Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/lWWD3VbP6_C33yjUl4UzGSMftKw.roa
File: lWWD3VbP6_C33yjUl4UzGSMftKw.roa (raw, json)
Hash identifier: 3kEMzW+wbxaPO2JiclzLqWp5DpSlDjASUOvdpIxjPOY=
Subject key identifier: 95:65:83:DD:56:CF:EB:F0:B7:DF:28:D4:97:85:33:19:23:1F:B4:AC
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 47FE
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/lWWD3VbP6_C33yjUl4UzGSMftKw.roa
Signing time: Sat 14 May 2022 00:30:06 +0000
ROA not before: Sat 14 May 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18430 (0x47fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 14 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=956583DD56CFEBF0B7DF28D497853319231FB4AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e6:b6:fe:fe:55:f9:00:c4:d0:86:8b:b1:69:
a6:9a:25:b4:cf:b7:f1:5c:ab:9c:c6:5a:28:41:ac:
fb:26:cc:f2:24:04:37:8b:42:46:93:0e:f6:00:9e:
c1:9a:98:7a:c8:d6:01:7b:b6:e7:09:e5:74:65:40:
7c:42:35:08:a9:b5:1e:9c:3a:e3:1a:f8:71:d3:88:
25:a4:83:14:c2:4b:83:7e:56:c4:15:47:03:3b:4e:
c4:be:1f:b6:f1:e4:4b:52:70:15:7f:e7:43:ee:88:
13:be:64:72:45:a3:a1:93:45:f0:08:c1:2e:40:7d:
c7:19:15:15:72:f5:94:1b:39:13:c6:4b:68:cb:ae:
d0:39:d8:ef:c7:14:38:45:17:ae:55:bf:0f:c9:79:
26:08:c9:a5:74:35:fe:00:da:a3:db:bb:98:d9:c3:
c1:e6:73:14:d7:1f:09:50:2c:a1:87:56:d4:31:a4:
68:43:71:b4:ba:35:8c:27:69:be:43:90:e5:3c:11:
83:c7:f2:36:67:7c:3d:bc:77:af:38:25:74:9c:53:
44:2f:f9:c7:9d:63:44:97:ab:46:7e:e8:b7:2a:c0:
31:25:7b:b5:43:35:01:ca:da:47:b4:15:77:36:8c:
b2:98:12:26:e8:74:bc:7b:95:03:d6:8e:58:bd:5b:
fb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:65:83:DD:56:CF:EB:F0:B7:DF:28:D4:97:85:33:19:23:1F:B4:AC
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/lWWD3VbP6_C33yjUl4UzGSMftKw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:83:83:1d:af:50:a5:2d:dd:b5:48:6d:da:4c:eb:61:5c:d1:
51:f3:6e:31:f6:90:eb:58:74:dc:50:97:2c:ae:65:3a:e9:c1:
58:ce:2a:e8:2e:39:3a:06:a2:e6:ba:f9:f4:7e:8a:25:ac:0e:
c2:74:e0:80:17:79:a8:40:c0:7f:16:bf:d9:02:42:d8:30:50:
a9:c2:78:c9:2d:18:69:51:a0:e3:2d:36:12:d7:6d:b6:ba:3d:
ed:14:2e:51:31:93:2b:8e:6f:94:c2:c0:be:ac:45:a2:4c:32:
59:ad:7d:7e:63:e8:55:2b:14:32:23:37:63:ef:48:1b:62:6b:
0c:0e:7f:2f:1c:86:8a:16:4b:f7:10:75:5c:1d:7f:1d:2a:0c:
87:fe:e5:bf:0a:e0:77:d7:65:46:7e:42:84:f8:f5:d6:14:ea:
8e:69:89:e8:07:31:a1:61:70:ae:4b:18:b3:2a:67:31:03:e6:
db:03:a1:72:d8:42:69:05:34:5e:ab:a9:77:0a:a6:f2:12:1d:
07:5d:01:de:0d:55:41:66:bf:79:01:66:9f:63:e0:38:79:3d:
64:47:05:21:5f:fe:df:a2:a9:09:20:43:29:8f:4c:11:a1:62:
f2:76:fc:b4:38:f8:4a:e3:0a:e8:0c:77:47:23:cb:a9:31:9a:
eb:ae:bb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org