Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/fNTvFf1Q4SomOzaaIfqAUr-7nqk.roa
File: fNTvFf1Q4SomOzaaIfqAUr-7nqk.roa (raw, json)
Hash identifier: L2Xz4Lud1LXoIMrk52rCbKCSLvfoQpVbm52MKR/UpiI=
Subject key identifier: 7C:D4:EF:15:FD:50:E1:2A:26:3B:36:9A:21:FA:80:52:BF:BB:9E:A9
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4702
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/fNTvFf1Q4SomOzaaIfqAUr-7nqk.roa
Signing time: Tue 26 Apr 2022 00:30:07 +0000
ROA not before: Tue 26 Apr 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18178 (0x4702)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 26 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=7CD4EF15FD50E12A263B369A21FA8052BFBB9EA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ce:9c:34:57:d6:b7:0b:4e:d3:00:23:95:b5:
9c:62:d1:55:ae:7e:b1:d2:7f:fb:55:0c:cb:a4:3c:
b4:5a:9b:3f:bb:e9:d5:3f:90:75:44:7b:f5:06:4a:
c5:66:85:bf:1c:62:cd:d4:01:83:bd:34:4f:f5:d6:
10:1e:57:e3:f9:3f:5c:87:35:41:0b:b5:ba:d7:65:
31:b8:fa:3e:82:88:d0:b3:a1:fc:94:10:c8:a1:11:
cc:0d:cf:91:ed:30:b9:03:80:35:70:db:56:87:58:
35:95:f6:c4:1f:6c:29:b1:1c:74:30:a6:0e:88:e1:
5f:d9:68:51:71:0f:72:da:80:e0:5a:ed:eb:34:95:
23:30:88:e9:43:d0:a5:5a:e0:d1:92:c9:48:5d:6f:
b3:35:27:cb:a0:fd:3e:96:c0:db:0e:8b:d9:bd:df:
17:8c:24:49:90:3c:5f:8a:e1:ab:22:d0:81:10:c0:
47:a1:18:b4:f8:76:b7:b5:e1:77:cb:0a:9f:67:21:
44:f6:05:30:9e:4f:b3:9f:8b:ff:e3:a9:60:3c:d4:
b2:a1:5a:04:88:b6:f6:2f:27:41:6f:09:56:7e:93:
53:c3:90:e2:42:71:ed:39:a9:79:67:84:33:52:ab:
18:16:3f:31:b1:7e:11:27:40:b0:8f:8b:1c:70:9b:
ba:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D4:EF:15:FD:50:E1:2A:26:3B:36:9A:21:FA:80:52:BF:BB:9E:A9
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/fNTvFf1Q4SomOzaaIfqAUr-7nqk.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
65:bf:86:1c:53:54:d1:1f:ce:e0:8d:0f:0b:88:fb:de:7f:58:
b3:0c:7c:5c:33:c8:dc:1c:0e:b0:48:ce:15:7c:08:ce:62:5c:
2c:0e:3b:f0:00:01:6a:31:bf:75:90:3c:03:e0:78:20:6b:dc:
a8:bd:6b:0a:68:75:fb:4f:d1:de:ce:b4:1b:a6:df:cd:ba:50:
3b:b4:bd:ed:21:25:63:b3:5a:23:38:ea:08:c2:a6:a8:fc:6d:
58:c9:8c:2e:a9:90:b4:12:45:a1:80:e2:30:91:eb:1a:47:9f:
ba:ee:5a:95:9f:bb:cb:e2:a0:3e:10:a6:c5:a3:7d:76:22:d1:
b8:1b:22:c5:0c:fb:28:4e:43:2c:05:a2:94:9e:81:36:1f:29:
3e:74:ef:05:80:8c:a5:55:62:11:22:af:05:a2:37:71:a8:38:
4d:14:d8:5c:b1:72:58:e2:ca:97:63:e4:6c:c1:b1:bd:16:dc:
91:b5:78:59:d2:94:29:2b:4a:9c:6d:9b:06:e4:ce:cd:75:a1:
f1:30:96:11:2a:5f:18:10:17:af:bb:f8:9a:e4:a3:41:13:a6:
ae:73:28:7d:1a:a2:f2:bd:f0:a6:b4:90:10:c8:8d:e9:7a:9b:
fc:0f:d6:a9:48:df:9c:12:eb:50:0c:45:a9:cd:44:02:ee:a3:
b2:d4:bd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org