Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/40w0sm8ZooP5t6rm9aIuxJ9TMgw.roa
File: 40w0sm8ZooP5t6rm9aIuxJ9TMgw.roa (raw, json)
Hash identifier: GYU8c0PAGKqy/qpE/ou3E1tEo5NJQkT/i7SEuUjyr1E=
Subject key identifier: E3:4C:34:B2:6F:19:A2:83:F9:B7:AA:E6:F5:A2:2E:C4:9F:53:32:0C
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4323
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/40w0sm8ZooP5t6rm9aIuxJ9TMgw.roa
Signing time: Mon 14 Feb 2022 00:30:05 +0000
ROA not before: Mon 14 Feb 2022 00:30:05 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17187 (0x4323)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 14 00:30:05 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=E34C34B26F19A283F9B7AAE6F5A22EC49F53320C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ae:d1:f2:64:7a:5e:dc:49:25:d6:3b:2a:14:
c7:8f:ad:71:c7:5d:f2:cf:61:48:f1:ab:80:dc:a0:
fa:b3:32:07:2c:77:95:c7:5b:4b:10:f0:83:5b:4b:
7f:6f:0c:16:f5:33:ca:11:32:10:b6:28:88:f8:12:
f7:a9:1c:32:51:93:f9:28:6b:2d:a3:b0:a9:fe:47:
b7:9b:79:e4:f4:cf:e8:cd:e2:c6:a9:59:fe:df:c9:
36:f9:7c:3e:db:e3:7f:89:0f:20:19:40:e5:01:ac:
48:1d:bd:1c:80:cd:a7:78:5f:de:c6:b2:e2:47:83:
86:f8:a8:19:d7:1d:ce:ea:fa:56:4f:ab:62:38:83:
30:16:ae:7d:39:d4:c9:b1:d9:b5:37:88:48:1d:68:
f4:e0:65:b3:b8:6c:bb:9d:21:b2:78:f3:80:e7:94:
1f:a3:e0:bd:16:93:92:7a:35:23:b3:68:d2:24:f7:
d8:8c:e3:02:e8:f5:64:ac:98:bf:5b:7d:6a:c9:a6:
33:3f:aa:ae:93:de:18:01:98:dd:34:3f:6c:4c:57:
7d:a6:b5:ef:f4:bc:b4:31:88:92:8b:fd:4e:d9:93:
a5:d1:4a:04:65:3d:d9:9a:83:ee:11:c0:d2:47:9b:
b6:08:34:23:63:3d:08:01:1f:61:13:ed:26:a8:bb:
7a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4C:34:B2:6F:19:A2:83:F9:B7:AA:E6:F5:A2:2E:C4:9F:53:32:0C
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/40w0sm8ZooP5t6rm9aIuxJ9TMgw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
15:2e:fd:94:c1:be:8a:e2:4c:c1:d4:e3:80:b3:3e:37:c1:24:
ca:66:d3:c8:26:8f:ed:58:f4:27:56:ed:ac:a5:a6:bb:81:25:
0e:8d:63:fd:c6:67:b9:05:21:95:74:d5:51:58:d6:c1:4b:dd:
bb:f2:b2:9f:00:78:e0:96:b1:5d:62:38:79:32:ed:d1:58:af:
2d:5a:5a:ad:d2:53:0a:ce:60:53:3a:17:ec:fe:95:8b:8c:91:
06:f4:1e:b3:85:a6:61:8c:8d:cb:48:fd:71:ed:c4:59:bd:bd:
10:9c:79:cf:77:29:d2:f1:92:ae:93:08:45:84:40:d0:ff:44:
42:0e:ae:0c:80:16:de:22:c9:20:d3:98:3d:65:6c:89:6e:9f:
16:0e:79:f4:82:69:00:65:b0:26:99:00:b9:7f:1a:37:ad:7b:
b1:8a:e4:9a:e0:cf:56:45:58:33:86:06:33:f8:37:eb:f3:ff:
fa:27:63:8c:a7:20:e3:64:f2:81:d0:aa:7e:15:5a:7e:1c:f1:
e9:fd:cc:ed:46:a4:4f:a2:3e:bb:05:5f:71:3d:d7:dc:f2:ff:
16:ed:a2:d9:ad:ce:a3:c0:77:d5:47:8e:84:fb:42:01:52:a0:
dd:36:81:02:17:49:c9:0a:9c:51:1b:55:ee:db:11:87:96:84:
2c:ce:0d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org