Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/6Z9ekOkoT4x8R56Jh9PAj5LpjwQ.roa
File: 6Z9ekOkoT4x8R56Jh9PAj5LpjwQ.roa (raw, json)
Hash identifier: mzbZVP33tGNboUrGYCGgpO1Fj0FzbyleQflpO7V9GPQ=
Subject key identifier: E9:9F:5E:90:E9:28:4F:8C:7C:47:9E:89:87:D3:C0:8F:92:E9:8F:04
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 44C5
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/6Z9ekOkoT4x8R56Jh9PAj5LpjwQ.roa
Signing time: Wed 16 Mar 2022 00:30:09 +0000
ROA not before: Wed 16 Mar 2022 00:30:09 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17605 (0x44c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 16 00:30:09 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=E99F5E90E9284F8C7C479E8987D3C08F92E98F04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:98:38:b6:b6:ae:e2:7a:86:db:f5:4f:b3:b4:
66:aa:96:6c:0b:40:7c:01:64:a7:7a:3c:cd:6f:21:
28:04:9a:02:c5:d1:85:6e:c4:32:14:54:e1:f5:ee:
fe:0f:c3:85:e2:e1:4e:1f:1f:8c:f8:44:b0:7b:46:
53:7e:c7:02:82:35:85:27:ff:fb:25:13:30:07:3c:
6c:a6:03:ec:f0:7c:92:40:23:c5:04:5d:51:35:ec:
b2:62:1a:13:49:cb:52:e2:48:27:df:f2:59:bd:16:
4e:86:08:71:b5:12:56:15:49:48:5c:ce:e3:85:d0:
4e:0f:e9:3e:e6:98:14:18:c3:98:d3:73:97:f4:1b:
5c:06:82:51:77:9f:85:f4:9c:05:3f:27:d0:77:92:
ea:7f:45:5e:b9:18:5c:6d:d2:b4:d5:9e:30:bf:4b:
ff:80:c5:06:9f:7f:12:be:bc:44:c7:2a:0b:1b:02:
0b:b9:97:79:61:4d:6f:1e:60:7c:d0:75:b8:5a:8e:
77:03:a9:c7:2c:fe:6a:46:67:ae:f3:a9:12:38:6d:
7f:e2:30:7e:7d:50:26:bb:af:ce:f3:bd:77:0a:19:
99:b9:b3:a7:53:54:a4:b2:bb:76:23:0c:09:d9:21:
e5:44:73:a4:7e:56:d2:85:3a:86:08:85:b4:a0:4f:
fd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:9F:5E:90:E9:28:4F:8C:7C:47:9E:89:87:D3:C0:8F:92:E9:8F:04
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/6Z9ekOkoT4x8R56Jh9PAj5LpjwQ.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
62:d5:3e:ba:f3:37:b7:77:ae:1d:bd:c1:73:a8:a8:aa:df:40:
45:e8:1c:ce:75:c5:8c:ea:d3:6c:b5:a2:b0:74:ff:5e:ee:4a:
bd:f1:ca:96:8d:04:ec:6e:f3:c3:ed:39:fc:32:65:00:26:87:
b1:22:13:be:d8:72:57:b1:ca:56:d0:7c:41:c6:2f:28:72:49:
b3:c2:b6:bf:ac:43:2c:b9:52:0d:74:d2:1b:3b:89:29:0a:45:
8f:5f:f7:a8:eb:75:49:b9:04:67:f7:16:8c:5d:c3:fc:d4:05:
1c:b8:79:df:75:74:48:71:74:61:93:1b:00:02:15:0d:9a:5f:
36:a1:d4:f1:63:bf:73:2c:83:bc:52:68:6c:15:f8:1e:03:85:
cf:7b:ef:18:5b:64:0d:0f:58:05:93:c1:2c:ff:77:03:2b:e0:
75:ea:74:af:a4:92:88:97:ca:7d:c8:51:1e:0c:e8:36:40:fb:
8f:5d:d7:50:30:23:d3:b1:12:ac:b2:07:a5:05:e9:35:11:d9:
fb:c4:df:e2:32:72:6a:ac:51:ff:22:58:98:3c:71:71:c7:a2:
b9:25:d7:43:91:2c:d5:b2:47:20:72:43:d1:51:19:c9:24:83:
d8:03:8e:8f:d8:54:82:5d:2d:ce:d0:75:3e:95:46:70:e7:91:
7a:ed:0d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org