Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/rpT0edczB7dKLtx2-XbW2DUR7pA.roa
File: rpT0edczB7dKLtx2-XbW2DUR7pA.roa (raw, json)
Hash identifier: kKaamWiL90dNtQc77GJ/lbizaJaKzFDJBWFzOlhorv4=
Subject key identifier: AE:94:F4:79:D7:33:07:B7:4A:2E:DC:76:F9:76:D6:D8:35:11:EE:90
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4436
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/rpT0edczB7dKLtx2-XbW2DUR7pA.roa
Signing time: Sun 06 Mar 2022 00:30:08 +0000
ROA not before: Sun 06 Mar 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17462 (0x4436)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 6 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=AE94F479D73307B74A2EDC76F976D6D83511EE90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e0:90:c4:eb:a9:94:e9:a8:55:d3:81:83:53:
ca:7c:5d:ef:0c:7a:ba:26:bd:ab:5f:6d:9a:82:5e:
58:5f:29:62:af:12:d4:05:a3:b0:01:94:2f:97:1f:
8a:07:d5:37:b1:a8:69:c0:2d:9d:3d:55:b0:48:1a:
3f:6b:36:17:0f:91:95:f2:91:64:35:1a:91:b7:4c:
f6:71:ed:ae:6c:3c:5c:bd:80:e9:a4:fc:90:f9:0b:
f8:ec:ac:00:11:61:dd:a1:4c:2d:16:6a:fe:62:3c:
42:99:00:e1:3a:c2:43:ac:24:ba:80:78:96:83:0e:
96:40:0e:1e:50:c1:bd:77:9d:33:b1:37:5e:39:44:
2b:24:26:b9:10:ce:dc:29:94:b0:da:fb:b0:de:72:
44:fe:4e:3c:f5:2b:02:e1:78:0e:25:1b:1d:74:bb:
64:35:0c:8f:ca:c5:e7:c1:76:0e:65:f6:81:9e:a5:
e7:7d:31:8f:13:a6:6e:81:7a:22:74:8e:17:d3:61:
12:09:5a:8d:b7:6b:dd:7e:a9:fa:fa:49:86:10:5e:
d0:12:fd:29:05:35:2b:63:7c:b5:55:e0:69:9a:ee:
6c:e5:9a:8d:f6:d6:d6:b5:65:b9:c4:68:b8:23:f7:
ff:08:bb:e7:61:3f:50:b2:e7:ae:a6:5c:6c:1a:f2:
dd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:94:F4:79:D7:33:07:B7:4A:2E:DC:76:F9:76:D6:D8:35:11:EE:90
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/rpT0edczB7dKLtx2-XbW2DUR7pA.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
20:20:95:71:76:ff:2b:62:8e:89:cc:eb:03:15:64:07:80:80:
51:8c:1b:3a:63:79:6f:26:1e:ea:e5:c2:93:c6:3c:da:b9:d6:
05:0d:d5:00:b1:83:6b:8d:01:6d:9a:94:27:6a:51:f5:b7:69:
35:0c:72:3b:54:23:be:f2:c7:fd:1b:8e:0e:44:39:5f:89:6f:
fd:e2:16:37:06:0d:b1:dd:6f:91:f9:6c:98:7a:66:ad:38:8d:
80:c1:ec:d6:3b:01:ee:9a:99:c8:dc:c6:86:51:e7:03:e3:3d:
49:cc:1e:86:f1:78:12:4f:f6:05:ca:e4:6d:3a:eb:95:60:eb:
33:62:85:51:93:21:90:b5:97:58:96:37:d7:56:ee:2f:86:ad:
b3:77:1f:31:4a:01:e7:a1:71:81:0c:a1:3c:28:9b:f9:00:04:
41:83:34:6d:d3:48:d9:54:ef:91:72:63:e3:76:a2:57:b8:4f:
c4:5f:4b:79:e4:23:a7:03:45:a1:5f:d2:3e:91:d7:9d:0e:64:
d2:0d:94:fe:c5:29:a8:42:c2:43:f3:79:73:a9:90:a6:2c:6c:
65:e5:68:e9:e5:cb:75:ff:bb:a1:58:9e:62:3d:93:dc:33:01:
84:4f:20:12:3b:af:2e:2a:2e:8c:34:23:02:46:33:12:e1:49:
57:4b:e5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org