Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/jpTd6vIEA-KiqvGBSpSOZX-u0Ew.roa
File: jpTd6vIEA-KiqvGBSpSOZX-u0Ew.roa (raw, json)
Hash identifier: mG3neca0IB3xOP9DjxdGwuBBAyVLIotmqKybZxOzlV8=
Subject key identifier: 8E:94:DD:EA:F2:04:03:E2:A2:AA:F1:81:4A:94:8E:65:7F:AE:D0:4C
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4376
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/jpTd6vIEA-KiqvGBSpSOZX-u0Ew.roa
Signing time: Sun 20 Feb 2022 00:30:06 +0000
ROA not before: Sun 20 Feb 2022 00:30:06 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17270 (0x4376)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 20 00:30:06 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=8E94DDEAF20403E2A2AAF1814A948E657FAED04C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7c:d3:4a:cd:39:3a:a9:56:49:f4:f9:11:30:
f9:e1:e8:a9:35:46:cf:ed:bb:25:ab:fd:83:b9:bc:
14:8a:27:1c:2f:28:cc:0c:b4:30:27:d1:0e:48:e4:
f0:7a:2b:7d:8d:0a:dd:4e:47:b7:c4:72:81:c4:15:
d8:7f:ba:c2:09:8a:ad:8b:70:a5:4b:64:d1:0b:7f:
8a:47:9f:8d:2f:48:ab:cb:a6:9a:ad:11:f2:a4:5b:
5e:02:90:9f:21:91:f3:88:24:a6:b4:38:2c:65:22:
b0:08:df:71:ca:e7:8e:40:44:d5:fe:d3:8f:14:ca:
36:eb:8d:da:81:e4:52:04:e3:3c:2d:5e:92:34:5d:
04:24:3c:25:3a:f4:5e:c9:67:85:25:37:08:ca:f4:
25:5d:21:f0:cb:25:83:f2:26:16:f2:8e:a1:b9:3b:
08:ca:de:8c:e5:50:0b:2c:50:af:1f:c0:2f:59:78:
e3:75:cf:99:8d:e3:25:74:cc:67:b3:8f:3e:ac:f0:
3a:13:f6:21:0c:32:d7:38:6c:94:c6:2e:0d:fc:53:
04:46:ad:7f:6d:1c:24:5a:d6:c0:e2:78:28:7f:f1:
80:c0:9b:5f:9d:b7:c7:36:be:95:54:44:4c:bc:2b:
25:1c:85:00:21:92:8f:d9:44:ea:47:d2:f1:65:f9:
0b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:94:DD:EA:F2:04:03:E2:A2:AA:F1:81:4A:94:8E:65:7F:AE:D0:4C
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/jpTd6vIEA-KiqvGBSpSOZX-u0Ew.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
12:e1:a5:e1:16:a9:a8:a5:87:9d:61:fd:25:24:2c:86:6e:77:
fa:81:8e:c5:3a:ec:d1:52:13:24:f2:b2:c9:ec:41:f2:ea:0c:
f0:6d:18:53:f9:52:f8:3f:34:c1:f6:60:17:40:97:61:6e:2e:
2c:73:35:75:24:36:b2:e0:4d:71:80:16:88:bc:ef:80:3b:07:
70:e3:a4:55:f8:d8:d5:2f:9b:cb:ed:c7:42:73:f5:bc:2b:fb:
c6:81:f3:88:81:8e:a9:52:b5:a7:74:9d:63:f4:95:2b:0f:89:
8b:9e:2f:8b:32:ec:e3:c1:08:21:29:44:59:5c:b1:27:89:a9:
dd:b9:ea:bb:59:1f:a3:10:d3:cb:ed:02:d3:68:47:84:05:6d:
2c:55:4e:1d:17:d9:02:c1:50:0c:ca:5d:2b:df:90:65:f3:25:
07:e7:ce:3a:2b:a8:5e:5a:f2:a0:e7:3c:4e:77:34:24:3a:7e:
db:e9:2a:e6:8c:3a:55:4a:37:8e:46:26:8f:b9:ec:a4:f9:54:
fa:73:44:e2:2c:11:7f:9c:38:6f:c6:94:19:2a:e6:31:f2:2d:
42:bb:bf:bd:a0:0f:ce:4b:74:c8:81:ea:8d:34:e7:33:69:9c:
65:11:c4:b5:3f:5d:fa:29:01:e5:f7:de:71:8d:c6:b8:fd:3b:
ab:1e:85:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org