Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/W_s09VwhnVRbnaNVy5fXGssW6II.roa
File: W_s09VwhnVRbnaNVy5fXGssW6II.roa (raw, json)
Hash identifier: bWwE7oQYGWCFdFoNzd2zWfK+Hw90ZRn43z6ibiarMCc=
Subject key identifier: 5B:FB:34:F5:5C:21:9D:54:5B:9D:A3:55:CB:97:D7:1A:CB:16:E8:82
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 427B
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/W_s09VwhnVRbnaNVy5fXGssW6II.roa
Signing time: Wed 02 Feb 2022 00:30:06 +0000
ROA not before: Wed 02 Feb 2022 00:30:06 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17019 (0x427b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 2 00:30:06 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=5BFB34F55C219D545B9DA355CB97D71ACB16E882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7b:5f:60:75:b5:af:b3:5a:1a:24:81:6d:60:
c4:50:4e:94:05:5e:be:f2:0b:54:ef:f4:fa:74:39:
f6:25:f1:ad:1b:55:23:01:09:ba:44:10:37:6f:7e:
a0:9a:3c:90:11:b1:7f:f7:fb:47:23:a5:6c:0f:74:
79:4f:41:e7:5c:dd:11:b4:3d:ff:8f:b0:1b:c4:79:
36:da:d7:f9:b7:77:9f:ad:be:ee:be:5e:18:ca:3b:
f5:fd:21:20:df:9f:07:10:62:60:19:b6:bd:b1:b4:
8d:f6:f1:70:7a:e1:d6:14:57:09:e4:dc:93:19:b3:
39:36:94:6a:11:66:94:c6:1e:76:68:e1:9b:85:cb:
0d:62:2a:ac:03:49:8e:87:c3:6f:8f:47:12:91:a2:
db:d4:25:08:55:ab:44:f5:e1:13:0d:7d:39:3a:a0:
42:2a:94:0c:e9:5c:07:34:55:b1:75:bd:1d:00:28:
c8:4c:2a:11:a7:95:85:af:2e:e6:b4:69:18:33:43:
e3:e0:5a:5d:e3:a8:d2:c3:ca:3d:e9:94:46:7b:27:
bb:a2:d4:8d:e3:b3:c2:f1:15:6c:23:a4:2f:3f:af:
80:44:de:22:0b:fc:16:36:1f:1d:99:bc:18:46:a7:
23:cf:da:86:30:ec:66:d0:2b:9a:a8:05:7b:cb:3b:
80:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FB:34:F5:5C:21:9D:54:5B:9D:A3:55:CB:97:D7:1A:CB:16:E8:82
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/W_s09VwhnVRbnaNVy5fXGssW6II.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:9b:73:c2:e1:aa:19:6d:a8:68:39:2c:e8:a9:ac:13:75:e3:
8c:51:c7:1f:61:1e:a7:94:b1:01:a0:04:f6:a9:0a:cc:01:7b:
2d:d8:c0:4e:6c:7d:8f:91:f6:d7:05:37:05:99:dd:58:16:d0:
a4:f5:f2:ce:89:a3:12:9f:e8:c3:45:60:b3:21:0e:24:66:bd:
29:1f:af:fa:ac:14:fe:da:2b:1e:ec:52:10:71:ab:a3:c8:fa:
95:90:9a:c0:44:ca:79:09:1a:1e:bd:6e:4a:d2:fc:a5:24:3f:
48:24:a2:e3:d5:ce:16:80:6c:08:8d:02:84:1f:29:23:8d:7d:
62:d8:a4:14:60:7d:09:93:9a:36:df:d2:2a:6d:05:51:32:cc:
71:5e:89:f3:5b:bc:5a:d6:66:96:9d:95:a2:4c:81:cb:fc:82:
14:2b:24:20:54:e9:20:5d:c8:be:c8:79:d3:aa:81:e5:ce:a9:
03:7c:d1:13:c1:16:be:23:9f:cf:2d:e3:9f:05:8d:a8:57:44:
42:2c:32:96:18:33:9c:0a:65:70:97:ba:fa:bc:99:c8:ab:dc:
58:4d:3d:8d:f6:d6:0b:9f:21:60:32:22:70:a9:d3:e8:6d:7e:
8a:ee:64:95:35:49:1d:f9:e7:3e:09:cb:f8:00:d6:34:3b:2a:
dc:e5:6b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org