Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/lzu1V7U6jmRxa6f2geqMOqJAfj0.roa
File: lzu1V7U6jmRxa6f2geqMOqJAfj0.roa (raw, json)
Hash identifier: MS0perHaOYlZNkrLOjbRf+/wBFr5LlJZ+J15Qxx3Wd4=
Subject key identifier: 97:3B:B5:57:B5:3A:8E:64:71:6B:A7:F6:81:EA:8C:3A:A2:40:7E:3D
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 43E3
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/lzu1V7U6jmRxa6f2geqMOqJAfj0.roa
Signing time: Mon 28 Feb 2022 00:30:07 +0000
ROA not before: Mon 28 Feb 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17379 (0x43e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 28 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=973BB557B53A8E64716BA7F681EA8C3AA2407E3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bd:28:62:e0:d6:40:73:7e:b0:97:5c:56:69:
d0:a7:60:0f:b9:b8:fb:f2:00:db:f5:55:ea:93:84:
49:33:64:73:00:d0:4d:df:97:64:53:e8:88:9e:7a:
64:d2:fb:75:50:ed:d2:56:81:40:40:9c:0e:80:bd:
39:cf:4f:41:ac:d9:65:b9:c3:61:29:25:de:57:20:
87:e4:60:bf:08:5b:74:60:b0:0d:e0:d6:fd:ca:b4:
73:fe:e3:d7:82:73:d7:4c:93:c6:86:e1:cd:c0:53:
05:78:ae:d1:93:4c:3c:0f:0d:6e:f9:ab:ff:40:05:
66:3a:17:96:9f:2d:bd:b6:98:f0:0c:32:0a:25:f9:
ba:e0:0c:2b:72:a2:86:f4:eb:9b:89:ec:ab:cf:f7:
d6:4a:bf:09:5a:df:38:8a:8f:03:33:42:ad:32:e0:
a5:c0:ad:55:16:b0:35:62:37:b0:cb:10:5c:8e:08:
76:0b:b2:a1:bd:0f:d2:71:2a:64:7e:36:c7:d4:e0:
c5:81:0b:38:d9:79:57:0e:31:a3:71:2d:00:89:83:
17:d2:c0:a1:10:a5:32:57:f3:a2:5c:d3:0a:23:e1:
29:52:c1:d7:f5:97:60:c9:28:66:45:bb:b7:c3:fa:
01:02:0c:0c:39:d6:c1:d4:28:1b:04:4f:c3:eb:0d:
14:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3B:B5:57:B5:3A:8E:64:71:6B:A7:F6:81:EA:8C:3A:A2:40:7E:3D
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/lzu1V7U6jmRxa6f2geqMOqJAfj0.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
40:0a:7f:29:7e:92:e1:98:a8:f3:59:fd:ec:67:91:49:00:89:
70:58:30:15:43:d8:22:da:02:4f:bb:df:74:81:1a:2a:31:4d:
68:64:08:e4:44:b4:71:86:03:03:9a:6e:2b:c2:17:5e:6a:ae:
9f:19:53:69:fb:c0:13:29:98:7f:fc:7f:5a:ca:d3:04:51:51:
1b:28:75:3e:fc:0a:37:a2:af:90:66:41:af:e0:20:7e:c1:07:
6a:fd:b3:a9:cd:7f:85:8f:42:4f:e7:3b:ec:02:37:f4:17:44:
94:ab:f8:73:3a:f7:26:f1:05:d4:00:35:74:62:e0:06:33:fc:
ce:77:17:cf:3b:d2:f4:f4:21:81:c7:bd:b3:bc:eb:e1:b6:d8:
b7:68:64:29:68:48:c0:bb:f7:69:c9:e1:d5:4d:ca:75:44:fa:
67:4c:f7:31:2d:17:8b:23:24:69:a9:ca:3f:0c:ff:2d:76:79:
a6:d1:d4:8b:03:2b:9c:a3:eb:5b:56:fa:71:c9:f2:39:aa:69:
14:b6:f4:aa:fb:ce:18:85:52:2f:a6:c9:2e:79:be:c5:10:53:
21:bf:07:4e:fb:6e:14:f7:28:8e:26:a8:ff:fd:3f:fc:ac:9b:
2a:fa:fd:c1:bb:ee:e0:f5:35:ac:df:9b:90:38:70:2f:5d:e5:
66:0a:c1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org