Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/jrTW9TRGoJEqFoX1vvfVq86FtC0.roa
File: jrTW9TRGoJEqFoX1vvfVq86FtC0.roa (raw, json)
Hash identifier: 51AcB8S1iMHZ9PXwv9jDe3eDiesVZ+i0yq6K60g6LBY=
Subject key identifier: 8E:B4:D6:F5:34:46:A0:91:2A:16:85:F5:BE:F7:D5:AB:CE:85:B4:2D
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 49CC
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/jrTW9TRGoJEqFoX1vvfVq86FtC0.roa
Signing time: Mon 13 Jun 2022 00:30:07 +0000
ROA not before: Mon 13 Jun 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18892 (0x49cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 13 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=8EB4D6F53446A0912A1685F5BEF7D5ABCE85B42D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:56:3a:07:c4:47:b7:32:c8:57:53:40:70:07:
99:ba:96:11:74:3d:87:f6:f9:e6:82:ca:5f:93:51:
c2:b4:34:c5:22:6e:58:79:17:13:af:f9:3f:ef:e6:
7e:16:8f:51:72:a7:f8:83:52:6c:e5:48:02:74:71:
cf:35:19:c7:dc:06:03:8b:fe:af:36:93:28:be:63:
d9:dd:41:c0:8c:c3:b6:3b:ee:07:7b:47:48:56:d7:
8b:64:5e:2c:29:cd:19:f4:b9:ad:35:58:1b:92:c1:
43:31:54:8c:a4:a0:81:42:46:ab:45:51:21:7f:71:
a0:61:06:e5:cd:e8:9b:49:4e:32:0c:56:e6:36:de:
54:08:84:86:40:a4:60:3f:d2:0f:ec:a5:d0:5b:98:
49:80:67:7f:33:5c:8d:61:c6:77:84:db:5c:6a:6a:
d6:f0:83:b4:24:08:3d:6c:2e:2a:63:33:be:29:4b:
9f:af:12:73:4d:15:9b:16:39:40:14:14:76:bb:27:
d3:01:ae:ca:2f:4c:4c:ca:49:b5:df:1f:c7:fb:3c:
fd:c6:49:14:a4:63:01:77:dc:a6:7b:c2:24:7a:f8:
08:fa:d4:fb:ef:29:f4:00:9d:3a:d9:94:e8:04:47:
6f:4f:5a:e3:5c:8e:1a:0e:d7:df:1c:c2:1b:1f:53:
6f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B4:D6:F5:34:46:A0:91:2A:16:85:F5:BE:F7:D5:AB:CE:85:B4:2D
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/jrTW9TRGoJEqFoX1vvfVq86FtC0.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:d6:6a:cd:70:84:c0:ca:cc:69:56:1b:ab:c8:7f:79:72:72:
65:f8:da:39:61:12:c4:a5:59:71:e2:74:63:a2:b1:5a:a8:cf:
f0:ba:e6:60:5f:56:7a:16:d6:c4:13:73:90:2f:48:4d:2f:92:
7b:7e:49:90:44:14:c2:92:92:1a:9f:f9:2f:eb:bb:b8:0a:a0:
fe:e3:c5:70:01:0c:70:80:82:fd:f4:79:ab:10:ad:bd:4f:e3:
76:0d:2d:e6:04:2c:fd:3c:e6:5a:2a:05:bc:4c:7f:86:b2:0b:
9c:fc:51:d7:0b:a5:22:6e:4d:f0:68:ef:f4:d7:49:f3:38:e0:
ea:70:af:8e:aa:c9:98:5f:90:8b:f0:7d:a8:7d:43:f9:5c:5f:
fc:3d:b0:47:19:19:86:8b:2d:05:ea:1d:e6:69:0b:cd:88:d1:
72:ba:0d:7e:0c:2f:05:02:27:52:39:85:ef:f9:55:91:83:0b:
2a:f4:96:e5:5e:30:e5:3a:6e:6b:0e:18:d7:fa:ae:8c:f5:ac:
a9:7d:a0:71:19:01:77:c9:29:08:9f:c1:5a:fa:ad:16:6e:27:
48:ac:ed:7a:c6:e4:03:76:64:e6:4f:84:1d:8d:63:2e:63:8c:
09:ca:3a:5b:c9:29:37:10:54:94:c9:41:38:79:81:e7:9b:ac:
db:58:05:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org