Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/fljCeHCQApqlDIDMT5YM_skkTZE.roa
File: fljCeHCQApqlDIDMT5YM_skkTZE.roa (raw, json)
Hash identifier: MjvblLI61R36Rkt77RQDgplQEKHSWvicVE15sxO4HNQ=
Subject key identifier: 7E:58:C2:78:70:90:02:9A:A5:0C:80:CC:4F:96:0C:FE:C9:24:4D:91
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4387
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/fljCeHCQApqlDIDMT5YM_skkTZE.roa
Signing time: Mon 21 Feb 2022 00:30:06 +0000
ROA not before: Mon 21 Feb 2022 00:30:06 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17287 (0x4387)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 21 00:30:06 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=7E58C2787090029AA50C80CC4F960CFEC9244D91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9d:53:a4:12:21:e9:d0:35:ae:a8:63:4a:02:
1d:78:86:99:48:cf:58:f7:c7:ec:2c:20:de:a2:f2:
39:89:ed:d4:54:5c:0a:d9:4f:3e:dc:74:4e:0f:65:
c9:df:43:ac:f1:5c:f1:d5:a3:fb:94:98:08:fe:8e:
c0:9f:d7:e3:be:c6:cf:58:ab:6f:a4:50:37:41:d2:
b7:9c:c3:ca:01:52:af:f1:76:dd:eb:2b:fa:67:67:
da:53:f2:bd:a8:3e:b3:b4:5c:3c:e5:a4:40:44:72:
82:3f:8d:9b:b8:53:1d:1c:f1:30:69:56:18:18:f9:
76:78:65:b5:81:a2:df:69:71:8f:50:33:06:f0:b8:
3d:b7:70:66:4f:0b:46:05:a8:1f:2a:a0:f9:97:8e:
ff:de:e4:56:68:79:a7:2b:8e:13:53:b0:34:9c:e0:
21:be:c7:00:cf:21:4f:b1:13:3d:9f:4c:57:b8:c0:
5a:53:8c:9d:74:5f:ef:6b:00:7a:47:64:0f:48:ab:
f3:e7:b7:08:83:05:03:81:15:35:2f:d5:86:3e:8b:
8b:e6:70:d5:fe:d7:ef:32:74:82:bc:17:ca:fa:07:
4b:fa:2f:9e:48:53:78:4c:e7:a8:97:50:d0:e3:a9:
03:85:81:c0:f4:5e:dd:eb:42:f3:cb:9a:24:9c:16:
fc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:58:C2:78:70:90:02:9A:A5:0C:80:CC:4F:96:0C:FE:C9:24:4D:91
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/fljCeHCQApqlDIDMT5YM_skkTZE.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:9c:1b:a0:26:9b:af:ac:36:00:9e:e5:e3:bf:89:35:91:a9:
f8:8d:50:13:d4:b6:6a:32:b1:36:c5:74:85:3e:2e:b0:18:65:
9e:d0:09:9d:19:9b:7b:d2:15:e4:59:55:3f:ae:c4:3a:da:b2:
64:57:88:25:cc:d7:47:1e:e2:d5:0f:a0:bc:7e:a6:7e:2f:0b:
6a:a8:10:2d:ae:51:79:e0:ca:f9:06:af:ec:8b:c4:52:26:0e:
e5:27:3f:1e:00:0a:91:ef:42:f3:40:b6:3d:55:4a:82:cd:bc:
7b:dc:98:e2:e7:f5:42:3a:7e:67:ce:1e:64:2e:d2:58:2f:04:
5d:63:47:4f:0b:a7:e3:67:43:22:7c:3d:d2:49:72:75:37:a4:
71:44:c3:99:dd:a8:32:c2:a4:f5:2f:90:6a:e2:0d:54:0f:e2:
d3:9d:64:90:e5:78:ec:13:89:59:e9:6f:1b:05:88:75:76:2d:
18:20:6b:ea:d6:e0:96:79:21:1e:44:bc:bc:44:ee:20:a4:a2:
ab:53:b6:8c:f2:0e:19:1d:c2:ff:ff:42:2b:fb:fa:a0:86:5f:
66:c8:51:0b:12:d6:43:79:b2:32:d5:c4:11:db:7b:43:4e:b1:
52:1a:42:c3:df:b7:d5:13:be:57:66:05:80:aa:64:55:0d:3c:
72:5f:65:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org