Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/-zuq3uj5KlknWqutPZIUv5N6Pno.roa
File: -zuq3uj5KlknWqutPZIUv5N6Pno.roa (raw, json)
Hash identifier: w8M8fxJBLLa8Lds4yIIunnH2SiD3EemxBjwQ08vUcB8=
Subject key identifier: FB:3B:AA:DE:E8:F9:2A:59:27:5A:AB:AD:3D:92:14:BF:93:7A:3E:7A
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 447A
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/-zuq3uj5KlknWqutPZIUv5N6Pno.roa
Signing time: Fri 11 Mar 2022 00:36:54 +0000
ROA not before: Fri 11 Mar 2022 00:36:54 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17530 (0x447a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 11 00:36:54 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=FB3BAADEE8F92A59275AABAD3D9214BF937A3E7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b3:54:1a:00:96:3c:ca:af:00:41:25:ce:a0:
11:25:67:8b:8a:d6:75:73:57:65:2b:c0:6f:37:4f:
23:f1:55:71:b3:a8:2f:59:a5:cd:65:db:30:90:d2:
a0:75:54:f0:61:36:ae:5e:ac:f0:cb:8d:c1:0d:fc:
ad:c9:fe:41:24:75:e8:cb:af:04:1d:b5:38:7f:e1:
5a:26:b9:90:8f:4e:fd:f9:f1:2e:6a:d6:9a:9c:18:
3e:d1:87:ef:17:68:79:6c:76:5b:65:39:48:bc:62:
d5:29:30:96:3f:60:43:75:62:6f:47:05:12:08:1f:
43:52:1c:38:2b:59:3c:3e:c2:eb:de:af:b2:ac:e5:
b3:3d:5e:6f:2a:53:86:08:e6:60:b9:5d:1a:1c:5d:
da:5d:2a:0f:f7:24:85:eb:56:26:2b:24:a1:4f:66:
5c:f4:0d:b8:60:ca:37:06:c7:fc:d6:b7:ea:7f:46:
e7:e3:5d:9f:0f:59:e4:99:a9:df:76:09:75:5c:a3:
cf:28:53:a8:49:db:02:7b:df:08:a4:91:a4:a0:1f:
47:0a:02:bd:0d:29:b7:e2:06:c1:e9:a3:77:5a:37:
0d:2a:27:89:41:09:a1:88:d9:6c:77:53:3d:35:cc:
59:9e:99:c3:0a:39:26:49:4b:c5:58:6a:0e:39:c0:
b9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3B:AA:DE:E8:F9:2A:59:27:5A:AB:AD:3D:92:14:BF:93:7A:3E:7A
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/-zuq3uj5KlknWqutPZIUv5N6Pno.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
65:12:8e:72:31:9e:79:c4:49:87:fa:10:bf:39:81:58:29:e1:
d6:dc:e4:90:b4:70:f5:50:5c:da:2d:71:43:0d:f3:69:81:3a:
d6:58:1f:44:9d:4d:a4:a5:ac:51:8d:64:b0:e4:67:c7:68:de:
86:5d:ff:9b:62:c0:97:16:e7:a0:f3:c0:c0:25:d9:d5:dd:e4:
28:1e:00:21:24:38:d9:df:7e:ea:e0:fe:ad:9d:9a:da:14:ab:
57:32:3e:a7:bf:74:be:80:02:4d:e9:5e:8c:d8:8e:4b:c1:1e:
da:4d:40:be:a6:f4:25:8f:38:91:80:95:7f:64:23:41:81:1f:
8b:86:87:42:03:b0:1e:4f:2d:fb:0d:57:ba:75:b1:9c:52:57:
31:0f:6c:3a:a8:7d:d1:98:d9:6e:ea:9c:ed:14:2e:36:89:ba:
9f:04:69:d4:9b:68:fe:cb:f3:02:07:bd:df:8e:c2:98:8e:2f:
fc:82:68:c4:46:b7:e8:b7:6b:e5:93:a9:71:1f:50:42:6f:cd:
95:3e:d6:30:8c:8f:06:36:ff:74:e6:f0:f0:48:de:84:d0:1b:
f3:c2:13:72:bd:54:1f:93:49:a0:b0:52:c2:1b:21:79:db:da:
89:a1:d2:90:d8:33:d8:7f:d9:d5:f9:88:01:f2:c9:4c:4b:06:
c5:ef:8b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org