Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/5N-IdkV45fLhAR2ldJcATL8uGDw.roa
File: 5N-IdkV45fLhAR2ldJcATL8uGDw.roa (raw, json)
Hash identifier: KmhhRNg0O2ZWWj0iaqoOoWOv9f6bpm+7d1o8DqpnMFs=
Subject key identifier: E4:DF:88:76:45:78:E5:F2:E1:01:1D:A5:74:97:00:4C:BF:2E:18:3C
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 46F7
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/5N-IdkV45fLhAR2ldJcATL8uGDw.roa
Signing time: Mon 25 Apr 2022 00:30:08 +0000
ROA not before: Mon 25 Apr 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18167 (0x46f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 25 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=E4DF88764578E5F2E1011DA57497004CBF2E183C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:bf:c9:d4:91:b0:8f:5b:a2:05:76:df:99:cd:
40:fc:98:23:2e:bf:e1:0b:01:fb:95:63:45:d7:e2:
6f:b9:c1:eb:38:ad:b7:9a:5b:a7:50:69:90:37:41:
be:a0:78:b6:4d:30:40:66:87:c8:20:50:35:12:b4:
98:d9:a8:fc:3f:3b:77:ce:ff:97:d5:ca:c2:ea:68:
ad:5b:7b:bd:50:d3:6d:b8:33:fb:74:14:71:27:42:
42:c2:5d:70:eb:aa:74:82:5e:13:3a:fb:f7:8a:cd:
db:d3:8f:28:77:90:b5:8b:70:43:54:4b:53:39:e7:
27:0d:d7:41:d7:90:2e:aa:55:21:d1:cb:43:60:67:
cb:3a:a6:67:64:70:88:a9:48:83:a0:e5:c9:b3:c7:
19:f3:bb:05:cd:04:42:22:4e:62:d9:65:73:aa:60:
e1:18:f1:77:c5:50:ea:15:d3:48:5c:ca:8c:ef:28:
f9:d4:9e:87:50:d3:5d:91:d8:05:b3:42:3e:68:7a:
9f:31:a9:5b:95:e0:2f:0b:35:a6:ab:50:c1:f1:56:
c2:5c:1c:ce:15:a5:45:bd:46:4f:98:60:5f:ea:c0:
01:75:ce:a0:4e:ad:6c:89:20:96:49:44:38:29:9e:
bd:02:a8:d9:27:89:93:d1:55:2f:9e:6e:6b:56:7c:
47:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:DF:88:76:45:78:E5:F2:E1:01:1D:A5:74:97:00:4C:BF:2E:18:3C
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/5N-IdkV45fLhAR2ldJcATL8uGDw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
40:f7:9d:b8:44:51:f4:65:1b:91:75:3d:1e:e9:92:c7:4f:60:
3e:51:d5:5f:d8:e6:e9:07:a9:34:71:79:ce:2d:9b:12:fb:a3:
e9:16:b6:94:25:4f:fc:f5:93:e2:ae:15:91:7a:b7:8d:bd:0f:
b6:35:3b:96:33:87:33:c5:4f:ee:b2:8f:37:68:2b:0e:ab:d0:
c2:42:9c:b6:3e:7c:56:ca:35:6b:4d:3e:00:eb:08:da:a1:64:
2d:ff:95:a6:65:52:99:8f:8b:1e:ee:18:60:7a:a4:0d:d2:1d:
d1:e5:5b:f8:59:c2:b3:e2:b4:2c:fd:30:2d:ce:b2:cc:4d:6f:
69:e8:6a:f3:a1:6e:21:26:da:4a:6e:75:70:f1:39:79:f9:81:
98:fa:9b:db:87:c5:25:27:ca:af:0a:f4:e8:97:4f:e5:b9:43:
a3:b6:05:d3:2e:af:b0:c5:9d:e0:5a:d4:4b:40:5b:af:67:64:
44:4f:ec:da:a5:68:c1:ae:83:92:cc:42:6d:c5:52:13:6f:53:
fe:32:e9:c6:bf:8b:20:68:27:e7:b1:a3:05:9a:c4:2f:a6:ed:
bc:55:32:05:ea:2f:16:5a:ea:de:80:34:72:86:7f:56:15:b0:
e3:e7:91:7f:2b:8a:ef:fb:8d:88:e0:38:4c:ab:8d:9f:a9:27:
35:e5:3f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org