Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/_Z-s_SG7m-L9mwJ48_D_ypHJFpk.roa
File: _Z-s_SG7m-L9mwJ48_D_ypHJFpk.roa (raw, json)
Hash identifier: 78FUDwj7AD42UXj8AjqpCrrhQCn5vT6Lq3fQVtqUnM4=
Subject key identifier: FD:9F:AC:FD:21:BB:9B:E2:FD:9B:02:78:F3:F0:FF:CA:91:C9:16:99
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 44B1
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/_Z-s_SG7m-L9mwJ48_D_ypHJFpk.roa
Signing time: Tue 15 Mar 2022 00:30:07 +0000
ROA not before: Tue 15 Mar 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17585 (0x44b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 15 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=FD9FACFD21BB9BE2FD9B0278F3F0FFCA91C91699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:14:aa:07:20:7e:c1:04:ea:bb:15:13:18:4a:
56:d5:51:2b:b1:6d:ab:a7:3e:28:b5:d4:7d:83:7d:
df:c4:00:88:86:7c:8a:08:48:30:5e:33:60:99:a0:
71:46:78:11:81:e8:10:5c:87:7c:25:a2:e0:b8:03:
96:df:b0:10:ad:14:df:c2:f3:df:c8:e4:d8:a2:1b:
6f:fe:8f:f8:e2:b5:50:f5:9c:0a:32:e5:8d:d6:11:
ce:23:cb:7e:74:33:e1:8a:61:96:31:1c:e4:00:63:
24:f1:55:43:83:c9:06:b1:07:e8:cb:b8:ee:87:ca:
d5:59:05:b1:59:0e:11:a1:25:6e:29:26:b5:42:74:
3d:97:23:2d:ec:7e:75:73:5c:88:42:71:7e:df:0f:
ba:49:fc:7c:15:45:08:ff:b3:24:a7:ed:87:5f:d7:
33:26:52:35:8e:93:36:57:3f:c7:39:be:23:cd:da:
22:1c:34:e7:f1:36:e5:da:62:6b:4b:8b:8d:a0:f7:
80:39:4f:04:e0:dc:d9:6e:e4:13:d8:e2:0b:56:5f:
cf:b9:e3:76:ae:d9:a2:16:61:a4:7c:af:0f:7e:bc:
ca:98:a2:ae:bd:21:8d:f6:ce:e9:54:c4:98:fc:3d:
85:97:9c:7c:48:64:7b:be:60:1a:58:54:61:ba:cb:
df:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9F:AC:FD:21:BB:9B:E2:FD:9B:02:78:F3:F0:FF:CA:91:C9:16:99
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/_Z-s_SG7m-L9mwJ48_D_ypHJFpk.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
05:e8:b6:04:e9:95:c0:30:44:59:8a:f6:05:54:22:98:06:32:
14:bc:a4:bf:67:a7:9e:38:eb:8a:13:f1:b0:7c:3d:0f:6d:5a:
3b:9c:db:87:fe:ef:df:12:b5:e5:d2:61:6e:d0:55:f0:35:fa:
1c:ef:bc:13:d1:2e:21:6e:4d:07:7d:b9:32:24:d6:5d:b7:b5:
e3:41:58:18:84:f2:50:71:c0:95:0b:bc:be:76:f5:4c:6a:fe:
04:d3:48:f9:c0:6b:25:30:e3:34:fa:e1:f0:e8:08:3e:82:bf:
76:a7:bb:90:79:9b:42:52:b7:00:7b:24:db:3a:53:94:d0:2c:
87:8c:d2:69:bb:50:76:23:54:c6:c0:67:aa:96:79:99:5e:74:
53:cf:fb:36:1f:42:58:5b:51:17:41:86:8a:30:e0:79:64:ee:
7b:80:7f:ab:36:a1:86:6e:d6:7d:33:3b:86:3a:af:37:3a:34:
8a:de:6b:c9:2a:d8:15:b4:c4:f9:9b:93:e5:eb:0a:42:2d:66:
3b:bc:65:4f:86:69:04:a0:d5:d0:fd:fa:43:57:bf:9f:b3:92:
a8:d3:5d:91:ff:f3:87:fc:46:39:57:6d:37:9a:a6:99:86:98:
94:13:9f:96:49:d0:4f:8a:cd:8b:6f:6a:84:30:e7:09:88:67:
d8:61:ba:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org