Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/Ceg3q9HaKj0-VTEq5OD-vnol8sI.roa
File: Ceg3q9HaKj0-VTEq5OD-vnol8sI.roa (raw, json)
Hash identifier: +abw6tg3fEsB0wPoctZjzo4ev/acN7HxS4HuZb3O9DE=
Subject key identifier: 09:E8:37:AB:D1:DA:2A:3D:3E:55:31:2A:E4:E0:FE:BE:7A:25:F2:C2
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4993
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Ceg3q9HaKj0-VTEq5OD-vnol8sI.roa
Signing time: Thu 09 Jun 2022 00:30:06 +0000
ROA not before: Thu 09 Jun 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18835 (0x4993)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 9 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=09E837ABD1DA2A3D3E55312AE4E0FEBE7A25F2C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:9c:8d:15:66:1e:67:f8:60:d2:53:f2:7a:e5:
5e:76:cc:5d:6d:2b:00:54:2c:03:eb:51:13:01:79:
8d:da:4c:99:b2:7c:4d:5a:40:6a:24:e1:c6:a1:43:
0e:8e:42:58:58:50:f6:6b:23:c8:08:2f:f8:d1:1b:
a7:87:ab:9c:fa:1e:66:71:65:4b:39:72:e5:10:a0:
37:70:08:75:43:3d:09:ec:1e:82:9d:c6:ea:0b:1d:
63:95:77:0f:aa:4e:2b:f0:e2:f7:6b:d4:c8:0b:ee:
cf:69:95:5c:f0:ac:9d:89:83:70:22:a5:53:88:c9:
05:be:f1:11:17:f6:3e:21:2b:11:bb:17:13:1e:bc:
29:b4:95:87:d6:0b:d6:bd:da:87:82:27:02:1c:de:
c4:f0:75:d9:54:e2:48:89:21:dd:6c:5c:fc:8b:66:
51:77:c7:6c:ec:f3:5a:91:75:96:8b:26:b9:0d:73:
ba:9e:50:4d:1d:ba:4d:92:97:10:1c:87:e9:51:73:
e3:42:3f:ac:bc:fc:37:6e:bc:b1:b8:b1:c7:60:58:
8a:a6:60:f6:e7:df:43:c2:d8:f3:2f:14:2f:1f:19:
c8:94:c5:d9:00:28:f0:78:e0:02:0a:a3:27:45:c8:
05:45:cb:7e:88:c9:0d:14:92:68:47:11:1e:5b:6e:
fc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E8:37:AB:D1:DA:2A:3D:3E:55:31:2A:E4:E0:FE:BE:7A:25:F2:C2
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Ceg3q9HaKj0-VTEq5OD-vnol8sI.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
08:61:4d:9d:a3:1f:19:0d:f3:72:98:8d:db:e5:5d:22:c2:cb:
15:4a:6f:84:45:60:bb:18:53:b0:be:78:c7:38:6f:a6:41:dc:
c0:2e:e1:fb:2f:6d:1c:a7:7e:4f:88:c5:08:e2:1d:cf:ac:f3:
50:cc:9d:6f:05:a6:1b:1b:00:4c:48:bb:c6:11:64:24:c1:8f:
dc:51:de:8e:3c:b2:57:0b:54:5f:b8:5a:8e:b2:a9:e2:95:9c:
a5:2a:ab:e7:82:f7:f1:a8:2c:27:d7:5a:f4:e3:cd:dc:dd:80:
f8:2e:2c:6c:94:1b:28:9f:e7:b5:24:33:07:a4:7f:e8:5c:87:
62:42:34:f3:30:e5:fd:1e:cc:6c:f7:15:99:f0:45:01:aa:4d:
e4:1a:04:0f:c9:99:fe:a4:e9:ee:2c:45:9f:dd:06:63:4e:45:
9b:cd:c6:05:ba:1f:25:a0:e4:2a:25:4e:96:d9:0a:d6:ed:25:
fa:ce:73:af:15:d5:84:34:33:cf:17:34:f0:ef:e7:fa:48:75:
d2:9d:ec:21:b1:fd:9f:1e:92:2e:43:cf:3f:3f:65:25:ac:38:
c5:86:6f:5d:a0:bc:da:3c:48:01:6e:75:b5:a9:66:e8:65:90:
8f:37:99:ab:e1:9c:c4:c4:42:a0:eb:01:95:eb:a4:18:4c:f2:
61:de:8e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org