Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/6Be8xj_40VO8lgHgJ6ccwitxGIs.roa
File: 6Be8xj_40VO8lgHgJ6ccwitxGIs.roa (raw, json)
Hash identifier: VJArCAV+v97BU0VpdrGqe720rt7Cbv9ntVF4nyu4+7E=
Subject key identifier: E8:17:BC:C6:3F:F8:D1:53:BC:96:01:E0:27:A7:1C:C2:2B:71:18:8B
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 48F8
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/6Be8xj_40VO8lgHgJ6ccwitxGIs.roa
Signing time: Tue 31 May 2022 00:30:13 +0000
ROA not before: Tue 31 May 2022 00:30:13 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18680 (0x48f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 31 00:30:13 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=E817BCC63FF8D153BC9601E027A71CC22B71188B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ab:4d:0a:5d:d5:c1:9f:ff:fd:dd:1e:50:0c:
ee:88:a4:35:ee:5a:3b:f5:28:ac:f2:3a:11:34:e6:
9c:78:3f:00:d6:32:9c:6d:0d:fb:3a:1d:45:c1:1e:
27:09:ba:aa:fe:76:92:e9:5d:4c:1d:a2:5f:f5:c1:
9c:b2:35:8f:fd:e6:c3:49:a5:a2:d5:48:3e:8e:d3:
32:44:35:4d:7c:c4:f0:da:70:80:e6:8b:c1:eb:ed:
c5:de:ab:2d:0b:91:5b:96:e9:ba:bd:4c:de:77:62:
4e:a2:df:34:97:fe:a6:58:f9:c6:d1:e7:d8:81:6b:
79:ea:be:e0:04:4b:d3:5d:d5:e1:76:dd:33:c8:d2:
b2:d7:35:6b:ea:22:45:fe:e5:64:94:72:64:36:03:
48:73:bd:37:f6:7f:4a:84:17:ea:3a:b8:c2:df:6f:
05:c6:bd:65:4b:6e:2b:e2:40:10:d9:72:88:ff:bf:
a4:cc:ca:41:74:53:03:ed:57:7f:2b:85:7f:ad:af:
63:e5:c5:c1:89:be:5c:97:81:fc:80:ce:e7:96:e2:
01:30:96:b8:57:54:2d:4f:c2:01:8d:7d:e2:6e:08:
ee:b9:4f:f4:f4:34:81:ef:75:dd:b8:07:10:e6:10:
5a:44:b1:5a:11:be:80:18:12:a1:79:09:84:d6:9c:
b3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:17:BC:C6:3F:F8:D1:53:BC:96:01:E0:27:A7:1C:C2:2B:71:18:8B
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/6Be8xj_40VO8lgHgJ6ccwitxGIs.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:47:85:8f:b4:50:e2:9a:32:04:56:db:67:64:61:9c:35:25:
7b:f2:79:cb:57:7e:55:2d:9c:06:6a:03:5c:7b:48:06:57:00:
d6:1d:37:f2:d3:74:b9:23:c1:7a:1d:73:34:88:8d:03:ea:72:
aa:2e:57:dd:bc:2f:5c:7e:5e:2e:5c:d1:7a:cb:4c:e2:93:e6:
a9:b3:da:21:f1:60:69:a0:04:a5:a7:30:b5:68:8b:55:4b:41:
15:01:3b:d7:2a:9e:8b:2c:1f:ac:f4:a9:f4:67:ed:90:3f:01:
35:a7:a6:4e:91:3b:b3:ee:e3:98:71:26:c0:33:fe:24:71:b7:
48:6d:af:a1:4b:b9:ad:c9:90:44:3a:af:57:df:8f:26:11:eb:
d4:38:e1:26:5c:55:50:f7:8c:b1:ec:bd:c7:1c:84:70:fd:09:
4a:8a:9e:23:f0:38:f2:f9:7c:97:15:8e:8d:16:c4:15:00:1a:
e8:c5:6d:f7:16:18:01:46:65:51:25:b7:40:b9:3e:17:d7:06:
85:10:0a:1f:7f:fc:58:83:90:06:fb:35:18:6e:13:ba:27:8c:
3f:60:a6:f2:b5:c1:86:31:0d:2c:be:fa:c0:d6:f4:ed:07:d4:
fd:e1:0b:2f:8e:f1:1e:61:86:62:3d:dd:9e:55:c2:38:2c:d1:
ab:4d:ec:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org