Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/K6aQPBKrSTw9g3IlKGTDob1JDoM.roa
File: K6aQPBKrSTw9g3IlKGTDob1JDoM.roa (raw, json)
Hash identifier: 5HLXeVDzx7YwVBYONC4XIOfYEiPIp6XwDmb1o4ZF60Q=
Subject key identifier: 2B:A6:90:3C:12:AB:49:3C:3D:83:72:25:28:64:C3:A1:BD:49:0E:83
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4969
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/K6aQPBKrSTw9g3IlKGTDob1JDoM.roa
Signing time: Mon 06 Jun 2022 00:30:06 +0000
ROA not before: Mon 06 Jun 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18793 (0x4969)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 6 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=2BA6903C12AB493C3D8372252864C3A1BD490E83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:89:df:f8:9c:27:c8:a9:63:9c:2b:1f:b8:80:
f8:72:04:e5:30:5d:02:8b:19:f8:2d:89:a1:5d:1d:
97:36:ac:b4:85:6e:ee:0c:0e:f5:b0:fa:1b:3c:51:
44:51:d1:a8:75:9c:b8:d0:e0:e8:ff:15:1f:39:1e:
83:48:a2:5d:d4:1b:b5:2e:ac:ad:e1:f4:1a:1f:4e:
8c:b7:23:f9:b0:8b:1e:92:b3:9a:9e:24:8f:da:d2:
e6:89:7e:45:d8:e4:67:13:61:7f:69:89:0c:2f:c3:
77:67:ec:69:63:e3:1b:8c:44:d0:ff:a3:1b:28:23:
a3:fb:ff:57:7e:89:2e:ab:00:f0:57:b0:96:67:53:
51:29:43:dc:fc:8f:ce:0f:cf:83:33:34:7b:5e:05:
9d:c7:b0:5e:17:45:c3:d6:55:9a:15:44:64:47:89:
f7:80:f6:04:94:1f:66:b2:02:ca:cf:97:d7:78:e3:
3d:9e:6a:b1:26:78:b2:d2:71:67:20:c8:f5:db:2f:
0e:64:0a:4d:06:f1:bb:b9:b6:b8:8b:6a:37:bf:3f:
d3:77:e4:29:98:c6:e3:b0:61:27:12:06:37:d0:99:
0a:a0:d5:96:89:aa:2a:bf:1d:b4:41:3f:12:70:92:
5c:ea:92:1a:3b:c7:aa:38:51:bc:5b:5e:af:c5:d9:
4a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A6:90:3C:12:AB:49:3C:3D:83:72:25:28:64:C3:A1:BD:49:0E:83
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/K6aQPBKrSTw9g3IlKGTDob1JDoM.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
83:94:e5:67:56:4f:31:3a:c8:35:d1:06:73:89:b5:56:51:60:
5f:e9:64:2c:47:61:99:3c:3d:b1:e2:d4:6b:d9:72:52:31:a0:
7e:ca:0b:bc:9a:81:f9:96:7d:09:eb:38:ee:77:05:d6:34:02:
5a:58:31:46:80:f1:e5:4e:38:23:ca:09:09:fe:03:f8:d5:e3:
e7:91:62:a0:f8:0c:f7:f6:7e:0d:85:3a:7d:36:51:0c:a6:74:
12:f8:85:7c:47:17:25:a8:be:d1:77:14:b0:43:b5:ce:8d:d9:
c8:44:ca:31:13:7b:7f:9b:e4:bc:4e:26:b7:30:fa:7d:bd:2f:
34:28:ba:84:5e:bf:a7:d7:2f:01:39:36:6a:5c:f6:ca:d1:d2:
85:cc:29:a7:00:8b:08:a6:99:69:65:93:5a:ac:36:59:35:f7:
68:9d:e0:f4:d4:fa:46:ba:f1:9d:a6:95:ed:57:29:9b:56:84:
06:74:e0:46:8e:86:73:a3:24:f1:8f:3b:c7:bf:de:fd:37:4b:
4a:67:f0:55:c5:63:41:74:98:83:c7:c2:c6:26:55:d2:5e:82:
0d:d6:9e:e7:4d:9e:83:22:68:d2:12:65:9d:15:a3:ed:2a:73:
49:9b:04:c2:61:24:ca:1b:c5:bc:4d:b4:ba:6d:30:f7:12:ca:
74:d1:a9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org