Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/tLPcColqNtk2x7AkKLMWkw0AOUg.roa
File: tLPcColqNtk2x7AkKLMWkw0AOUg.roa (raw, json)
Hash identifier: sAFG5rem2yG6MTrNCjxGUJx9UQat48ZTYB1PcneXzuo=
Subject key identifier: B4:B3:DC:0A:89:6A:36:D9:36:C7:B0:24:28:B3:16:93:0D:00:39:48
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 43FF
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/tLPcColqNtk2x7AkKLMWkw0AOUg.roa
Signing time: Wed 02 Mar 2022 00:30:13 +0000
ROA not before: Wed 02 Mar 2022 00:30:13 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17407 (0x43ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 2 00:30:13 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=B4B3DC0A896A36D936C7B02428B316930D003948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c5:14:1b:3f:05:bf:e0:5c:90:b0:4c:47:51:
cc:8a:2e:72:84:e0:65:0c:39:5b:0a:43:9e:e3:b0:
18:92:9b:39:47:b1:3b:b9:59:cc:3e:9a:43:c7:fa:
a3:19:1c:25:7c:69:fe:06:eb:2b:a0:53:96:ac:9f:
b5:31:ff:c4:e0:70:b1:4f:48:88:d7:5c:27:37:a8:
d3:f4:84:c1:f7:46:5b:3f:21:fc:50:f0:f0:3f:51:
80:e9:26:68:03:22:d0:6c:4d:82:48:1c:00:cf:b2:
19:90:56:87:94:4d:d9:ff:1e:4c:13:5f:8a:ad:ca:
43:7c:a7:f2:f8:e4:a9:7b:db:8c:62:1c:bf:c1:d9:
a8:26:cd:be:09:fc:37:a6:c1:6d:4d:4d:b2:83:3c:
5d:79:ed:68:9f:3b:df:be:3e:38:d6:e4:0c:c2:7c:
37:a0:53:88:89:75:cd:48:82:f5:bf:2d:70:52:f7:
9b:22:da:a6:28:fa:b4:71:86:5b:79:e4:6e:e7:fd:
69:e6:88:ac:43:b8:af:c1:8b:b6:cc:ac:6f:48:b0:
96:52:7e:be:fa:16:73:2e:4b:81:1f:aa:b0:2e:46:
70:38:30:3d:3b:07:a5:e8:94:09:c4:22:c1:90:ad:
26:3b:5c:d1:49:87:89:d5:b7:7c:b7:09:78:42:2e:
bd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B3:DC:0A:89:6A:36:D9:36:C7:B0:24:28:B3:16:93:0D:00:39:48
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/tLPcColqNtk2x7AkKLMWkw0AOUg.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
48:b1:c6:68:bd:cb:f2:59:d9:7e:cd:92:5a:81:d3:c3:77:14:
33:c2:32:98:65:1d:af:ad:fc:09:32:2f:9d:45:9f:13:82:60:
3b:01:09:32:25:a7:a6:7c:69:5a:6f:46:d1:1d:49:93:f7:9c:
de:84:e4:19:55:2e:7f:af:10:e6:4c:1c:12:7c:3f:e3:c0:f1:
b4:f3:fa:9a:f0:b7:e3:b0:1b:b5:84:f4:5f:2c:35:a2:a8:6c:
20:45:7a:14:8c:75:e4:f1:fe:11:68:1d:d3:9b:f0:52:6a:63:
d8:de:1f:37:30:f1:6e:23:f6:c0:b7:6e:85:e0:84:d7:fe:e3:
29:98:63:4a:c4:67:e4:b5:54:91:66:46:fd:92:65:9a:d5:47:
0c:24:74:97:29:92:bc:9a:b1:f5:81:78:82:b8:1a:8c:0c:49:
78:94:cf:05:2c:b2:14:d7:41:c9:70:3e:a7:70:cd:13:1e:02:
3e:eb:76:3b:1a:e2:17:49:02:6c:ff:d3:f3:f1:a5:d3:0b:31:
23:de:77:09:39:79:64:91:e8:ff:28:b3:39:ac:54:c4:62:bf:
2d:cb:26:7a:12:e5:3a:51:cc:81:1b:60:ad:4d:c4:be:7c:db:
dc:03:a9:ec:d0:c2:e2:41:db:84:3d:6a:24:d1:71:a6:70:f0:
c0:7e:8a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org