Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/rwfgJODjNv1s-h-ILUnIvVlrIYA.roa
File: rwfgJODjNv1s-h-ILUnIvVlrIYA.roa (raw, json)
Hash identifier: SBZSa77eVTumx7bNKInVkAFQwhYjjMWW2Pox4zg+l6g=
Subject key identifier: AF:07:E0:24:E0:E3:36:FD:6C:FA:1F:88:2D:49:C8:BD:59:6B:21:80
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4611
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/rwfgJODjNv1s-h-ILUnIvVlrIYA.roa
Signing time: Sat 09 Apr 2022 00:30:09 +0000
ROA not before: Sat 09 Apr 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17937 (0x4611)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 9 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=AF07E024E0E336FD6CFA1F882D49C8BD596B2180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ab:3f:b7:97:1f:ef:53:e4:74:81:6e:77:1a:
ed:a8:82:1b:50:44:9d:09:68:d9:68:3f:94:cf:73:
11:a9:e6:18:4b:07:9e:23:72:c7:44:ab:b6:52:f1:
8b:d2:f3:ad:c1:ee:55:d7:9f:f6:3b:3f:dc:74:d4:
7c:39:5f:a0:59:ca:c3:83:82:3b:1d:4f:21:fa:97:
41:1b:ae:b2:78:dc:84:0b:d8:d1:26:79:3b:f6:19:
65:a4:b5:4b:50:4c:dd:d9:40:9a:db:d8:1b:16:6f:
35:31:aa:07:9b:33:b6:aa:64:d6:89:30:f2:b2:0c:
7d:21:1e:e5:e2:3f:d5:e3:2f:c9:5b:a5:df:aa:3a:
60:7b:0d:db:59:98:b8:af:bf:2d:c0:13:3f:03:90:
4c:ac:99:1a:1d:70:90:66:a7:ee:9c:f5:9b:af:04:
f0:fa:a5:a9:3e:74:57:bf:0b:c5:c4:26:e7:26:05:
e2:1a:01:7d:4b:68:95:27:cc:92:8b:a4:15:a5:22:
9e:ec:0e:4e:ef:2f:a4:72:c9:95:87:76:df:c1:96:
84:e0:50:2c:e5:8f:5a:8d:73:aa:fb:47:4e:7b:ce:
c1:4e:98:e8:b3:95:1c:78:68:8a:50:82:67:65:d3:
e0:67:95:83:e5:8c:81:b4:34:c8:bc:ba:ba:62:22:
0c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:07:E0:24:E0:E3:36:FD:6C:FA:1F:88:2D:49:C8:BD:59:6B:21:80
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/rwfgJODjNv1s-h-ILUnIvVlrIYA.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:0e:a6:28:d5:5e:25:1d:e7:2b:ae:c8:21:22:05:a1:22:7b:
fb:7a:b6:ef:ed:0f:34:c2:fb:17:b8:17:cb:ff:65:ec:b5:96:
2b:ba:24:4e:fd:89:23:65:3d:e5:38:49:e4:ed:3f:d1:51:f2:
a9:76:e6:b5:97:97:b9:41:a1:ea:f6:4f:16:e9:4a:b6:dd:f6:
92:9c:20:8b:bd:ec:62:6f:ef:dd:50:c2:ae:81:3c:3f:7b:e3:
7f:0c:8b:a9:e8:70:7d:cd:d0:7e:d7:40:b1:ea:ba:a0:ae:2d:
21:14:39:b4:12:97:9a:be:bc:87:bd:42:e7:ff:72:50:aa:37:
b8:9d:39:f4:e8:af:5a:60:be:4e:f5:63:e5:39:df:b6:ee:ae:
7e:66:bf:66:1a:94:06:b2:be:fa:fd:ad:ce:e3:e0:f3:0b:6c:
6d:31:6c:76:db:20:37:2b:bb:0e:a7:bf:3b:05:28:d5:e3:cd:
7a:6a:0d:26:d3:86:7b:0c:79:71:b5:af:3b:e1:df:5b:ef:ed:
c8:57:40:13:5f:d2:27:30:0e:1c:77:09:39:ff:50:78:c0:6f:
ad:d5:5c:90:06:e1:24:19:f8:68:63:35:2f:65:9b:a4:dc:c2:
eb:68:bd:e4:0b:ad:57:84:fd:8d:41:54:4f:0e:13:02:a3:f5:
16:ff:e0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org