Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/LyNCq2rQron3R5UV0Ge4xLJrIiI.roa
File: LyNCq2rQron3R5UV0Ge4xLJrIiI.roa (raw, json)
Hash identifier: S9s3Wb3RyX/sjvYFOH/3/hRwuWaqI8asGsWUcshBTec=
Subject key identifier: 2F:23:42:AB:6A:D0:AE:89:F7:47:95:15:D0:67:B8:C4:B2:6B:22:22
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 49C0
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/LyNCq2rQron3R5UV0Ge4xLJrIiI.roa
Signing time: Sun 12 Jun 2022 00:30:07 +0000
ROA not before: Sun 12 Jun 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18880 (0x49c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 12 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=2F2342AB6AD0AE89F7479515D067B8C4B26B2222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:01:c7:a5:d7:a8:6f:78:92:b1:70:c3:c3:50:
58:16:4d:db:d8:26:49:43:8e:2b:6f:8f:1b:1b:38:
62:20:c1:15:45:54:49:50:e0:03:fc:f7:a0:79:42:
64:60:52:d9:ca:0b:b2:66:2d:0d:10:90:e4:46:8a:
82:69:2a:3a:48:9a:f8:8c:a3:22:c5:ff:ee:10:90:
5d:83:fc:90:20:2a:37:19:9d:0e:2d:89:44:73:7d:
21:22:21:0a:c4:8b:82:ce:03:10:18:4f:4d:4b:83:
81:9b:02:fe:41:1e:0f:fc:d4:5e:9a:aa:f4:89:81:
26:d8:7e:70:92:df:be:01:83:5d:7a:1e:5b:1b:13:
5d:19:c6:d5:08:d7:77:f6:da:d4:e9:fd:72:cb:81:
2f:b1:1f:ce:e6:22:ae:5b:7e:96:06:17:dd:93:dc:
0e:79:dc:9b:e1:13:88:8a:4d:b4:14:05:e7:ae:25:
44:0b:27:f2:ee:cc:c6:2c:ef:0a:91:66:5b:99:2f:
7a:c7:ba:11:dd:45:20:08:e5:e8:66:39:93:83:1c:
32:0b:bf:96:7d:66:d5:45:2c:d2:d1:45:06:68:5d:
7c:32:6b:15:48:4d:1f:b0:c9:58:6c:00:3a:4c:de:
c3:c5:d4:54:98:32:58:cf:98:48:50:4d:04:9f:40:
da:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:23:42:AB:6A:D0:AE:89:F7:47:95:15:D0:67:B8:C4:B2:6B:22:22
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/LyNCq2rQron3R5UV0Ge4xLJrIiI.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
95:60:b9:4f:ac:01:89:09:5b:1a:21:cb:5a:83:01:bd:ee:ce:
16:a7:87:ea:db:4c:b7:55:81:2d:05:45:75:ac:59:a6:13:06:
a5:22:67:ea:2b:af:a1:81:9b:5c:2d:ea:f5:68:ec:57:fc:27:
47:5b:70:be:ba:65:56:c5:c4:29:87:16:36:73:66:66:01:c4:
bf:38:34:bd:b1:80:f1:3a:01:a9:02:a1:7f:1a:39:89:72:f5:
13:b4:53:e0:27:05:1e:42:05:eb:a3:ac:07:59:6a:d0:38:a7:
48:0f:4b:56:72:1b:56:05:5a:cc:0e:05:1c:b4:85:bb:8b:79:
53:c0:34:0b:32:9e:80:cb:20:9b:5f:4d:c7:38:42:38:48:02:
4e:03:21:99:cb:ab:42:4a:78:01:30:de:62:4c:c5:db:22:16:
d2:7a:c3:1a:b9:a2:63:87:08:3f:7b:ba:8a:02:01:21:2c:6e:
b8:00:09:48:4e:0f:e1:8d:e3:aa:91:88:78:3c:e2:bb:e3:bf:
41:3b:33:98:84:d6:85:7d:fe:65:de:61:a0:8d:9f:5a:de:23:
8e:e6:f5:3f:b3:0b:3a:e6:42:3a:2d:c9:aa:b6:29:31:82:5b:
45:4e:46:42:94:7f:95:3a:9e:14:3c:13:b0:a6:e7:8c:8c:c0:
a1:f9:35:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org