Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/9ZkAAIJDNnSkX6ZDeMoEegb5Jew.roa
File: 9ZkAAIJDNnSkX6ZDeMoEegb5Jew.roa (raw, json)
Hash identifier: UV6ePdYMfxnd/6csrT1kgCRa4SWxMS/JJ2hZAiHKhNk=
Subject key identifier: F5:99:00:00:82:43:36:74:A4:5F:A6:43:78:CA:04:7A:06:F9:25:EC
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 474B
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/9ZkAAIJDNnSkX6ZDeMoEegb5Jew.roa
Signing time: Sun 01 May 2022 00:30:08 +0000
ROA not before: Sun 01 May 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18251 (0x474b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 1 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=F599000082433674A45FA64378CA047A06F925EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e1:4f:49:84:69:f6:83:d4:87:c2:10:76:a4:
7e:9b:e9:70:e9:ee:34:c8:fe:60:9b:10:70:d2:e7:
cb:06:df:e2:7f:94:f6:53:69:2d:7a:a9:78:9c:0c:
d1:21:48:4f:11:bf:91:e2:8f:60:3d:33:39:c4:68:
0c:30:76:35:0b:43:d6:82:e2:21:92:ff:dd:4e:f1:
10:ac:be:b5:fc:9a:05:01:d3:c1:3a:da:df:43:7f:
c0:19:f6:6a:e1:05:9c:6d:b5:94:7c:f4:b8:94:30:
8a:88:19:ef:b5:65:cc:c7:58:28:46:09:36:4c:83:
3f:00:62:15:b9:70:a7:e7:4b:5c:3a:fb:99:0f:38:
6c:d1:f1:a0:9d:a4:32:60:aa:bb:e2:be:40:97:7a:
f7:f5:a1:28:e5:39:ae:5e:32:d4:c7:3e:63:4f:4e:
3d:11:b3:63:7c:87:d5:d2:1a:63:04:c7:cc:55:b7:
ae:0e:7d:4d:3d:ff:c2:f2:8b:cf:3a:27:1e:7a:f4:
a2:3e:ca:eb:a6:46:ba:88:67:24:f7:10:d7:6c:5a:
50:86:1c:a9:be:3b:61:c0:1e:91:14:c0:0d:5a:7c:
b0:28:a9:7f:20:8e:09:b0:88:51:16:9a:5c:00:59:
0a:da:85:1e:97:24:91:92:19:3d:40:f2:3b:99:6c:
a6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:99:00:00:82:43:36:74:A4:5F:A6:43:78:CA:04:7A:06:F9:25:EC
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/9ZkAAIJDNnSkX6ZDeMoEegb5Jew.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:04:ed:55:0a:5d:9d:58:f6:32:72:7c:e7:1e:bc:42:5f:0d:
29:8b:ee:81:38:2b:53:34:7b:d1:4e:77:96:56:97:f0:3f:20:
56:cf:b1:e4:9f:d2:c5:c0:a3:b4:75:3a:38:81:d8:64:04:0b:
f9:6f:69:ab:23:a3:b1:e6:fa:f2:aa:52:96:1b:4c:45:b8:1d:
c4:51:23:b7:fb:03:0c:1c:ac:fc:20:62:af:4e:9a:20:7e:8d:
bc:dc:dd:14:3f:a9:7d:c5:30:da:f9:2c:d2:de:24:70:69:c8:
56:49:84:4a:44:ea:39:c6:f5:b8:2d:80:41:43:74:55:10:6f:
d2:aa:3a:17:47:03:ae:96:6c:89:9f:a3:96:2b:d2:16:25:2c:
98:d1:1f:52:f7:c9:d8:44:26:cd:5e:2a:f3:8c:12:ab:a3:bf:
dc:7b:79:98:1d:f0:13:8d:29:d4:d7:4b:48:71:fb:e6:7a:f4:
98:83:49:46:84:e2:33:02:58:cc:62:a6:ec:50:7a:c0:b9:cf:
74:9a:9e:ea:27:41:4c:fa:c7:30:e7:f7:b5:fe:9f:6e:83:ef:
31:7a:97:34:b2:2d:ad:c9:e5:f2:1f:cf:69:5f:13:3d:d7:cf:
8c:70:e3:30:9b:c6:ff:ef:50:c0:2d:b2:dc:1a:fa:37:e4:65:
c5:d2:bc:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org