Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/YyraUTl2sg89pKBev9kZFyPebg8.roa
File: YyraUTl2sg89pKBev9kZFyPebg8.roa (raw, json)
Hash identifier: LsTAsG+CCZzdDJdUaiIBl0VV3V1RX4AaBz8fklOGpq4=
Subject key identifier: 63:2A:DA:51:39:76:B2:0F:3D:A4:A0:5E:BF:D9:19:17:23:DE:6E:0F
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4833
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/YyraUTl2sg89pKBev9kZFyPebg8.roa
Signing time: Wed 18 May 2022 00:30:05 +0000
ROA not before: Wed 18 May 2022 00:30:05 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18483 (0x4833)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 18 00:30:05 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=632ADA513976B20F3DA4A05EBFD9191723DE6E0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fd:4e:61:40:f0:f0:90:8b:cc:13:1d:d3:e9:
03:2a:ce:86:9e:9b:00:e4:3c:f4:bd:69:c8:be:06:
f9:4a:fd:76:5d:9e:39:9e:74:c0:0a:f8:8a:a3:3a:
9b:74:41:56:5b:48:29:81:9d:c8:a2:fa:d5:3c:b7:
48:a1:c5:6b:98:8c:7c:ba:a4:a8:bf:1d:73:4e:3a:
af:b6:b8:aa:0d:89:25:f7:3e:37:4a:01:fa:f2:ed:
f1:24:73:82:8c:fb:e7:0a:ce:f6:48:f3:10:77:8f:
0d:60:ad:94:a7:6f:15:0d:fd:fd:5d:cf:b9:48:0e:
85:a1:eb:13:06:73:06:83:6a:21:7d:34:3a:52:69:
10:13:6b:da:37:d0:ae:06:83:dc:44:3d:f1:70:0f:
28:03:2f:90:18:4e:e4:5c:34:31:05:37:c8:c5:dc:
6c:bc:76:8c:3e:4c:29:7f:dd:be:c8:9d:5e:fa:69:
38:a8:e2:d6:ad:57:ff:69:f4:21:f5:00:1d:9c:2c:
2f:59:17:05:1e:ee:9f:91:b0:c8:e7:67:76:72:aa:
8f:e0:16:ab:49:2b:82:01:f2:86:6b:97:ed:f3:65:
a7:86:56:26:2b:e9:ae:e9:9c:8e:fa:cf:de:fd:cc:
cf:35:12:df:9d:40:6d:34:89:8e:cd:ce:e8:b6:eb:
3a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2A:DA:51:39:76:B2:0F:3D:A4:A0:5E:BF:D9:19:17:23:DE:6E:0F
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/YyraUTl2sg89pKBev9kZFyPebg8.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:77:75:d0:ae:bb:26:c6:5b:ad:30:5f:9b:f1:57:40:19:f6:
13:d5:6b:15:fe:f5:fe:b8:8a:90:ee:0e:5d:c9:3b:9b:be:64:
7a:47:5d:dc:44:bd:65:1b:0b:5c:33:4d:64:34:6a:c6:a7:f1:
eb:2c:57:ab:7f:26:93:33:df:24:1a:3f:3c:5d:bd:05:d2:b6:
cc:bf:b2:f0:fd:b0:8d:be:68:fd:54:05:a1:ac:17:64:c2:2e:
64:fa:9b:eb:98:f1:9a:b2:d9:19:3e:a1:58:ef:67:b8:8a:fd:
53:2d:e9:54:01:94:95:00:0d:54:55:24:11:fc:68:f8:77:09:
df:89:ca:fe:db:dd:0c:ac:c2:a4:17:02:1c:75:c8:3c:48:87:
da:2f:57:2b:34:1e:67:5b:71:01:4d:33:40:ac:6d:a2:66:43:
f0:9c:a8:b1:d3:27:c7:4a:8b:22:f5:eb:8b:bc:67:f6:d6:8d:
1b:41:05:8b:03:f9:73:ca:3f:0b:d0:65:b2:5d:49:14:48:90:
1e:47:e9:2a:db:03:3f:dc:9a:7b:a2:1e:48:f9:02:66:3e:23:
49:f6:0b:70:1b:bc:fa:8b:17:f2:42:fb:47:41:20:7c:14:49:
72:9b:c7:69:c4:65:b6:f1:e1:05:73:6a:ea:4e:ca:70:c0:6f:
9b:b2:20:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org