Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/ukxshw9UbyWpzOAuw0aWH2bEEFw.roa
File: ukxshw9UbyWpzOAuw0aWH2bEEFw.roa (raw, json)
Hash identifier: uykh6LCK0srF+jsOCa1iRt18B4Cr76NgQEWYdR8f6qI=
Subject key identifier: BA:4C:6C:87:0F:54:6F:25:A9:CC:E0:2E:C3:46:96:1F:66:C4:10:5C
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 43F1
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ukxshw9UbyWpzOAuw0aWH2bEEFw.roa
Signing time: Tue 01 Mar 2022 00:30:08 +0000
ROA not before: Tue 01 Mar 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17393 (0x43f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 1 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=BA4C6C870F546F25A9CCE02EC346961F66C4105C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ee:84:84:41:2c:1d:24:2f:ac:63:ae:7b:ff:
6f:ac:74:4e:44:37:01:71:58:a0:f8:e7:b3:6e:de:
29:bd:1b:c3:d0:77:0e:38:26:58:d3:b0:19:a4:04:
c0:c2:8a:df:e5:7b:3f:cf:e5:e0:3e:fc:c4:91:87:
2f:91:31:3b:3f:35:59:4e:09:b8:47:ed:c0:3a:10:
8f:b0:d4:4d:c8:a5:f1:0c:c4:18:79:32:29:c7:93:
4b:69:ea:10:ef:24:67:de:ed:b9:2c:6d:d3:a9:16:
30:14:fc:32:ff:c2:48:f3:7a:22:5b:0e:71:91:9b:
f8:8a:7d:28:06:a9:3b:ad:ff:3b:68:61:03:75:97:
b3:77:a8:26:4e:1b:39:9f:24:de:5a:b7:32:e8:a7:
80:3c:ce:23:70:ae:c9:a1:79:8a:4b:0c:1b:3a:4c:
77:f5:f8:17:a9:58:3f:8a:c3:2b:0e:25:bd:ae:1b:
32:59:ef:e9:27:bb:95:a1:c7:0c:e8:27:c7:b5:1f:
37:48:8e:da:a1:5a:cf:91:1e:98:bb:ab:e2:65:9f:
1a:37:06:ce:f9:69:6b:15:87:c3:e7:22:74:88:69:
60:d8:28:1f:6c:18:bf:e7:bb:bd:3e:cd:d1:e1:24:
64:e1:8e:87:12:6a:4c:05:28:2e:0c:cd:d1:79:31:
c0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4C:6C:87:0F:54:6F:25:A9:CC:E0:2E:C3:46:96:1F:66:C4:10:5C
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ukxshw9UbyWpzOAuw0aWH2bEEFw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
08:ef:c8:9b:a5:f3:d8:7d:8d:cc:f3:fb:67:e9:0f:c0:26:d6:
a5:74:8c:19:60:db:8d:d1:b1:23:d2:99:a7:fa:e3:7f:22:ca:
17:60:0c:1f:71:dc:4a:b5:ef:df:0e:68:96:0c:d5:3f:56:b3:
bc:90:3f:0c:6b:89:92:55:d2:23:72:8d:57:4a:4d:20:cc:f9:
28:03:0e:a7:5d:15:55:a1:3a:d7:ee:ee:f0:e4:81:dd:9d:21:
5a:a8:8b:79:55:4b:51:f6:d1:44:d3:e7:c4:c1:98:08:af:9d:
c8:62:6f:1b:f4:28:ab:7a:55:ce:93:2c:ce:2d:d1:b8:8d:84:
63:ea:aa:62:7a:45:cc:d2:09:11:53:ce:3b:7a:0e:26:cd:f5:
bb:6f:b2:be:ba:84:f0:6c:33:4d:f5:8e:97:a9:24:6e:5c:dd:
40:97:81:2c:cb:46:06:0b:d3:73:3f:0a:9f:e4:de:57:4c:c3:
dd:92:73:2d:51:0e:34:b2:06:5c:59:d4:47:5d:46:07:fe:dc:
3e:0b:f1:56:77:03:bf:53:12:de:e0:c9:44:69:9e:91:91:92:
ac:b3:c6:e5:90:09:7e:a5:9a:17:da:9a:dd:8f:2f:70:b7:55:
6c:99:49:17:8d:13:0c:f8:ac:7c:7d:5e:88:12:20:89:86:ae:
16:51:f2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org