Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/dlN3eWESLTgL8X289OKq90w3gHQ.roa
File: dlN3eWESLTgL8X289OKq90w3gHQ.roa (raw, json)
Hash identifier: YCRAYnPYvr0n0nwlsbPKJUD9zoRPk5mGqTEgosSC18g=
Subject key identifier: 76:53:77:79:61:12:2D:38:0B:F1:7D:BC:F4:E2:AA:F7:4C:37:80:74
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 469D
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/dlN3eWESLTgL8X289OKq90w3gHQ.roa
Signing time: Tue 19 Apr 2022 00:30:06 +0000
ROA not before: Tue 19 Apr 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18077 (0x469d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 19 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=7653777961122D380BF17DBCF4E2AAF74C378074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:08:f4:06:fd:75:92:f8:76:d0:5d:31:39:19:
c2:64:64:7d:8d:b6:d9:08:e7:2b:06:dc:65:a9:21:
42:bd:9b:58:19:ac:0c:a3:d7:a7:bd:fb:d2:4a:3c:
cc:c5:b4:7c:34:bf:c0:30:c8:66:7e:c9:4d:2d:81:
80:5b:ec:f4:de:ff:a3:43:ce:ba:27:bd:df:ff:82:
fb:b9:b1:29:41:91:51:5f:3f:5c:64:5c:38:22:63:
be:43:a6:d1:fd:30:e2:e4:4a:34:63:0f:29:02:8e:
11:e6:86:a9:46:ca:42:5a:ea:db:77:ec:75:ba:88:
cf:73:4a:f1:c4:d6:29:ee:85:5a:ab:19:6e:6d:95:
d7:fd:0f:f4:cf:1f:bf:08:97:db:4c:c3:8e:da:6f:
0f:fc:b2:c0:6c:65:62:03:24:d9:22:a0:38:cc:85:
dc:53:ac:7d:7f:f6:0f:3a:28:b4:19:49:d7:7b:dc:
6e:4a:5f:35:c3:e7:ef:2d:1c:e1:ec:bd:c3:f2:6e:
e4:00:c3:78:d4:5d:5f:bb:00:13:c9:2c:ba:be:69:
39:ce:83:2e:1d:6c:62:a5:7b:c8:15:e5:95:e5:e8:
14:da:b4:33:4b:38:c2:43:44:ad:20:36:29:86:5b:
33:a9:de:56:6d:bd:35:4f:34:91:40:de:d9:e9:04:
41:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:53:77:79:61:12:2D:38:0B:F1:7D:BC:F4:E2:AA:F7:4C:37:80:74
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/dlN3eWESLTgL8X289OKq90w3gHQ.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
07:7f:70:d8:88:cc:ee:62:31:6d:d1:1a:b0:64:a4:a1:f0:e0:
84:06:74:bd:18:a7:d4:82:12:dd:0e:c0:b5:4b:bb:9f:0a:a0:
e8:9e:9b:2d:35:f3:79:a6:4d:17:05:a2:78:b8:84:65:20:2c:
f4:7d:6d:8b:8d:d5:82:8d:49:b1:5f:35:a9:a3:2d:82:af:02:
8e:8d:d4:fe:f5:27:69:0e:73:49:e3:33:46:e3:c2:bc:66:c9:
36:59:c4:c2:8d:18:ae:02:29:f4:fd:1c:95:f9:cb:4d:06:7f:
5d:15:82:04:b2:00:7b:a3:a5:64:4e:94:8c:01:d8:fa:60:d1:
df:5a:f0:a8:b2:df:5b:d9:95:3a:46:85:b6:67:74:34:42:34:
e7:2c:e0:06:af:1a:70:cf:64:3b:99:ce:16:d8:f3:59:61:d9:
65:e8:d4:6d:34:52:b0:08:c0:38:1c:2e:75:7e:52:6f:9e:ed:
5d:87:1d:f4:c6:e0:ed:ab:21:91:93:ee:65:ae:ad:a3:53:c7:
09:96:c3:0a:62:8d:6d:4e:01:ae:80:de:68:b3:45:cc:64:6e:
7a:0d:45:0f:be:a6:f8:b7:da:07:4d:af:ca:04:2e:db:b4:c8:
7b:42:5c:9e:20:83:f1:f5:98:42:a4:f8:00:5e:7a:b4:bc:43:
a2:d0:25:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org