Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/teKIfkDSNmXXs6FLKS8RDSkWKzg.roa
File: teKIfkDSNmXXs6FLKS8RDSkWKzg.roa (raw, json)
Hash identifier: nWdy1WtWAL9xDJfXiUIZObpjL5vdy7Qgf66HFn1BASM=
Subject key identifier: B5:E2:88:7E:40:D2:36:65:D7:B3:A1:4B:29:2F:11:0D:29:16:2B:38
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 447E
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/teKIfkDSNmXXs6FLKS8RDSkWKzg.roa
Signing time: Fri 11 Mar 2022 00:36:56 +0000
ROA not before: Fri 11 Mar 2022 00:36:56 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17534 (0x447e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 11 00:36:56 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=B5E2887E40D23665D7B3A14B292F110D29162B38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0f:04:ed:dc:6c:1f:fc:12:1f:d3:27:6b:28:
2d:7d:7c:75:39:c1:6b:ac:f2:f4:49:06:2c:9a:9f:
2d:dd:71:d7:f0:5b:fd:ad:78:f8:bf:c8:7d:d4:6c:
04:37:ce:19:95:a0:55:4c:e8:dc:43:c5:57:25:a1:
20:88:09:ec:2a:32:c2:45:0d:52:ed:a8:6f:31:90:
f2:9c:e8:69:39:c0:6e:ba:e9:97:2f:fc:4c:9e:bf:
0c:bd:0c:c7:56:14:9a:4b:6c:01:fc:22:96:a4:11:
90:2b:37:c9:70:e8:f8:c3:9b:3c:94:65:d4:90:a5:
6f:23:ed:7a:e0:e0:e8:6d:43:be:b8:f0:cb:b2:22:
52:d0:b0:09:42:ba:4c:0d:93:b9:d7:62:7c:b3:23:
85:81:14:27:01:1d:12:5d:c8:08:3e:e0:01:2a:df:
eb:af:77:5b:ca:4a:88:6f:0a:7c:db:c9:e9:e2:c1:
2c:c7:d9:75:a2:00:95:17:f6:10:40:fc:52:65:a6:
0c:a2:6e:fe:12:c3:39:8e:df:41:e6:dd:8e:84:ff:
26:e5:98:a5:45:f5:91:7a:ae:bb:f9:17:21:27:9d:
28:1b:71:65:6d:f6:bc:8a:c5:01:1f:69:66:30:5b:
7b:b3:c3:f8:ac:e7:fb:bd:ae:67:63:e2:c3:75:3d:
9c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E2:88:7E:40:D2:36:65:D7:B3:A1:4B:29:2F:11:0D:29:16:2B:38
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/teKIfkDSNmXXs6FLKS8RDSkWKzg.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
22:aa:1a:5a:81:53:ce:94:de:81:f0:fb:29:b3:ce:b8:ea:3b:
1b:26:da:79:3f:17:38:bc:13:54:d7:96:50:b1:f3:16:2f:7c:
fd:fe:82:74:f0:b1:24:3c:47:a0:4f:0f:8b:f0:1c:fd:c3:f5:
b7:a8:c5:35:bb:a0:2a:a5:e9:e6:d7:83:d2:7e:36:cb:74:6a:
a4:2f:a1:8b:82:d5:ac:84:f0:95:74:71:74:da:c3:20:01:87:
e5:a2:bb:53:e7:d8:84:3f:15:1d:13:77:4c:32:7b:8d:39:ce:
5b:dc:47:5a:20:11:23:dc:7a:15:d4:80:32:e0:da:8a:64:ab:
ca:70:77:a5:bb:77:f3:64:77:e7:06:db:f0:32:a8:87:a5:49:
a9:74:41:4c:9d:43:8b:7c:7d:0a:78:a3:e2:74:36:ad:0a:18:
33:71:32:58:7c:f1:ee:ea:51:97:60:05:f0:bd:90:58:5f:6c:
b3:de:1c:77:88:56:12:b9:b9:9e:7f:7c:10:d5:95:f0:a9:40:
ab:0d:87:8b:8f:69:ce:1b:7a:4f:8b:4b:bb:5f:35:31:bd:f9:
a5:ce:a0:a9:89:ce:c6:29:72:9d:c9:0c:4a:79:d0:17:a0:de:
de:fa:bb:b2:4a:4c:f3:5a:16:e7:0b:e1:1a:c5:9a:51:3e:b2:
6b:7c:ca:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org