Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/GtCfsvxcY58uBNIdEfBcrXoI6mU.roa
File: GtCfsvxcY58uBNIdEfBcrXoI6mU.roa (raw, json)
Hash identifier: Y8OLuA8ZLmc950wjkVADbNbJs4n4q3we6tndl4lc0Ag=
Subject key identifier: 1A:D0:9F:B2:FC:5C:63:9F:2E:04:D2:1D:11:F0:5C:AD:7A:08:EA:65
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4594
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/GtCfsvxcY58uBNIdEfBcrXoI6mU.roa
Signing time: Thu 31 Mar 2022 00:30:07 +0000
ROA not before: Thu 31 Mar 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17812 (0x4594)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 31 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=1AD09FB2FC5C639F2E04D21D11F05CAD7A08EA65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4e:07:5d:db:8f:92:e0:17:59:43:a9:5f:74:
3a:03:18:6c:da:86:63:09:89:30:06:fd:1e:a3:9d:
53:9a:23:6f:25:e7:78:9b:2f:e4:94:60:11:27:e4:
2a:04:63:f8:80:57:0d:e5:4f:00:4c:a8:1b:81:eb:
93:c1:03:d2:24:5d:fb:09:4b:dd:03:19:02:65:b3:
55:85:c9:26:f4:a5:8b:65:c1:f4:5c:51:93:aa:8e:
ce:b5:e2:4c:fd:47:d1:e2:7b:a3:8e:20:28:f7:f9:
16:10:d3:28:56:6b:c2:41:c0:85:8f:8e:0c:96:de:
f1:e2:63:99:1e:92:16:cf:9e:24:f2:37:59:08:34:
c3:42:9b:2d:4a:97:b8:9f:26:18:c6:71:61:c8:8d:
8d:a5:4f:96:ad:33:12:a3:95:5d:4f:58:fc:f6:18:
de:10:e6:85:55:e8:0f:2d:77:dc:99:f6:c5:cb:01:
22:68:e0:39:09:7a:9e:36:75:a1:b8:3b:61:f5:e8:
16:9c:8c:7b:6d:1a:91:6f:36:db:ae:60:c1:8c:49:
8f:7b:e6:6d:a9:a1:b8:31:b2:f8:87:d9:d3:b5:b6:
80:08:40:ae:74:32:f4:d1:8f:ec:af:8f:c0:6e:36:
d6:34:1e:4c:77:ef:f2:1e:4e:71:f7:da:76:b8:f9:
bd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D0:9F:B2:FC:5C:63:9F:2E:04:D2:1D:11:F0:5C:AD:7A:08:EA:65
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/GtCfsvxcY58uBNIdEfBcrXoI6mU.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
10:c7:c5:20:33:96:3a:e1:0d:f3:dc:85:0b:33:b4:71:a6:c2:
66:1f:d2:93:16:87:1e:94:33:65:c0:4f:19:35:4d:bd:ed:4a:
2d:f4:fc:f4:29:e2:27:34:0c:38:05:c1:60:8f:ef:50:4b:e9:
b4:b2:39:c6:60:1d:e7:67:27:7d:ce:f4:3e:fc:69:18:60:20:
bc:15:5d:c4:49:ed:f2:99:ee:08:e6:f4:38:60:e8:93:59:5a:
08:da:df:3a:a8:53:77:00:dc:6a:e7:f7:27:16:0c:44:d4:7c:
9a:c8:f2:66:5a:1a:95:13:72:cc:bb:2d:71:a6:55:d9:68:fe:
fd:48:fb:e2:11:cc:3b:2f:95:bf:71:d7:85:80:db:b2:9a:01:
a8:af:71:c4:2e:f7:a7:32:5a:8e:df:98:9f:9b:04:cf:42:5b:
bf:79:56:96:a6:3b:bd:bf:14:bf:61:66:bb:ee:c5:af:99:7a:
52:48:2e:c5:ad:2b:64:c2:6e:06:8e:b7:7a:b5:a2:ca:76:b3:
54:bc:c7:45:d5:eb:69:6a:bf:5f:e7:77:fa:66:0d:b0:d8:da:
92:48:f7:b2:3a:b5:bd:a3:dd:76:c8:68:8d:a6:dc:23:8e:68:
40:e0:47:06:fe:51:86:c7:16:ac:34:9c:47:bb:c2:0c:98:52:
87:b4:ef:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org