Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/8DMRe7i8ICzuth_-nLUkOYVvKK8.roa
File: 8DMRe7i8ICzuth_-nLUkOYVvKK8.roa (raw, json)
Hash identifier: zF/k7hmDP2UZggu9ARnZj0+xRY8ieMZqP7syp11jNvk=
Subject key identifier: F0:33:11:7B:B8:BC:20:2C:EE:B6:1F:FE:9C:B5:24:39:85:6F:28:AF
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 42C3
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/8DMRe7i8ICzuth_-nLUkOYVvKK8.roa
Signing time: Mon 07 Feb 2022 00:30:08 +0000
ROA not before: Mon 07 Feb 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17091 (0x42c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 7 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=F033117BB8BC202CEEB61FFE9CB52439856F28AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ab:6a:46:a1:ff:2c:8d:65:f4:34:d7:0a:9f:
65:32:13:ca:57:79:b1:da:7c:bd:6c:1b:1e:9d:d8:
96:c3:67:f2:d6:1d:dc:ee:a9:e7:98:f5:ef:af:37:
e4:80:e0:12:99:5d:40:8f:da:95:96:22:44:ae:cd:
c6:30:6d:48:cf:39:75:24:b9:af:6f:69:01:5f:bb:
fc:42:d0:23:95:ca:b9:5b:3f:d8:a0:2d:9e:c1:9e:
de:95:eb:f6:b9:b7:74:fa:8c:c9:93:e9:b1:9f:3e:
0d:ca:31:4c:95:40:4e:7b:07:57:9d:37:f4:3c:2f:
4c:6b:65:f7:b1:90:a3:4d:0b:50:b0:17:7b:fe:04:
3e:b6:6f:2f:58:67:d7:a3:43:a4:8f:ba:03:45:a2:
bd:ff:ac:44:37:3d:6a:d7:64:15:f8:1e:23:5b:01:
25:b4:61:25:ab:e2:98:c9:d6:8a:5e:0f:cc:98:a6:
18:bf:72:ad:82:dd:9e:57:bc:eb:63:06:9d:d4:f2:
5e:0f:d0:11:58:91:12:fc:b5:3d:5a:fa:35:8b:89:
3c:f0:71:a2:c4:a8:94:25:ee:06:0e:70:83:92:79:
00:d6:7d:f1:bc:68:c0:47:46:47:42:ea:bb:1c:86:
99:7a:6b:3a:95:1d:fb:c2:0c:37:19:75:ef:81:73:
6f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:33:11:7B:B8:BC:20:2C:EE:B6:1F:FE:9C:B5:24:39:85:6F:28:AF
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/8DMRe7i8ICzuth_-nLUkOYVvKK8.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
47:1d:41:93:e0:5f:19:84:56:65:75:34:1d:6e:39:ab:92:e7:
16:55:e6:8b:3b:85:5f:81:d2:1e:b3:3d:01:aa:bc:88:f6:a0:
0b:72:cc:2c:86:0b:be:f7:d4:4a:0a:f5:85:40:ca:82:36:7f:
88:03:eb:5c:50:8c:33:05:ee:fa:a0:b6:1b:9e:c7:da:41:30:
8c:47:1a:04:41:e6:2f:a9:2b:ea:59:ea:60:dc:02:92:05:a7:
c6:66:3d:8b:a5:32:b7:70:5a:04:96:3f:a7:69:1b:2d:10:05:
f8:19:95:3a:dc:55:57:67:f2:2d:1d:46:b2:a8:4a:d2:50:6f:
ce:29:15:9a:6f:d4:bc:19:8a:80:fc:b1:e2:47:6d:ff:55:9a:
4d:5a:ae:01:d8:b9:ff:f5:c8:38:c2:0b:25:22:3a:02:1d:40:
c2:9d:52:fd:17:8f:3c:f5:89:14:a2:9c:66:75:ad:d1:90:30:
98:e5:60:75:1b:77:cd:65:ae:37:9c:06:1e:d7:55:7d:7a:98:
06:02:b5:2d:e6:31:1e:a4:be:5a:93:48:66:31:55:20:b0:ec:
3d:44:a8:87:ef:f6:00:ac:10:dc:6b:92:35:5b:40:ba:92:02:
5d:68:bd:43:8b:97:f9:8e:7e:be:e3:f2:47:46:8c:7c:cd:95:
2d:b1:bc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org