Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/sztPqRmPGw7czRnEtMWM-wdk8hU.roa
File: sztPqRmPGw7czRnEtMWM-wdk8hU.roa (raw, json)
Hash identifier: FaWzwjufSXHq+525jK2xj8XAafk3uicz4OyQLMyim2k=
Subject key identifier: B3:3B:4F:A9:19:8F:1B:0E:DC:CD:19:C4:B4:C5:8C:FB:07:64:F2:15
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4428
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/sztPqRmPGw7czRnEtMWM-wdk8hU.roa
Signing time: Sat 05 Mar 2022 00:30:06 +0000
ROA not before: Sat 05 Mar 2022 00:30:06 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17448 (0x4428)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 5 00:30:06 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=B33B4FA9198F1B0EDCCD19C4B4C58CFB0764F215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f9:7c:cd:65:a3:5d:91:ed:0a:65:5b:c4:cb:
7f:cf:dc:70:af:8b:ea:04:19:cb:1c:f1:b0:9a:f6:
05:76:1d:0a:8e:a4:d0:c9:74:82:7e:5b:d3:68:c6:
20:d2:45:cc:74:fa:3b:f8:c6:19:c3:5e:b4:8f:ff:
93:af:d0:a0:6f:fd:a5:1c:ba:32:00:75:1b:76:a5:
a9:01:ca:3e:7a:5c:f7:91:98:21:34:30:fa:c5:fc:
5b:4d:82:e8:45:07:f5:94:ae:90:a5:77:6b:c4:50:
e6:30:0b:6f:2b:23:f3:69:25:59:be:cc:4a:fc:0c:
29:18:90:5f:1f:0f:d4:ac:df:f5:00:c4:1a:51:34:
4a:24:77:73:04:ed:d6:cc:13:fa:02:f6:18:29:69:
0b:e3:96:4c:fe:93:b8:d4:ff:9d:32:e2:cf:6e:91:
5b:16:c3:e3:70:a3:46:24:c7:b2:dd:2f:7c:e9:7c:
02:c4:ca:9d:27:ae:d6:e2:82:33:e5:03:43:5c:0c:
11:af:b3:ad:08:43:fb:9f:a5:85:b0:5d:d5:17:fe:
c7:29:51:1b:02:17:40:46:a7:c7:4e:7d:a5:91:a2:
ba:e0:a2:87:41:a8:76:77:3d:e0:e0:d4:d6:e3:50:
2b:fc:9c:57:43:81:e2:af:be:bc:e4:38:68:e7:0c:
39:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:3B:4F:A9:19:8F:1B:0E:DC:CD:19:C4:B4:C5:8C:FB:07:64:F2:15
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/sztPqRmPGw7czRnEtMWM-wdk8hU.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
98:27:c6:9a:3f:ab:d9:ca:6e:9e:fb:b8:1c:e7:19:9d:91:0d:
dd:9e:cc:8f:4c:b6:7e:2f:e1:ad:92:97:80:c3:5c:18:c4:cd:
5a:f0:31:6a:f3:fe:f3:c7:9a:1a:50:ba:a0:15:f9:d2:3b:c3:
23:b2:6a:94:b8:8c:e2:54:34:1f:1a:2b:8f:a1:a8:e8:93:86:
cd:96:b8:ba:a9:4b:e9:03:c2:51:a0:95:06:14:d2:2a:60:7c:
bb:38:19:7f:2e:c0:41:36:21:90:f4:ad:6c:b4:4b:a7:de:49:
93:24:21:68:cf:86:f4:82:f7:63:2b:14:98:3f:7d:15:f6:3a:
97:07:00:c6:31:83:a7:62:c1:e6:1a:5e:0e:0c:e3:79:c1:d2:
01:9f:9f:3b:c2:3a:ce:12:02:5c:8d:b5:5a:b8:f9:a6:33:5d:
30:61:98:70:ef:8a:58:79:20:bb:64:86:33:61:77:31:72:77:
30:97:0c:16:a6:a0:b5:af:38:76:81:bb:97:3d:ad:38:70:6b:
8e:08:bf:2e:f1:47:45:89:6a:6a:8e:0e:c8:db:e9:7d:e5:9d:
3d:8c:4c:eb:02:6a:a7:74:c7:5e:f8:c9:ca:fe:6c:1b:b0:37:
c5:86:1d:72:ac:26:2f:dd:33:59:89:5e:06:d5:cc:1b:f6:2f:
63:ea:6a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org