Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/IRzPN7BoNNjTWcVsNeZyJutk1bI.roa
File: IRzPN7BoNNjTWcVsNeZyJutk1bI.roa (raw, json)
Hash identifier: rVZiUaDWqgqZr8+FuEltcBlT7lbnOywHJY7omWQxRoI=
Subject key identifier: 21:1C:CF:37:B0:68:34:D8:D3:59:C5:6C:35:E6:72:26:EB:64:D5:B2
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 455A
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/IRzPN7BoNNjTWcVsNeZyJutk1bI.roa
Signing time: Sun 27 Mar 2022 00:30:07 +0000
ROA not before: Sun 27 Mar 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17754 (0x455a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 27 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=211CCF37B06834D8D359C56C35E67226EB64D5B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4d:fc:16:c4:8e:cb:c4:05:8f:0b:88:e5:a1:
fb:a4:a9:04:9b:4f:db:48:df:49:ab:17:2b:9d:e1:
b7:c6:0d:b9:2c:e0:23:ee:86:25:b5:05:8d:6e:bd:
55:7f:52:64:ba:91:6d:28:b5:af:99:51:7f:35:66:
ff:a7:61:f0:b6:a8:09:83:15:56:62:38:69:ae:2d:
6a:c0:c0:2e:6c:02:f6:72:8f:49:05:68:d9:4d:75:
e4:ff:9e:83:a6:a8:9b:0e:4a:77:69:64:d6:a7:4a:
c0:ce:64:8a:cd:6e:91:96:9e:02:99:08:f7:87:f9:
4e:a0:80:fb:23:19:19:55:9b:ba:5e:6e:ae:be:d9:
16:6a:ea:71:84:53:42:d3:1a:31:c0:34:45:6a:87:
7c:32:4a:8c:ba:ca:6a:01:30:1c:2d:0e:80:a5:1b:
81:26:77:ab:bc:cd:c7:28:ce:d3:c8:7a:40:b0:96:
38:3a:58:f6:d1:77:b3:20:cb:11:55:fb:c9:d8:e3:
9d:a0:53:c7:33:b4:41:42:83:f1:94:2d:96:43:a1:
f9:32:40:25:73:6d:57:b0:2a:43:04:cd:f0:ac:b9:
0d:3d:c3:56:2c:06:d2:9c:3f:35:1a:6a:28:6b:f2:
e4:5a:58:55:e5:57:34:a7:d3:1e:ba:4e:f5:9f:11:
8c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:1C:CF:37:B0:68:34:D8:D3:59:C5:6C:35:E6:72:26:EB:64:D5:B2
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/IRzPN7BoNNjTWcVsNeZyJutk1bI.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
67:a2:36:a8:b8:87:2c:36:2d:87:67:7d:be:9e:b3:bc:41:4a:
61:74:bf:6d:7d:60:b6:5d:16:42:fd:25:9a:01:40:8e:24:ff:
df:ea:e0:fc:fd:a5:cc:d7:c9:3d:5a:c5:5c:57:1d:60:6e:ab:
2b:6f:7c:77:7e:12:43:a3:74:90:f7:05:e0:c2:16:48:5e:60:
9a:43:7c:5b:58:96:6d:e9:e0:45:ef:54:b4:25:65:fe:9c:9a:
90:ea:9c:91:85:2b:28:64:7f:8a:0c:2d:8e:4a:73:72:2f:5f:
69:7d:04:63:c9:fd:20:97:35:79:ff:99:a4:48:c2:bc:6c:3a:
c9:6b:c7:76:21:e2:88:ee:1b:83:38:c8:b5:2f:f5:dd:81:93:
ef:70:06:73:d1:28:e1:df:87:ab:25:ff:8a:5f:f4:56:1a:32:
42:a3:ff:5b:d7:1a:cf:17:71:c9:80:53:d4:db:51:08:0e:44:
4e:9f:29:cd:cf:de:f8:26:4c:10:a1:73:0b:9d:57:67:7e:f8:
62:44:2d:a0:a5:54:43:16:9e:de:99:84:d8:b1:c5:17:1e:11:
a1:83:1a:3d:31:4e:af:76:d9:06:98:87:7a:ae:d1:5a:90:45:
07:79:5f:85:48:0a:4e:45:9a:03:e1:cc:d2:92:f9:c2:e2:1e:
61:86:70:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org