Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/u_8pu2D_aFQeWoBHTWRuulcYRTc.roa
File: u_8pu2D_aFQeWoBHTWRuulcYRTc.roa (raw, json)
Hash identifier: K2JpTWpUpZQiXTcKHELm42A3edCCvcOa9ZtqhqWgoxk=
Subject key identifier: BB:FF:29:BB:60:FF:68:54:1E:5A:80:47:4D:64:6E:BA:57:18:45:37
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 44E3
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/u_8pu2D_aFQeWoBHTWRuulcYRTc.roa
Signing time: Fri 18 Mar 2022 01:07:27 +0000
ROA not before: Fri 18 Mar 2022 01:07:27 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17635 (0x44e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 18 01:07:27 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=BBFF29BB60FF68541E5A80474D646EBA57184537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:45:28:f4:9d:f2:86:29:b5:66:75:cd:7a:9d:
de:58:6c:e3:ae:20:d4:7a:e8:22:05:65:8c:01:63:
31:5a:04:66:07:6b:3d:b1:68:28:0a:7a:82:e5:1d:
ec:e2:ff:ad:29:c7:48:d6:e1:b5:30:fe:35:d1:75:
f0:54:34:fb:fd:cb:d8:c3:e6:6a:88:aa:b3:25:2b:
7e:4c:92:70:9e:45:21:1d:6e:5c:e4:2a:47:1a:d0:
d7:b5:28:b8:ab:d9:83:25:14:f9:78:eb:20:97:3c:
69:4b:e9:5e:09:a1:ba:dc:96:ff:1c:f2:2d:d1:a8:
1e:2c:b2:aa:e1:33:b6:a4:35:33:fb:e7:1f:7a:fd:
e7:7a:16:d0:ca:71:53:2c:39:a8:29:1c:48:35:c0:
e7:7a:2b:75:df:98:40:f5:1d:4e:06:60:71:3e:8d:
04:27:a8:6b:db:95:48:4b:ed:c8:5e:b5:58:81:5a:
0c:1d:80:4c:b8:07:a0:a9:59:23:9a:04:68:75:5d:
4d:24:27:5f:70:fa:7e:f5:f3:5f:59:2b:b2:b7:b4:
e3:9b:eb:c4:5f:cd:97:51:cb:99:93:41:64:62:2e:
26:70:c4:de:65:32:73:63:89:84:11:63:dc:11:ba:
dd:c9:70:3d:ab:d2:30:e2:a9:6f:87:d8:e5:1f:c0:
c2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FF:29:BB:60:FF:68:54:1E:5A:80:47:4D:64:6E:BA:57:18:45:37
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/u_8pu2D_aFQeWoBHTWRuulcYRTc.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.8.0/24
Signature Algorithm: sha256WithRSAEncryption
16:d8:0e:eb:b2:b3:df:c8:1c:9c:6b:0b:bf:1f:38:67:d4:3c:
cf:f6:bb:78:bb:36:37:46:48:56:98:22:a6:f1:11:e2:4a:43:
71:c5:33:c1:03:ef:54:6c:0b:43:7c:83:99:28:03:88:d6:0e:
07:4a:1d:0f:49:cc:7c:16:b0:27:97:c9:4b:de:46:df:a2:bc:
cd:a3:8a:db:b3:33:55:b8:23:d3:df:5c:97:93:c3:03:5e:84:
af:cf:d3:19:6a:a4:a2:3f:1d:9d:f5:f5:6c:55:7c:36:48:19:
13:89:2c:84:b4:ff:a0:57:7e:ac:52:4a:c9:81:af:aa:7e:68:
5e:e5:44:54:c9:61:06:20:f7:b5:80:47:0e:8a:55:ea:9b:00:
6d:4c:18:82:03:b4:73:c4:a2:76:3d:19:17:48:c3:16:76:6b:
d8:41:16:04:67:18:9c:07:4e:aa:cc:9f:3a:66:1c:24:dc:e0:
a2:7c:28:d1:57:67:0d:7c:09:41:19:e4:02:eb:2c:0d:2e:7c:
4d:b7:55:16:44:b6:1e:9a:15:61:6b:32:91:19:35:bf:08:e1:
dc:1e:5a:e9:f2:ff:ec:45:6d:cb:e8:77:71:a3:db:ae:ec:b6:
b1:0c:e2:cc:08:89:96:dd:93:11:51:87:06:d6:f1:38:a6:83:
0b:fb:18:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org