Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/eu8wFoiMJoSoXyQqxpqzQyO_JvI.roa
File:                     eu8wFoiMJoSoXyQqxpqzQyO_JvI.roa (raw, json)
Hash identifier:          NRbUJO9B83R/ptoj4zEXniCRVgsgqhGlppBauWSobj0=
Subject key identifier:   7A:EF:30:16:88:8C:26:84:A8:5F:24:2A:C6:9A:B3:43:23:BF:26:F2
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4919
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/eu8wFoiMJoSoXyQqxpqzQyO_JvI.roa
Signing time:             Thu 02 Jun 2022 00:30:08 +0000
ROA not before:           Thu 02 Jun 2022 00:30:08 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        147.28.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18713 (0x4919)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Jun  2 00:30:08 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=7AEF3016888C2684A85F242AC69AB34323BF26F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:35:9a:16:30:89:53:a8:f4:7e:81:03:4f:a1:
                    ab:33:de:85:aa:7a:c7:3c:5f:5d:66:37:32:25:81:
                    c3:7f:94:a4:ba:a9:a3:6c:10:8c:5f:a5:dd:f7:dd:
                    ec:f5:a4:d4:b8:ef:de:df:93:26:18:80:74:2b:66:
                    96:d6:1d:22:90:f2:d1:58:c2:b2:46:ad:54:1e:40:
                    5c:4f:39:e9:98:f7:f7:13:8e:e4:89:1d:57:f6:8f:
                    fb:43:d2:d1:ad:02:4c:18:fa:64:25:35:27:c3:31:
                    cf:bb:11:c2:ed:6f:85:90:d5:c1:8d:94:f0:3e:de:
                    95:75:0e:96:2a:0b:44:6b:1a:b4:03:f2:3a:ae:b5:
                    4e:f7:83:3a:a4:d1:91:b7:63:af:dc:11:16:82:67:
                    be:3e:71:a3:10:c8:75:97:2b:ee:65:4c:13:07:41:
                    40:09:2c:58:65:96:17:03:97:b3:dd:3a:3e:02:6e:
                    ea:f6:fc:3b:3d:3e:f1:6d:6a:9a:50:4f:79:83:28:
                    06:de:73:a7:8c:1d:5b:13:77:85:81:4d:7c:f9:1c:
                    13:87:0c:f0:b0:39:eb:98:36:86:25:2f:c2:17:65:
                    95:9e:5f:59:03:81:cd:3b:76:5f:c3:42:84:c5:fa:
                    0f:e1:0f:10:f4:04:e7:a8:fb:bb:6f:6b:1a:d2:72:
                    67:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:EF:30:16:88:8C:26:84:A8:5F:24:2A:C6:9A:B3:43:23:BF:26:F2
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/eu8wFoiMJoSoXyQqxpqzQyO_JvI.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:e8:06:4b:f2:2a:f3:e8:82:3b:00:22:17:6b:f8:0f:79:c0:
         45:92:64:e0:3e:8f:05:7f:70:03:92:0b:6a:84:45:97:24:69:
         2e:bc:cc:79:ca:d6:ad:b5:a6:57:1f:30:3f:e4:de:e5:8f:c0:
         d5:6f:8a:43:4a:9f:48:a9:d0:b2:8a:5d:19:b2:44:56:3b:1a:
         36:32:ba:e0:17:77:7c:42:c1:02:d5:a3:70:48:a0:5c:4b:03:
         c8:e7:95:8f:4c:8b:1b:0d:f1:69:59:17:57:c6:97:98:cb:60:
         95:42:3b:6e:8e:40:bb:ed:2b:5d:ac:eb:6d:07:49:43:96:ad:
         0e:86:d4:2b:e4:3e:2a:16:c3:6e:75:62:02:ea:5d:e7:01:8e:
         ad:f9:63:1e:ef:a2:2d:f9:af:46:65:d5:e7:cb:a7:56:f8:e3:
         c1:9b:77:ea:5a:8a:11:2c:95:10:99:df:da:41:60:cb:3a:2b:
         02:7a:73:08:69:50:f2:25:de:6e:b2:0c:d9:f5:ad:48:00:e4:
         87:ce:49:8b:b8:5b:b5:9e:d3:e8:e9:14:61:ec:8e:fc:5a:a2:
         af:de:9f:0d:92:34:92:e8:71:a2:9f:7b:8e:88:6e:a9:2c:b8:
         8c:03:e6:f6:c0:b2:41:8c:fa:96:52:d0:40:e1:4d:cf:43:95:
         b6:6c:d3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org