Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/L8QFeEZgSyR0S1jL2yqyeHtKlKs.roa
File: L8QFeEZgSyR0S1jL2yqyeHtKlKs.roa (raw, json)
Hash identifier: wbufCk4/3jtpKR/qa0wF3ZMIoF4QZp1jEZqaTc9dX9Y=
Subject key identifier: 2F:C4:05:78:46:60:4B:24:74:4B:58:CB:DB:2A:B2:78:7B:4A:94:AB
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 425E
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/L8QFeEZgSyR0S1jL2yqyeHtKlKs.roa
Signing time: Mon 31 Jan 2022 00:45:05 +0000
ROA not before: Mon 31 Jan 2022 00:45:05 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16990 (0x425e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jan 31 00:45:05 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=2FC4057846604B24744B58CBDB2AB2787B4A94AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:50:d5:5c:28:94:ff:a9:18:19:4d:4a:0b:2a:
b1:b4:66:48:1a:fd:b9:82:83:8a:45:1c:4c:8d:d0:
c9:33:c9:2f:6d:92:4c:72:6d:2c:17:f7:03:a9:6c:
08:4a:1f:2a:7f:67:a3:4c:12:de:53:88:65:78:57:
9d:9a:86:57:1f:af:4e:96:94:f8:eb:0c:3e:d5:d1:
b9:70:30:78:98:ea:3a:5f:14:9f:89:ec:f7:ac:f7:
ba:1f:c8:c8:11:c4:67:7c:10:0a:f6:57:ff:5d:05:
e1:8f:1b:d5:d9:1b:10:49:73:b6:5d:64:e7:3f:ce:
0e:ec:a2:27:d3:48:55:c6:78:ed:7c:57:55:0e:4d:
0f:f5:a9:e7:0e:04:08:0b:84:94:85:6c:aa:97:39:
49:1f:a7:87:63:3e:62:ab:ae:f6:8c:b0:6c:11:3f:
5b:47:4c:f4:7d:85:30:29:84:80:8b:eb:9d:bc:12:
7f:d5:8f:5e:10:f6:5a:49:27:cf:74:90:49:ae:33:
7d:19:5b:9c:fa:60:3b:20:1e:28:54:cb:63:1f:bc:
33:cb:9d:3b:1c:7c:b8:12:e4:9f:ed:f3:ab:3c:39:
ea:69:81:36:37:2c:89:69:12:6f:ca:29:2d:3b:e2:
34:d8:0d:78:46:dd:9c:72:1d:30:7a:87:14:ff:b2:
48:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C4:05:78:46:60:4B:24:74:4B:58:CB:DB:2A:B2:78:7B:4A:94:AB
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/L8QFeEZgSyR0S1jL2yqyeHtKlKs.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
49:74:e2:60:f5:77:18:0d:bb:39:05:b0:4e:0f:12:a1:5a:ca:
8f:d6:7e:10:c4:72:3a:73:a6:70:10:7c:cd:35:97:55:71:ef:
05:e3:86:c4:b2:cc:0d:ee:b3:d4:52:aa:fc:4e:ab:eb:2a:19:
a7:93:41:1d:c1:e8:b5:bf:08:82:e9:ec:8f:af:d2:43:5b:da:
56:59:d3:2a:36:77:b1:12:0d:1b:6e:39:38:5a:84:92:6c:b6:
35:3d:ee:65:7f:37:eb:41:69:f3:6e:3e:78:98:e4:52:9f:b6:
11:74:2f:71:7a:00:4c:df:ee:da:2f:11:63:23:1d:0c:9b:ce:
ef:32:79:4a:78:d7:fc:2e:01:ad:81:a9:a7:2e:5e:47:20:76:
53:4e:7c:10:d8:08:32:1d:bd:9b:ff:80:17:02:39:c5:43:0d:
6c:4b:15:a5:be:af:81:f9:8f:a6:b7:60:bc:a5:a1:bf:62:f0:
e9:96:6e:eb:06:8b:fb:1d:5f:f6:3e:7b:b9:53:88:34:12:26:
34:35:6c:ee:eb:29:d4:7d:9f:00:31:7f:b2:bf:62:99:1b:bb:
bc:4d:e6:9f:c2:70:f7:86:c5:1d:2f:8f:33:c7:ec:25:ad:1a:
6c:5c:60:ce:2f:06:4c:5e:84:8d:4b:90:15:56:22:95:9a:2d:
d9:9a:1c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org