Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/IiLmZhUOCzt-1WVf_oW9gYyX6AE.roa
File: IiLmZhUOCzt-1WVf_oW9gYyX6AE.roa (raw, json)
Hash identifier: vhAmZPPFs3JcfSlONey1eR66/YX6YjumUz0WpQf6YtU=
Subject key identifier: 22:22:E6:66:15:0E:0B:3B:7E:D5:65:5F:FE:85:BD:81:8C:97:E8:01
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 486B
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/IiLmZhUOCzt-1WVf_oW9gYyX6AE.roa
Signing time: Sun 22 May 2022 00:30:07 +0000
ROA not before: Sun 22 May 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18539 (0x486b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 22 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=2222E666150E0B3B7ED5655FFE85BD818C97E801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:aa:3b:1d:28:20:8b:91:c9:a2:9c:bf:83:a0:
b8:6a:ba:a5:90:73:cf:8e:0e:42:72:1e:f1:df:44:
cd:3f:22:2f:c0:c3:73:e0:59:8d:07:d1:3c:7f:d6:
c6:2d:ce:77:6f:4d:94:d6:7c:26:95:3f:06:90:ca:
05:87:af:db:f8:e8:2b:11:f9:3b:96:87:f5:d5:95:
7b:31:3b:2c:d8:01:7f:6f:c8:ac:59:74:97:7d:ee:
1e:76:0c:e2:84:55:c9:c7:1c:42:4c:34:9b:f1:6d:
8e:de:8b:fc:28:3f:0d:ca:45:be:92:06:61:65:ff:
e1:ea:f2:80:9a:fa:21:d2:e5:02:13:d5:ad:d5:fe:
53:c7:eb:b9:8f:22:e7:af:88:52:c0:9e:a5:01:f3:
94:26:21:c6:67:4e:ab:6e:21:d4:6d:41:2d:9e:71:
dd:3c:0e:ef:a5:3e:3a:a4:0b:09:77:21:7c:53:5f:
05:5f:16:2c:04:0b:05:e7:8b:c2:3e:a0:61:9f:b4:
2a:ae:e3:67:f0:31:53:c6:ed:bd:20:9d:3e:32:67:
35:f2:52:ef:a3:3e:2c:24:9b:c5:aa:e2:86:d8:84:
11:e0:12:c0:e5:b3:05:c8:4d:24:80:16:e9:2a:33:
59:ba:e7:54:ee:f7:6a:a8:3d:74:88:9a:b9:e1:18:
a7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:22:E6:66:15:0E:0B:3B:7E:D5:65:5F:FE:85:BD:81:8C:97:E8:01
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/IiLmZhUOCzt-1WVf_oW9gYyX6AE.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:35:20:85:08:ef:3e:95:0d:10:19:12:9a:6b:22:41:c5:93:
86:aa:1c:23:80:a0:52:73:7c:c4:c2:3e:06:e7:65:64:7c:6f:
c4:10:c7:25:35:7b:24:b2:5b:13:8d:3c:23:64:e3:2c:83:c5:
db:53:93:a5:79:25:71:29:97:5b:fe:5d:9c:c6:1a:24:a9:2c:
49:93:d7:a2:b1:c0:10:ea:74:86:6e:56:36:91:64:56:35:64:
44:2f:c9:38:c6:f9:e5:b6:01:2a:14:31:48:6b:09:e1:21:b8:
53:ac:f9:d1:e8:04:80:bd:66:6e:ba:3b:47:3a:0c:5d:4d:0f:
5f:f3:2a:f4:e4:67:9f:0d:f4:44:ee:8b:f6:45:fe:bf:64:48:
aa:7d:6e:b1:47:af:57:ea:c0:c9:55:11:c9:3b:5f:48:b4:6f:
d8:1c:11:b1:b5:3a:4c:96:7b:50:d1:29:ed:e2:0a:a9:79:03:
46:8e:c3:ba:8f:39:72:90:c5:c8:6e:71:96:4f:99:c4:55:4c:
ef:1e:ce:2a:ac:18:4d:64:e8:a4:44:59:d0:db:2f:7a:1b:6d:
d5:d4:2e:51:4f:40:b1:aa:fc:94:27:a2:1a:e2:bb:f5:ea:af:
96:a7:82:8f:0a:c4:24:9f:c5:e1:c1:bb:d8:7c:9f:48:49:c0:
17:db:df:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org