Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/pvwaILdnxbMLcc7xgkyHzZzfzMk.roa
File: pvwaILdnxbMLcc7xgkyHzZzfzMk.roa (raw, json)
Hash identifier: SX5oJMPXiyCXIgstajxp3HcLV8hC21lS5OCkpkqLxsc=
Subject key identifier: A6:FC:1A:20:B7:67:C5:B3:0B:71:CE:F1:82:4C:87:CD:9C:DF:CC:C9
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4297
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/pvwaILdnxbMLcc7xgkyHzZzfzMk.roa
Signing time: Fri 04 Feb 2022 00:30:06 +0000
ROA not before: Fri 04 Feb 2022 00:30:06 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17047 (0x4297)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 4 00:30:06 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=A6FC1A20B767C5B30B71CEF1824C87CD9CDFCCC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f7:e1:e1:a4:d1:be:bd:a7:e6:37:9f:e8:d2:
de:c5:38:94:1f:80:ba:40:2a:5e:cf:79:33:3a:8b:
27:87:76:27:b6:cc:36:b2:fa:f7:e1:c1:7d:70:26:
76:c9:e0:fb:60:dc:f6:86:be:d9:63:4c:d1:1d:a2:
c1:a6:0e:3e:f0:ac:58:57:fb:ac:dc:80:cf:d9:32:
c5:78:9e:15:8f:c3:82:78:66:49:0b:f6:39:4e:d3:
85:64:6d:5f:65:ec:10:65:b4:6a:fa:af:28:b7:dd:
ee:76:d4:90:2b:53:3f:91:e3:58:2a:ec:98:60:b1:
a7:c2:1c:ea:2e:b1:6b:1b:bb:5b:7a:2b:11:60:4d:
d1:71:a0:8b:5d:dc:bf:b1:55:62:e1:5e:64:3d:b8:
dd:2e:11:a9:f0:d8:09:fd:15:0b:9a:ea:35:ec:84:
d3:5d:0d:a7:e9:2a:52:9f:85:20:a7:78:f9:d8:51:
e8:62:1a:ff:5f:b6:af:7a:4c:68:47:42:c6:88:8c:
02:2a:41:a1:3b:4f:70:da:49:b7:04:dd:13:53:79:
16:63:f6:22:5a:ff:5f:91:3b:1e:44:57:d6:7c:81:
ea:b9:c9:4c:14:36:60:03:22:87:83:6d:cc:74:8a:
08:26:f2:16:f9:70:40:66:f2:22:b3:7d:7c:eb:9d:
4d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FC:1A:20:B7:67:C5:B3:0B:71:CE:F1:82:4C:87:CD:9C:DF:CC:C9
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/pvwaILdnxbMLcc7xgkyHzZzfzMk.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:dd:8e:c7:6f:cd:b0:a9:ef:f1:98:9d:31:4f:df:29:5b:3a:
fb:c8:f2:9a:90:c4:a5:82:e3:40:02:ac:8a:42:67:da:21:1f:
73:0f:d9:a3:0b:39:a6:9f:90:24:cd:dc:e9:94:53:a9:03:0c:
af:2c:17:c7:06:ae:38:0f:ab:7b:42:fe:0a:4f:73:67:5e:70:
0f:41:cf:da:c1:15:9c:43:ba:a1:4c:47:41:97:a6:d1:bb:65:
7a:c3:f7:91:01:87:07:e3:23:64:1e:b6:08:04:1b:79:2c:08:
8a:60:1c:7b:24:21:24:cc:06:59:44:17:6e:43:32:8f:c6:fd:
ce:ee:73:bc:2b:29:59:66:88:69:19:14:90:7b:96:47:31:94:
be:c3:bd:7b:e6:8a:6e:c0:1e:14:d9:3a:62:cb:52:8c:26:3e:
fb:d9:15:69:59:ad:7a:d2:a2:7a:cf:09:74:5b:cd:3d:8b:dc:
40:65:6b:34:e8:1e:40:42:20:b8:ef:3b:07:5f:31:55:81:7f:
c4:b6:af:32:9b:5f:ba:51:09:58:19:9b:44:56:6a:00:d1:3b:
bb:a1:e0:23:f3:b3:ca:19:ca:ef:72:a2:08:25:54:0d:6a:a9:
4e:ed:ed:6a:92:d9:63:d4:79:f6:d2:d0:08:07:d8:90:0b:d7:
a4:fc:25:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org