Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/CwiJ03W9_B-Fjc3QT0Iel8KWmZk.roa
File: CwiJ03W9_B-Fjc3QT0Iel8KWmZk.roa (raw, json)
Hash identifier: sIL6OuHcLI41l68bmsDe2lIrIngaPgm+gQJ+9Xhs1Lc=
Subject key identifier: 0B:08:89:D3:75:BD:FC:1F:85:8D:CD:D0:4F:42:1E:97:C2:96:99:99
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 434F
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/CwiJ03W9_B-Fjc3QT0Iel8KWmZk.roa
Signing time: Thu 17 Feb 2022 00:30:06 +0000
ROA not before: Thu 17 Feb 2022 00:30:06 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17231 (0x434f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 17 00:30:06 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=0B0889D375BDFC1F858DCDD04F421E97C2969999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2c:ad:fc:22:d7:f0:98:14:7e:80:3f:9b:a0:
c2:a2:b3:f4:09:fd:35:a5:22:4a:b1:8d:da:f7:5e:
87:89:48:88:ba:25:b8:80:93:e3:00:d6:fd:3e:7e:
2f:0e:ab:56:ee:6d:f0:e8:d7:88:4a:e4:1f:a1:72:
16:08:dd:c1:33:4b:88:b0:94:2a:b4:89:fa:8c:b6:
1e:01:c2:ed:af:d7:e9:b0:bf:36:e5:ac:a9:8c:13:
42:cc:43:4c:b2:ef:8b:78:61:c3:04:13:be:9c:8e:
b8:4e:a6:97:9a:75:00:3d:04:b2:3a:3e:47:63:35:
75:a2:2f:ef:0c:d1:52:49:15:44:36:f9:40:27:54:
80:64:2f:be:65:2e:3e:bc:c7:1c:66:fc:c0:7a:47:
63:02:dc:d8:cd:c7:e6:14:b1:e8:25:9f:02:e5:05:
1c:c0:d9:25:46:bb:65:04:63:a4:67:e0:d4:5b:55:
dd:b3:b2:5e:9a:01:a5:cf:2c:bb:f2:9b:57:10:ad:
34:b8:79:04:d5:8b:fb:d1:26:ec:3e:1e:55:71:9b:
2f:81:4c:d3:38:00:99:7b:e5:39:54:b5:cf:b2:d4:
f2:82:82:d8:bb:80:d3:79:b1:16:7b:5a:43:e7:7e:
b5:ca:f1:9a:9d:54:3d:7b:d5:61:d6:f4:dd:5f:7f:
1e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:08:89:D3:75:BD:FC:1F:85:8D:CD:D0:4F:42:1E:97:C2:96:99:99
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/CwiJ03W9_B-Fjc3QT0Iel8KWmZk.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
69:04:fd:7f:92:ab:80:2e:69:7d:e7:fa:25:ef:1b:d5:eb:b7:
4c:73:ee:b9:9e:a2:5a:25:a5:90:83:d2:51:f4:53:93:7e:d2:
46:44:94:8e:d2:64:1d:09:7c:58:01:0a:53:9e:26:4a:da:d5:
94:01:0f:6f:56:fb:bf:e7:6b:98:5f:0d:91:d5:1b:f9:cd:d4:
5a:75:35:ca:f1:43:f8:3f:4f:15:d1:f9:90:2f:67:a3:ee:78:
a0:f0:ed:44:63:59:3c:7a:9e:e2:93:2b:31:24:75:8e:ce:b3:
4e:f0:5a:8b:19:f6:29:83:c1:94:02:f3:e8:9e:57:49:fa:d7:
f1:69:e0:8d:31:1d:43:63:70:7a:15:6e:b3:e7:74:a3:2a:6a:
cf:6b:40:a8:71:8a:b3:e6:e6:5c:1a:8d:2d:a7:af:49:7c:65:
22:5c:2d:b7:b1:d9:ea:54:c6:d9:9f:ff:99:85:69:ed:68:71:
80:09:e0:cb:c8:68:c6:d2:57:f1:d4:ff:13:b5:29:4e:6b:f8:
f2:27:9c:bd:3f:6d:4a:03:69:9b:26:47:ee:db:08:d9:9f:74:
31:a6:a4:06:98:24:63:16:fc:a9:cb:e1:c0:73:30:c1:0f:eb:
8d:a3:7c:5d:dc:e2:fa:64:25:58:17:a8:b6:ff:42:04:5c:3e:
8e:34:89:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org