Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/IpRHJNfHZ5M6VPMFRQaIBFRMs04.roa
File: IpRHJNfHZ5M6VPMFRQaIBFRMs04.roa (raw, json)
Hash identifier: u0/O5G5Xa5BdksSXK8mxJHA60fhsp62YOzzh0tTKMf0=
Subject key identifier: 22:94:47:24:D7:C7:67:93:3A:54:F3:05:45:06:88:04:54:4C:B3:4E
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4944
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/IpRHJNfHZ5M6VPMFRQaIBFRMs04.roa
Signing time: Sat 04 Jun 2022 00:30:05 +0000
ROA not before: Sat 04 Jun 2022 00:30:05 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18756 (0x4944)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 4 00:30:05 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=22944724D7C767933A54F30545068804544CB34E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0d:8d:03:6a:bb:7f:8c:9b:c0:c8:c8:3b:6f:
82:8b:b3:5f:f9:b6:26:c2:b3:95:3a:f3:37:7a:5b:
9c:21:3a:fe:19:8f:a2:d6:37:f9:76:cf:cc:e3:1a:
52:60:c0:36:55:14:cf:52:24:c2:28:83:a8:82:61:
70:18:ef:12:09:d9:8e:5e:4f:48:a6:cc:48:55:1f:
ad:a2:c9:a9:49:fc:05:9a:6a:55:8e:1e:4e:49:d6:
77:6e:d7:5c:d3:9f:d6:4d:a9:f4:38:75:2f:51:8a:
50:cc:c1:7a:77:dd:72:53:85:e6:98:f9:f5:2c:46:
c6:2f:fb:10:ea:f6:73:8a:1a:bb:9d:b8:b2:a6:5a:
91:ea:26:fa:d0:88:47:51:7d:84:97:8e:63:f7:59:
27:3c:c1:ed:0e:61:2e:0a:d9:f1:13:71:62:07:8a:
24:28:ce:73:6d:26:a9:e3:4e:fe:4d:f0:75:ae:93:
e1:26:8f:d6:25:ff:1d:0a:11:2d:95:4d:d1:4a:ba:
81:29:a4:b4:92:07:94:8f:d0:ab:9f:2d:46:d7:08:
8a:37:51:5b:e4:72:41:c7:ac:21:60:b1:20:17:62:
f2:b9:ab:5e:9c:c1:5e:f5:4f:09:ff:1c:4f:40:19:
d2:76:97:11:11:c6:da:b1:09:c6:ab:de:93:3a:f4:
9e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:94:47:24:D7:C7:67:93:3A:54:F3:05:45:06:88:04:54:4C:B3:4E
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/IpRHJNfHZ5M6VPMFRQaIBFRMs04.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.6.0/24
Signature Algorithm: sha256WithRSAEncryption
26:ac:56:38:31:5e:11:87:70:b3:3d:11:ec:b5:6e:11:06:81:
41:90:38:ee:7c:27:70:83:7c:68:68:4a:33:5a:92:f6:26:d4:
60:f2:1b:f0:c8:42:68:77:07:98:32:4f:72:e1:1f:76:dc:c4:
86:f6:05:45:13:a4:79:43:fc:13:7d:6f:b9:f3:10:80:a2:68:
87:6c:bc:53:23:ef:c1:9b:ce:66:eb:79:1e:f0:79:36:e0:17:
ec:b2:19:ea:09:bc:f9:51:5b:d3:54:23:6f:1a:eb:5e:67:ea:
d5:b4:4e:6b:da:8e:14:c2:87:ee:d1:52:16:49:ca:fd:6f:95:
84:9e:33:f3:5b:1e:71:b0:7d:5b:8c:2f:fe:fe:ce:6b:3e:bb:
be:f6:d8:f7:32:fa:87:51:d7:72:86:5c:73:c0:22:96:df:ae:
c2:f4:53:fa:4d:c8:cd:e6:bc:31:c3:f4:66:46:10:5f:dc:bb:
64:43:24:1e:19:4d:42:32:39:d8:53:89:77:f8:84:d3:c7:6c:
c5:d9:52:08:fc:01:72:01:8f:e7:0d:98:2e:b1:1b:51:8b:1a:
81:67:64:b4:b2:99:f0:20:c8:ee:91:d8:84:9f:b7:5d:2e:ff:
8b:89:e2:b0:17:e9:3c:c9:24:a7:f8:42:86:fd:1c:ac:28:7a:
cf:8d:c6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org