Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/H7hQ6AqJt_jjilpn32TLtfIwDOI.roa
File: H7hQ6AqJt_jjilpn32TLtfIwDOI.roa (raw, json)
Hash identifier: DB57u5HfBGyZ+dGIT5NDoGhPc+Z0bfElW87y+zAtxRc=
Subject key identifier: 1F:B8:50:E8:0A:89:B7:F8:E3:8A:5A:67:DF:64:CB:B5:F2:30:0C:E2
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4895
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/H7hQ6AqJt_jjilpn32TLtfIwDOI.roa
Signing time: Wed 25 May 2022 00:30:06 +0000
ROA not before: Wed 25 May 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18581 (0x4895)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 25 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=1FB850E80A89B7F8E38A5A67DF64CBB5F2300CE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:94:c8:aa:95:de:77:18:65:5a:d7:59:90:70:
f3:7c:03:3b:34:88:76:9b:17:68:79:47:16:6b:a3:
56:32:52:07:5f:fe:4d:a4:01:dd:f5:7e:3b:1f:54:
51:a4:a7:4f:1e:bc:b4:d9:f6:0f:29:d9:78:56:67:
1a:f4:c1:78:30:fe:a4:b4:a7:8a:66:fe:04:67:9b:
76:36:26:5c:ec:df:36:a5:64:75:46:d2:8b:f2:e4:
8f:3a:5d:b6:02:e8:d4:a4:a9:85:4e:85:39:c0:f0:
25:68:4e:eb:a6:86:b5:25:30:96:b3:4a:7c:43:13:
7d:c7:b8:a5:61:66:1a:c7:ed:0d:ee:5e:cd:96:02:
31:82:83:7a:f4:fd:9d:bf:4f:07:1e:fb:d0:ea:a4:
57:e6:59:da:cd:2a:2a:35:29:99:fb:b9:fd:07:a9:
f8:f0:0b:76:2e:f8:2e:52:b1:c1:b7:0d:d4:69:81:
10:a1:af:5b:e6:30:32:c4:dc:f3:6f:3f:b3:57:c6:
56:36:d1:87:36:8b:c4:26:46:53:c4:85:c1:2f:eb:
44:22:1d:df:da:ad:5d:f8:7a:b2:93:0f:92:2c:1a:
50:4b:77:cc:33:30:2e:d6:5b:20:30:01:44:4d:9f:
28:1c:23:71:4c:76:7f:59:d8:0d:61:53:e2:54:0a:
a1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B8:50:E8:0A:89:B7:F8:E3:8A:5A:67:DF:64:CB:B5:F2:30:0C:E2
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/H7hQ6AqJt_jjilpn32TLtfIwDOI.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
06:7a:cb:80:e5:23:cd:90:10:70:5f:95:2a:92:40:d0:6b:ed:
a9:4e:7d:7c:2b:86:fd:46:63:e8:b6:b4:08:82:58:42:0b:cc:
8b:e2:86:d9:4d:81:1f:c3:a5:9a:4d:90:79:e2:88:d8:0f:cc:
35:2e:c7:f2:78:e7:ba:29:12:be:5c:49:32:76:ab:ea:6d:2a:
d2:4c:4e:82:60:62:e0:1a:3f:57:51:32:32:e0:59:81:40:bd:
89:18:3f:18:de:65:ce:a5:a7:a2:ef:89:11:8f:7e:e7:b9:8e:
71:33:d2:73:09:22:6f:d6:32:17:24:7c:3e:b4:98:52:ea:f2:
8a:6f:95:fe:68:eb:78:29:f7:36:3f:ba:65:c7:58:95:e6:30:
d8:a4:da:0b:2c:45:c4:f6:fa:8d:5d:ce:27:f0:81:82:15:43:
74:84:5a:ed:10:bc:25:ff:e8:78:a0:22:c1:47:01:6b:49:88:
de:63:79:04:db:46:9f:cf:b7:27:42:42:e8:03:c6:7c:0b:57:
a9:b3:ca:3f:fc:39:db:39:f1:fe:34:91:40:d7:f8:6e:22:e8:
27:97:03:89:49:6c:d1:ae:f7:28:67:8f:b9:c3:30:26:9e:ab:
fc:cc:0d:47:a7:85:35:54:c4:6b:80:3b:df:ab:35:c4:bb:f0:
de:dc:69:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org