Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/6i8j11i2jMGj_Wr6E7LSQgTRiSg.roa
File: 6i8j11i2jMGj_Wr6E7LSQgTRiSg.roa (raw, json)
Hash identifier: OoidaF1znM3aIxshN/CsivukrD4N0ezHcR4DyK8WLZg=
Subject key identifier: EA:2F:23:D7:58:B6:8C:C1:A3:FD:6A:FA:13:B2:D2:42:04:D1:89:28
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4516
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/6i8j11i2jMGj_Wr6E7LSQgTRiSg.roa
Signing time: Tue 22 Mar 2022 00:30:07 +0000
ROA not before: Tue 22 Mar 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17686 (0x4516)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 22 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=EA2F23D758B68CC1A3FD6AFA13B2D24204D18928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:50:ca:73:31:59:0d:ee:de:fa:88:48:80:c2:
fe:57:d1:b8:0f:0f:fe:dd:6b:ee:8c:a1:0c:80:6a:
a0:2b:3e:3f:ee:a0:61:15:bb:87:ea:7a:e7:1a:f0:
90:f1:8f:da:00:b0:b8:16:e6:c6:5c:36:8c:8c:0e:
84:49:d3:fa:1c:39:c9:43:10:a4:71:4a:0b:ec:4e:
b1:fc:22:2d:ec:9d:4d:fb:6a:78:a1:e8:08:6a:8a:
11:ac:f2:f1:38:98:5c:ea:71:85:04:4f:25:0e:d9:
f4:e5:a3:a2:ca:b3:66:12:c3:18:83:68:5d:6f:cd:
93:d8:a6:73:0f:0b:11:1e:91:3f:66:b8:d7:9a:9e:
40:af:32:84:c0:40:15:fc:39:19:3d:19:84:c0:8b:
be:16:cb:07:5a:24:c8:77:a6:e2:6e:28:89:ee:85:
52:a0:a9:6b:0c:3d:55:ad:cd:89:a1:c1:64:e3:2b:
b8:99:0f:26:8c:13:60:6b:c1:78:13:36:89:c9:fa:
76:d1:ee:16:a6:e9:77:3a:b0:57:f3:45:22:41:e8:
64:89:9a:7e:c9:2c:a8:bf:0f:4e:e3:9c:c5:52:ac:
f3:aa:31:9f:34:60:93:6c:67:ab:4e:4b:83:b2:b6:
57:62:d5:6b:1c:8c:31:63:35:a3:79:4f:2a:95:d5:
1a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:2F:23:D7:58:B6:8C:C1:A3:FD:6A:FA:13:B2:D2:42:04:D1:89:28
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/6i8j11i2jMGj_Wr6E7LSQgTRiSg.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
57:62:9e:64:be:8c:b7:0d:36:42:80:0d:1a:55:47:25:31:f4:
fb:27:0e:ee:a0:fc:e7:05:0d:dc:b3:61:e6:77:8d:44:95:77:
1f:22:ee:95:a5:83:c7:36:b3:09:88:0d:3e:e5:75:75:e0:63:
d6:fd:1d:13:93:1e:d2:76:ee:1d:95:c9:6f:f2:68:93:02:f6:
5d:ba:89:68:0d:0a:56:44:48:8b:fd:a9:18:ab:68:76:fb:58:
2c:c2:ba:4b:82:55:13:56:33:20:bc:de:c8:2f:f3:02:4d:54:
60:1d:d8:8d:26:56:c7:4b:b7:a7:a9:bd:d2:da:d8:24:86:b4:
59:a9:ec:d4:de:f6:6d:0c:2e:c6:04:7a:44:3f:40:4d:26:84:
38:bd:c4:d3:b6:d8:50:1e:e8:d1:27:be:c4:5b:09:57:e9:cb:
67:3c:6c:67:60:c6:ef:2b:29:b3:37:dc:fa:18:f5:fc:30:71:
62:eb:36:13:05:31:2e:a2:72:87:ad:b5:3a:a1:4c:4d:9e:e3:
06:e2:fe:a7:48:e8:37:96:1a:54:58:0c:8a:52:1c:09:c7:de:
1f:7f:ae:8b:f6:1a:0e:dc:87:c7:ae:09:f8:f2:36:c8:06:b9:
bc:dc:a9:01:c8:69:25:72:3e:33:06:ce:d9:a3:c1:58:14:cf:
b6:83:0e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org