Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/-IOkRMlNG5wB5n723sSzbVB6CBY.roa
File: -IOkRMlNG5wB5n723sSzbVB6CBY.roa (raw, json)
Hash identifier: VhCKuR0AG6fitVQD6r9IPjuGpzwZOfg7zJ1xLvNIBK8=
Subject key identifier: F8:83:A4:44:C9:4D:1B:9C:01:E6:7E:F6:DE:C4:B3:6D:50:7A:08:16
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 49B6
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/-IOkRMlNG5wB5n723sSzbVB6CBY.roa
Signing time: Sat 11 Jun 2022 00:30:10 +0000
ROA not before: Sat 11 Jun 2022 00:30:10 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18870 (0x49b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 11 00:30:10 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=F883A444C94D1B9C01E67EF6DEC4B36D507A0816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:98:6f:8f:4c:03:4e:d3:2a:81:1c:79:79:c2:
4f:32:61:ed:97:9e:94:8b:67:12:c1:20:e0:12:25:
ce:c9:b3:14:6e:77:df:d0:de:4d:5a:7b:4c:85:11:
3c:27:76:cf:e7:4e:80:ca:9a:27:c7:60:b2:7f:3b:
39:e7:f0:23:b4:b7:45:23:e1:4f:d2:22:da:1d:b6:
7c:9d:cb:87:f2:b3:67:10:04:34:9b:3f:eb:8a:c1:
b0:d2:da:05:3b:37:43:04:2d:cd:59:13:ec:f8:0b:
21:ca:38:37:e8:c2:b9:0d:5e:b5:07:89:01:dc:f7:
7d:55:51:c9:c7:5c:60:af:6d:d0:c3:e2:94:5b:08:
6f:66:7c:b3:3d:86:d0:9c:18:e6:8d:b8:3b:ad:6c:
3a:0f:a2:d2:4d:ac:52:f2:25:6e:bb:b9:10:27:1a:
19:29:e5:ef:be:4a:f7:d2:57:3a:2d:ff:e4:5c:51:
c6:df:b2:91:d3:9e:77:02:6e:df:0f:b2:f2:cf:fd:
eb:0e:b0:ab:d5:db:53:e5:c8:79:5f:a0:6f:d6:88:
3e:cc:37:57:aa:b7:8c:8d:48:16:ed:84:ad:a3:ab:
03:0d:22:c1:fc:08:86:7c:79:85:51:fc:4c:7a:4f:
45:e1:1f:8b:6b:13:da:03:0d:de:69:38:6e:d0:bc:
c5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:83:A4:44:C9:4D:1B:9C:01:E6:7E:F6:DE:C4:B3:6D:50:7A:08:16
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/-IOkRMlNG5wB5n723sSzbVB6CBY.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
51:3a:98:c2:c3:6e:64:0e:e5:88:82:65:5f:ff:bb:9f:62:8b:
ba:b7:a3:cb:b9:72:ac:d2:90:64:55:48:27:1a:13:e8:9a:74:
cd:9b:5e:42:ed:3a:86:a9:60:41:c7:db:0a:2f:9a:27:65:fc:
6e:0d:53:bc:7b:d0:b3:df:97:15:8f:8d:7f:47:5c:d6:e5:2e:
be:5a:b1:8d:1d:ea:30:3d:b4:ea:86:b3:ff:d5:58:e0:67:bf:
12:67:34:f9:88:87:50:1f:fe:03:8b:3f:11:73:c1:22:e9:e4:
af:95:77:54:c7:cb:56:3d:ef:3b:ae:8a:8c:09:ac:14:0d:04:
af:89:bf:8a:a5:8b:e0:67:cb:aa:b5:47:9b:1f:bd:2b:67:66:
4f:da:ce:a6:c1:62:d7:34:c5:84:b2:87:06:1b:69:3f:ed:88:
29:6d:96:be:17:05:fc:8c:43:29:09:a3:8b:9c:88:e9:1f:5c:
56:78:e4:58:f7:a3:06:b4:5b:85:f2:c1:e3:33:77:bf:cb:09:
88:c2:89:44:3d:36:8a:d2:3e:81:dd:ef:5a:f5:c5:08:7f:44:
74:3d:31:f9:cd:07:f2:26:b3:47:1d:69:95:7b:68:8e:ce:ba:
53:1f:25:e1:c8:7e:16:64:5d:72:8e:83:32:39:4e:cb:1d:ca:
1e:f7:51:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org