Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/MBuZmYSjXFWR7T1cePF_m4dANEc.roa
File: MBuZmYSjXFWR7T1cePF_m4dANEc.roa (raw, json)
Hash identifier: LWN0Y+Wktdw1hDT+xQryDTRwStPTOvkqMtP6SpGbN5s=
Subject key identifier: 30:1B:99:99:84:A3:5C:55:91:ED:3D:5C:78:F1:7F:9B:87:40:34:47
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4541
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/MBuZmYSjXFWR7T1cePF_m4dANEc.roa
Signing time: Fri 25 Mar 2022 00:30:08 +0000
ROA not before: Fri 25 Mar 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17729 (0x4541)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 25 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=301B999984A35C5591ED3D5C78F17F9B87403447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:72:7e:c0:7b:f9:19:81:3e:17:1c:4d:bf:58:
23:6e:13:dd:6c:a1:b6:2b:28:c7:ff:39:ff:f8:14:
a0:54:f9:e5:1f:32:78:62:ad:a3:c3:78:fa:3a:51:
1c:46:01:6b:43:f2:37:4d:a8:c0:90:30:6a:1b:d0:
26:ea:a3:d3:fb:7a:61:1f:4d:76:6d:f4:91:68:76:
4c:1a:44:31:59:db:e4:53:76:03:ee:68:9d:4d:e9:
d2:aa:b4:2d:08:fb:83:db:f8:09:ce:aa:a8:a4:3d:
28:12:b0:0a:9f:e9:6b:ea:ab:b5:b1:de:64:86:e9:
c2:e8:78:d7:a5:eb:09:ec:9f:93:b1:c1:d0:1a:fd:
d6:f8:95:6c:45:47:ab:22:dc:3a:ea:aa:2b:09:7f:
0b:71:88:51:e5:e7:d4:ed:d0:02:08:91:a2:58:c1:
be:99:bd:f9:02:3b:35:f4:75:11:fe:c9:c4:e5:38:
9f:46:69:cb:d3:1e:23:d5:1f:95:8c:d3:cb:8e:7c:
b2:0c:28:70:65:5b:61:25:e5:8a:d2:01:70:72:7a:
a1:d8:52:77:1e:95:f6:b3:d4:b0:74:f8:ee:c9:90:
73:9d:d9:62:36:ed:b6:c7:f1:60:ff:30:20:86:87:
5d:ec:ae:77:61:a4:82:a7:1e:e5:5d:88:87:8e:fc:
3f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1B:99:99:84:A3:5C:55:91:ED:3D:5C:78:F1:7F:9B:87:40:34:47
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/MBuZmYSjXFWR7T1cePF_m4dANEc.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:69:b0:28:d0:68:ed:c5:62:8e:d1:9e:ab:8c:9a:c8:72:64:
6f:d6:14:d2:28:c3:8e:0e:31:a6:c1:05:78:97:91:1a:f0:11:
b4:f5:a6:53:d6:e5:19:9a:1e:c3:df:b0:a3:35:0a:33:c2:7c:
bc:6a:8d:1d:3a:91:a1:f7:15:2b:20:d5:c7:49:39:8d:cd:7d:
06:82:1b:7d:f5:f3:d6:ad:49:9c:37:cb:bb:ca:6e:13:42:0a:
2f:07:ed:fa:9e:05:1d:39:54:99:aa:6b:ed:8c:ce:63:2e:6f:
05:3d:32:98:4a:5d:b5:a4:f0:a7:1e:61:7b:bb:00:1b:bf:aa:
90:93:57:3a:a4:a3:13:3b:80:cb:38:51:78:07:a7:a9:12:95:
32:dc:b4:56:ce:67:b0:ee:23:68:0f:22:ed:77:9c:21:f6:80:
be:83:6b:91:46:65:97:ee:0d:86:70:9e:e1:3c:8a:74:63:46:
9e:4f:86:49:f1:95:73:f0:99:6e:0f:75:3f:ba:ff:64:3e:c8:
4c:68:83:8a:a8:b1:21:71:00:1c:65:03:bc:99:7e:dd:9c:a5:
dc:d6:17:31:4c:e1:24:21:a8:c8:fc:e0:b1:f4:e5:24:d3:02:
c0:e2:c8:69:7f:e6:96:d0:18:b3:ca:51:7f:1f:8f:6f:13:32:
3f:95:83:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org