Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/DCdJk-AIBiSkQOt_UGa6VqJT3as.roa
File: DCdJk-AIBiSkQOt_UGa6VqJT3as.roa (raw, json)
Hash identifier: wXrkpImGXXiENl0G337wLhdSXLBKY4HCcc9u1ubf70A=
Subject key identifier: 0C:27:49:93:E0:08:06:24:A4:40:EB:7F:50:66:BA:56:A2:53:DD:AB
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4837
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/DCdJk-AIBiSkQOt_UGa6VqJT3as.roa
Signing time: Wed 18 May 2022 00:30:06 +0000
ROA not before: Wed 18 May 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18487 (0x4837)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 18 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=0C274993E0080624A440EB7F5066BA56A253DDAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d6:33:4e:18:b6:c7:0a:01:be:21:67:c2:64:
c0:8a:ab:8e:83:bb:16:34:66:52:03:c0:5d:71:53:
9c:c0:7a:6c:91:12:f9:71:7c:3b:1d:c2:03:9e:ce:
d2:c7:6b:58:9b:4f:86:7d:02:26:ec:98:94:b1:1a:
63:5a:25:8f:23:a8:05:f1:52:f5:b9:67:38:bc:8f:
c2:e5:07:da:5f:3f:9e:07:74:a5:ce:63:1f:f0:fa:
ba:0d:ae:52:47:f3:71:cf:10:9f:ad:42:0b:fd:ab:
9b:2c:82:35:14:7c:98:30:b1:34:f9:0c:c9:f6:03:
d9:5a:cd:16:65:af:00:f4:5d:a4:e4:e8:79:6b:af:
b5:d4:5f:cd:b9:8a:9b:fd:cc:3b:e4:4a:36:fb:bd:
df:17:9b:0d:e8:e0:5c:6f:b7:39:9a:13:9c:d4:57:
60:a8:9f:8b:95:72:ce:cd:ad:1b:26:29:60:a4:fa:
a2:3d:29:7c:8f:1b:e4:84:50:48:b1:06:7d:46:1c:
82:6f:3c:84:7f:c5:b0:e4:9b:74:37:9c:8e:4d:8c:
96:fb:f8:51:e8:9d:49:50:18:97:08:13:f6:03:f4:
2f:89:34:dd:7f:5e:ab:46:f7:8f:b9:01:65:43:1f:
1a:be:ad:15:f5:74:07:2b:42:33:1d:53:db:fc:e1:
c1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:27:49:93:E0:08:06:24:A4:40:EB:7F:50:66:BA:56:A2:53:DD:AB
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/DCdJk-AIBiSkQOt_UGa6VqJT3as.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:2f:eb:d8:9a:77:92:bc:a0:1b:98:fc:7c:75:d0:8a:f2:ee:
52:4a:bb:24:e7:45:c5:83:89:0f:31:05:bf:a9:bf:68:96:0d:
b5:49:89:83:eb:be:a6:89:92:1d:98:6b:5e:3f:86:09:31:88:
bf:bb:6a:cd:27:3f:2b:aa:bf:18:27:ff:40:88:30:5b:01:b9:
6e:c6:e1:88:3e:70:07:84:78:b1:be:8c:d7:00:5b:2f:53:14:
47:03:2f:ab:39:5f:5c:0d:9f:e9:93:c5:d0:eb:a5:c7:c1:f4:
9b:aa:fe:8c:17:36:5f:dc:58:bb:a2:e5:d3:0e:4c:82:b2:9b:
58:b3:40:1f:52:97:11:b8:76:09:46:d9:8f:65:a3:f7:b7:86:
a5:4e:b3:1a:22:5f:02:eb:6e:07:18:62:22:62:10:1c:1c:bd:
3c:47:d4:61:17:24:25:72:b2:c7:bf:e2:6f:d5:d6:b0:11:13:
3c:58:5b:e9:58:4f:9c:73:2e:33:cf:6a:27:e3:39:1f:7c:42:
15:06:35:42:c6:43:9f:a5:de:a2:72:5e:56:d2:0b:12:e0:26:
30:ae:57:38:51:37:9a:27:ef:e9:7d:11:3b:41:f5:9f:5f:e0:
35:b3:48:41:4c:4b:88:9b:e7:22:e5:d1:83:79:3c:4c:4d:72:
56:e9:a6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org