2f:
c5:95:e1:95:3e:00:78:79:26:2e:fa:f2:49:82:89:2e:28:15:
db:93:08:03:86:62:74:da:89:48:58:a7:c6:ca:78:95:72:cc:
c1:68:cb:b6:57:c9:70:19:72:56:c7:c1:c2:37:f1:f2:cc:48:
8b:0a:53:2e:f0:3f:9b:64:fe:e6:f0:50:a5:43:fc:1a:1b:e2:
4f:0e:15:40:91:04:26:5d:c6:42:22:35:f8:58:d4:cf:65:71:
f9:86:cf:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org