Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/-O3LKdEnPIJhkZDMlvKuy3Lf-H8.roa
File: -O3LKdEnPIJhkZDMlvKuy3Lf-H8.roa (raw, json)
Hash identifier: NPiiw3m56ybbeIAlJ1KTL0FeOgQ4dBYi0CiMKNGqxWU=
Subject key identifier: F8:ED:CB:29:D1:27:3C:82:61:91:90:CC:96:F2:AE:CB:72:DF:F8:7F
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 47ED
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/-O3LKdEnPIJhkZDMlvKuy3Lf-H8.roa
Signing time: Fri 13 May 2022 00:30:07 +0000
ROA not before: Fri 13 May 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18413 (0x47ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 13 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=F8EDCB29D1273C82619190CC96F2AECB72DFF87F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fc:38:05:6f:09:eb:ba:44:38:70:db:d5:8b:
2a:49:fd:2d:44:f8:88:25:3c:3e:90:47:40:4b:56:
a2:0c:4e:e0:5b:65:2c:47:7c:e4:a4:4f:3a:90:56:
fb:82:0f:99:b4:9c:1b:c5:52:06:17:ed:ec:2f:2b:
f0:2c:cb:89:ab:05:50:24:56:3e:05:86:21:ec:96:
97:00:1e:4a:85:54:02:c2:db:a8:c8:02:d7:3a:aa:
04:07:ad:1e:37:3f:ae:ab:92:6e:21:9c:27:cb:dd:
06:c9:f0:d7:1b:70:49:2e:9d:9b:a3:e8:38:2d:52:
96:f5:ab:49:97:7d:ac:6d:c2:de:16:b3:f0:a0:5d:
ca:81:c3:11:b9:1d:5e:49:e4:6b:f6:1f:41:02:25:
2b:3d:ba:40:80:0a:24:b5:47:f7:0f:72:43:f8:7a:
d6:33:76:1a:fc:11:00:d1:f2:22:7b:e7:6e:76:92:
1b:59:47:13:67:52:76:58:75:24:07:3f:6b:42:1f:
8d:72:64:5e:36:88:e5:0a:8d:3b:3b:39:df:b5:c0:
88:12:63:75:87:8a:18:94:f4:ea:bb:b7:17:67:7a:
ca:b5:5d:54:31:1c:88:10:2c:fa:4e:d8:72:51:d9:
00:e2:65:e0:43:ce:b0:2c:55:74:6e:6c:80:7f:89:
a8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:ED:CB:29:D1:27:3C:82:61:91:90:CC:96:F2:AE:CB:72:DF:F8:7F
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/-O3LKdEnPIJhkZDMlvKuy3Lf-H8.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
25:3c:86:5d:d8:75:70:fd:d4:b3:59:8f:32:c9:98:ea:de:a8:
5c:03:46:f9:5f:47:12:92:f2:ce:9b:f4:7e:7b:6f:82:24:19:
d0:c4:71:cf:c0:b9:af:ba:de:93:84:d7:53:c0:d9:bc:22:99:
48:21:5b:52:66:0e:55:82:52:3c:be:e0:00:18:40:41:cf:c9:
dd:7f:13:e7:1f:13:40:8d:b4:a8:5b:35:37:b1:95:da:48:4d:
9c:06:c1:95:29:32:34:7a:a7:a0:d1:a1:bf:9e:1e:b5:ef:8e:
89:c8:6f:0e:fb:1c:5d:90:4f:ec:d5:f6:30:cc:62:c1:d8:7b:
c5:9a:1c:ca:f6:70:96:62:05:19:46:22:4c:80:a6:d0:26:db:
d1:3d:de:59:a7:70:6e:c2:23:d0:08:43:7a:62:de:7f:a2:d0:
8d:88:fd:c6:3a:a0:a0:c1:be:9a:64:d0:d8:16:55:67:b0:f9:
0c:6f:ab:e2:05:ed:0a:6c:29:82:aa:79:15:0f:f8:f4:9a:34:
13:5d:35:4f:a0:44:3d:b3:f7:54:d6:17:a2:35:c7:bc:fc:f3:
93:16:58:5c:9b:1b:75:3e:69:12:05:7c:32:e2:da:a2:58:54:
cc:6d:e5:18:3a:c8:d1:fa:df:44:77:a0:a4:03:34:2b:65:10:
e8:d5:c8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org