Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/u76zCmi6QZDboLy9wL3e5zo4oU8.roa
File: u76zCmi6QZDboLy9wL3e5zo4oU8.roa (raw, json)
Hash identifier: 1FxiEdrzYhc7g7NIQbQsp8AnIRlWuYVqBz6SYePyIbg=
Subject key identifier: BB:BE:B3:0A:68:BA:41:90:DB:A0:BC:BD:C0:BD:DE:E7:3A:38:A1:4F
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 479C
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/u76zCmi6QZDboLy9wL3e5zo4oU8.roa
Signing time: Sat 07 May 2022 00:30:11 +0000
ROA not before: Sat 07 May 2022 00:30:11 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18332 (0x479c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 7 00:30:11 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=BBBEB30A68BA4190DBA0BCBDC0BDDEE73A38A14F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:51:4c:81:2b:4b:5d:29:ec:7b:f3:c3:79:1a:
09:35:dc:d9:5d:50:58:bb:6f:6d:80:b4:c5:e0:cb:
f3:30:8a:08:49:c4:8c:e4:7f:31:0f:2f:c4:b7:43:
b8:e4:84:c0:c5:be:02:7c:4f:5c:b5:f3:e1:d8:b4:
dd:80:ca:03:3f:c3:af:fe:d4:83:13:25:92:b2:08:
77:93:0a:03:68:e4:bd:4e:77:0a:15:d8:0b:c2:36:
ff:65:dd:73:7d:e1:50:ee:98:4a:eb:78:98:76:8d:
48:51:30:ed:45:85:5d:09:12:8e:ab:69:9f:d7:5d:
a2:4d:ce:da:f2:09:41:2f:95:12:b6:4a:b1:d2:25:
7f:af:87:4c:12:62:58:a7:eb:36:63:1c:97:6a:5b:
ad:9e:e1:e7:0f:f0:39:a7:7b:2d:82:8a:43:fa:77:
a3:76:b2:73:e7:d2:08:54:68:c3:0e:0f:5c:e9:ec:
6a:be:9d:03:b3:7b:ee:ad:b3:01:d7:41:ef:99:ad:
ce:44:ef:f2:db:0d:24:f6:83:db:28:8a:94:b6:e5:
0c:27:d5:6f:34:8b:aa:2c:94:bd:43:7e:94:6c:96:
d6:de:e4:25:8b:75:bc:7c:1b:32:a1:f6:28:14:82:
3f:93:e7:40:b6:85:c0:55:61:31:d2:ce:cf:ad:5c:
64:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BE:B3:0A:68:BA:41:90:DB:A0:BC:BD:C0:BD:DE:E7:3A:38:A1:4F
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/u76zCmi6QZDboLy9wL3e5zo4oU8.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
06:6b:c5:e1:b9:e5:47:0e:4d:a2:dd:b8:06:a9:ea:30:ca:b9:
18:44:f0:09:14:88:47:70:e9:3b:09:57:79:b9:86:50:5c:37:
98:1f:56:3f:df:53:9b:8a:73:dd:21:13:5d:78:a0:39:b2:2c:
9d:9e:6a:ae:28:39:05:ea:90:a5:ee:75:f1:88:1e:71:d5:05:
93:9f:db:7b:61:06:47:d2:35:a8:40:1d:ec:d3:92:df:5e:08:
79:7c:75:b3:4b:3e:1a:09:65:df:7e:65:71:e2:b2:b3:21:8a:
ab:88:21:b1:7c:bb:d2:42:f9:9f:d3:4f:60:54:11:f3:cb:6f:
31:6e:fa:cc:6b:90:72:b5:08:c5:11:b5:8e:1a:9c:c6:93:f6:
81:2f:cd:68:f2:4b:86:9b:c8:4c:1b:e6:10:fd:6e:88:36:a2:
a8:01:58:95:2a:1c:b9:6d:30:ae:3c:49:bf:0b:dc:e6:eb:f3:
1c:14:d4:b9:b4:36:60:42:33:8b:ad:2e:9b:54:aa:ca:35:f1:
ef:cf:3e:bc:95:09:04:2e:01:38:73:d1:78:78:c7:be:da:66:
61:ae:ca:3f:56:fb:e1:4c:d7:8a:7c:3e:ea:66:82:31:3c:f1:
ff:10:dc:eb:65:e4:a4:c3:fd:7a:a8:96:b3:f5:3b:01:fe:3e:
d6:a8:e3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org