Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/yw2VSReNB1cUrjpf-tJay2MXaDQ.roa
File: yw2VSReNB1cUrjpf-tJay2MXaDQ.roa (raw, json)
Hash identifier: hEmWqw7sc0T/MRpgRQVL1UjUtj7wJa59da/56yR13NU=
Subject key identifier: CB:0D:95:49:17:8D:07:57:14:AE:3A:5F:FA:D2:5A:CB:63:17:68:34
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 44DE
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/yw2VSReNB1cUrjpf-tJay2MXaDQ.roa
Signing time: Fri 18 Mar 2022 00:30:10 +0000
ROA not before: Fri 18 Mar 2022 00:30:10 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17630 (0x44de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 18 00:30:10 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=CB0D9549178D075714AE3A5FFAD25ACB63176834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8e:d9:6b:49:58:6f:c1:0e:07:61:c8:71:72:
23:5a:9e:3c:b6:eb:10:08:f8:ea:eb:08:02:0a:6d:
d5:16:17:6a:c9:de:cb:ab:4f:90:9a:ff:84:4e:ff:
4b:a4:04:37:af:6f:8b:95:b4:a6:ad:8c:4e:93:6d:
b9:cc:14:5f:71:9b:e1:03:5d:55:64:38:c6:89:48:
43:f0:13:36:ce:d3:b1:73:e3:f7:4c:98:6f:b1:26:
44:5a:02:68:9b:fb:d5:86:b4:ac:cc:82:8b:3e:17:
db:e9:69:34:75:d1:8c:9a:c8:4c:ab:35:7f:1e:bb:
01:98:e0:20:31:eb:20:17:9a:c2:b5:6f:55:54:41:
aa:65:9e:69:21:4a:58:3d:71:59:b3:c5:e0:d0:f5:
1d:09:ad:90:9e:ee:78:b7:49:14:30:56:3f:8c:b3:
c6:26:99:99:e2:b2:86:38:80:50:31:27:9c:bd:b7:
c2:0e:3b:db:b1:8d:f7:9b:e4:f1:24:74:7c:de:a8:
96:74:6b:2e:05:ea:ce:88:1c:ab:20:01:23:d8:c2:
8c:58:b3:42:21:80:56:ce:c8:d4:ed:50:35:a4:ad:
23:bd:6f:56:81:ad:1e:8d:b8:0d:c7:ca:dc:f5:a8:
0b:73:d1:1f:fa:7a:bb:c4:b9:83:9a:77:ab:8b:4d:
be:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0D:95:49:17:8D:07:57:14:AE:3A:5F:FA:D2:5A:CB:63:17:68:34
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/yw2VSReNB1cUrjpf-tJay2MXaDQ.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:90:ba:f1:7b:68:10:c1:87:ed:f8:35:6c:71:c9:2a:a7:00:
25:eb:f0:44:a1:96:db:7d:58:ae:57:2c:9f:58:d2:24:e4:a9:
ec:4a:52:93:e4:36:e1:2a:87:bc:79:b1:90:bc:50:65:b3:35:
47:d9:d8:1f:1f:8b:23:f2:64:2b:3e:10:dc:4f:2f:9c:a7:50:
ec:bc:20:41:97:9a:f0:aa:00:49:f6:88:62:e4:0e:cb:76:c4:
48:99:f1:89:91:9a:51:eb:2c:3c:b1:02:b4:12:6b:07:81:82:
f5:92:74:8e:5b:9d:bf:e2:c4:66:f5:39:bf:7d:e0:55:d0:1a:
61:12:52:9e:7c:c2:be:8e:f4:07:ac:5f:36:26:94:c1:ad:37:
15:bd:4c:0b:88:d2:df:22:2c:d3:e5:86:3e:09:5b:40:f0:03:
21:6c:98:2b:ba:a6:18:7e:f7:96:07:f4:32:32:0b:cb:8d:3b:
8d:8f:35:5b:b8:c4:3b:64:e5:e2:63:de:13:c7:37:61:0f:29:
a5:3b:4d:e2:59:b1:a0:56:80:97:12:11:c1:24:be:cd:92:39:
8f:4c:1a:9a:a4:11:43:8e:08:05:80:a4:a2:34:fe:1b:2e:b8:
da:5d:33:78:d0:1a:2e:9c:15:35:cb:61:52:89:ac:bb:a3:e2:
47:9b:a6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org