Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/fy5V5gj9vbolcgxe4hdyisE3lHk.roa
File: fy5V5gj9vbolcgxe4hdyisE3lHk.roa (raw, json)
Hash identifier: 5ABM0JnpaA81TCKipj7uokcDVZpRkpvFJiRIX7xHggA=
Subject key identifier: 7F:2E:55:E6:08:FD:BD:BA:25:72:0C:5E:E2:17:72:8A:C1:37:94:79
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4392
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/fy5V5gj9vbolcgxe4hdyisE3lHk.roa
Signing time: Tue 22 Feb 2022 00:30:08 +0000
ROA not before: Tue 22 Feb 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17298 (0x4392)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 22 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=7F2E55E608FDBDBA25720C5EE217728AC1379479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:68:be:81:71:1f:d4:d6:75:67:92:d2:79:85:
b8:87:d8:3b:71:53:2d:60:91:a1:d1:ae:34:93:08:
88:62:c4:04:c3:32:72:f8:25:c1:8f:30:98:9e:5e:
1d:ab:02:68:3c:de:d3:8a:23:ea:0f:f5:12:27:c0:
d4:59:d3:a0:b7:13:4b:78:17:2b:9f:bb:96:84:f1:
3b:8a:e8:b3:db:5d:cf:c8:57:2e:89:cd:83:a5:96:
9b:38:9f:ad:59:26:a3:bc:7b:f6:27:51:fc:d1:fd:
e5:8b:a6:33:da:27:99:2a:bb:ed:13:a2:15:d7:d7:
cf:ee:47:9a:9a:93:92:46:c0:33:cb:69:58:52:fa:
41:1e:b2:c8:8d:96:fc:8c:d1:49:56:b4:67:d1:31:
9b:ee:90:bb:32:35:5d:ad:ae:8f:97:af:4e:ec:2f:
38:9f:67:57:78:f1:68:f4:3d:42:e1:ad:29:ba:c5:
3c:84:80:84:ab:20:90:b3:44:2e:6c:85:e2:ad:82:
bc:45:f3:f0:97:95:24:88:09:f0:97:c2:5b:6a:54:
00:94:60:91:ff:4c:6e:00:a8:69:27:40:e6:76:2a:
e9:35:4e:71:f1:31:6d:04:89:a5:7c:b0:52:8d:93:
b7:e7:cf:44:f8:25:da:66:9b:96:57:f1:3c:13:a7:
13:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:2E:55:E6:08:FD:BD:BA:25:72:0C:5E:E2:17:72:8A:C1:37:94:79
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/fy5V5gj9vbolcgxe4hdyisE3lHk.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:81:d4:f4:65:c9:15:a9:98:c3:e3:6c:d4:9f:5d:36:bc:08:
3a:95:78:38:8a:b4:a3:8a:34:4d:f2:8d:3c:1b:b6:8f:fd:c7:
f3:ef:73:f2:c5:29:a6:5c:53:92:c8:90:c0:5a:4f:0f:45:2f:
f1:bc:db:03:a0:11:2d:75:94:1b:54:c2:ee:77:6f:64:7e:3b:
54:c7:fa:50:b2:5a:13:a5:af:49:34:34:23:ae:94:83:22:12:
74:a8:af:ca:5f:ce:4a:07:5e:c7:39:09:59:83:8f:45:3a:20:
6b:84:32:5f:2f:e6:6d:af:9b:26:b9:9e:f7:90:e3:0b:14:1c:
57:70:89:6c:21:24:42:6f:9d:9d:8c:5b:3b:cf:31:c0:fa:eb:
e1:1c:f7:34:be:eb:e9:1a:8e:0b:5d:40:b9:5f:01:ee:02:de:
c2:16:f8:93:c5:35:0f:1f:86:d3:92:f6:ae:6c:ef:fa:1b:e8:
65:bd:86:6c:6c:88:01:1d:77:91:02:d3:22:a4:f9:b1:77:35:
20:0f:02:60:d5:1c:58:aa:8f:4f:70:76:fc:fd:51:ab:b4:22:
62:e9:b8:df:01:13:2c:4d:8c:2f:ff:fa:b2:0e:5f:69:dc:52:
41:9e:3c:45:2d:fb:ce:17:82:6a:68:c1:c0:da:30:e9:bc:86:
ef:44:76:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org