Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/uniUBmWsVhEDSpW9BhcTdEObRN8.roa
File: uniUBmWsVhEDSpW9BhcTdEObRN8.roa (raw, json)
Hash identifier: +Bxs6XxKqBVvIdyRkzu2Ub1A2nYs+QcDnzGMDswWE2U=
Subject key identifier: BA:78:94:06:65:AC:56:11:03:4A:95:BD:06:17:13:74:43:9B:44:DF
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 46F1
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/uniUBmWsVhEDSpW9BhcTdEObRN8.roa
Signing time: Mon 25 Apr 2022 00:30:06 +0000
ROA not before: Mon 25 Apr 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18161 (0x46f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 25 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=BA78940665AC5611034A95BD06171374439B44DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:95:f9:b2:28:5f:c7:62:0d:20:c6:84:d0:cf:
9a:02:88:64:14:88:d2:3f:e0:cf:06:ba:bc:ab:1f:
3c:17:23:fe:e4:eb:1f:15:fa:28:57:ae:82:73:bc:
f7:2c:85:8a:8b:a9:f1:47:27:2d:70:e9:c3:46:2f:
f7:93:d1:9d:d2:ad:bc:00:16:3f:8f:a5:c0:f5:2a:
84:fd:f8:73:30:fa:3b:12:d3:f5:6d:b0:c5:8c:57:
77:15:5f:45:42:9f:58:65:6f:4e:5b:03:a7:a8:7b:
a2:ce:ec:36:8f:e7:02:6b:6d:0d:c8:a4:49:fc:ba:
86:75:5c:1b:40:39:a5:04:bc:19:fe:0e:a1:4b:dc:
d9:01:14:1c:e4:34:5d:24:e2:0b:2d:b7:b9:5b:99:
df:b6:6d:72:27:2c:0e:ef:77:f4:81:c1:b4:94:28:
4c:b6:c5:5e:09:69:06:b7:59:0e:f3:fa:4f:32:5a:
e1:e3:81:95:50:20:65:c2:78:42:f1:43:d6:cd:41:
e6:91:0e:1d:d5:05:56:50:ab:72:1d:86:b7:72:9c:
d7:42:af:eb:3a:3d:ad:c5:66:e5:e1:dd:4e:d4:86:
81:ca:18:74:de:b6:fc:60:82:45:2b:a0:5b:b1:40:
a8:10:4b:82:b3:04:fb:d2:38:bf:c5:9e:cd:d8:a0:
f3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:78:94:06:65:AC:56:11:03:4A:95:BD:06:17:13:74:43:9B:44:DF
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/uniUBmWsVhEDSpW9BhcTdEObRN8.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
32:92:33:66:60:10:cc:63:fa:a0:14:91:9c:94:7f:d6:d1:2c:
68:3f:8e:dc:74:1d:4e:d5:2d:04:64:f4:3d:aa:9f:95:28:ff:
0e:cc:95:93:ff:31:fb:8a:d6:26:a2:69:68:24:3c:c1:cc:8b:
9f:a3:21:9a:cc:0e:96:6b:69:0d:70:12:5e:fd:72:ba:d3:3d:
c0:49:9a:1c:8c:f2:2a:7d:d1:ab:18:5a:3f:9c:b7:b5:34:06:
a4:cc:d4:ad:a9:26:f0:91:d3:e9:6c:c3:3b:13:38:ee:49:2a:
16:db:78:5e:a0:36:ff:e0:69:fd:0b:5f:e7:d7:f0:7a:68:91:
58:b0:83:00:c0:8b:99:28:d2:7c:d0:1a:a3:be:03:13:1b:00:
47:58:20:b8:37:d5:b5:6b:e0:8e:0c:0b:d0:bb:66:c0:ba:03:
3e:e0:3e:74:71:d5:13:8f:8b:88:86:38:60:3f:13:b1:46:47:
0d:fc:35:a5:a9:a4:11:c3:68:7e:22:cf:d7:a7:a0:09:2e:fc:
f9:59:78:13:87:5c:4d:49:9b:12:29:a6:e6:15:51:e6:ab:a9:
a8:d1:5e:ca:e7:c7:fb:26:fb:7f:fd:a2:b9:9c:a3:fb:29:2f:
ab:c2:f7:cd:22:f3:33:b5:f1:59:36:20:19:ca:df:97:bf:fb:
6f:d0:58:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org