Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/RTZhpFqfLHvhmAPrHOtA9vcn5Xw.roa
File: RTZhpFqfLHvhmAPrHOtA9vcn5Xw.roa (raw, json)
Hash identifier: 4Hew2/GK8IheNVee6exP0zndCbPDxqcA2x5T+Oly9tE=
Subject key identifier: 45:36:61:A4:5A:9F:2C:7B:E1:98:03:EB:1C:EB:40:F6:F7:27:E5:7C
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 47E1
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/RTZhpFqfLHvhmAPrHOtA9vcn5Xw.roa
Signing time: Thu 12 May 2022 00:30:08 +0000
ROA not before: Thu 12 May 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18401 (0x47e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 12 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=453661A45A9F2C7BE19803EB1CEB40F6F727E57C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c9:e0:9c:f1:45:39:f2:3d:a9:01:af:e3:a5:
3f:39:91:6f:5d:0b:54:b9:0e:3e:d0:64:65:08:4b:
3a:cb:27:82:a2:81:ea:43:a1:12:d4:c1:8f:f9:fb:
24:be:63:f6:ee:56:f2:60:e2:86:8a:e6:67:5f:c6:
f2:67:00:44:18:07:79:e7:93:a4:9f:b6:27:3b:9f:
e0:0b:21:8d:72:5c:d4:ef:82:1f:95:db:3b:75:ed:
cb:2a:b6:c0:57:63:4b:02:1c:27:c8:d7:79:a5:e3:
e3:ec:f5:5c:e0:6d:bb:f5:7e:fa:5b:6d:48:7a:96:
16:25:af:f6:13:08:b4:f3:83:f6:cb:e4:6f:a6:14:
47:07:eb:76:0e:9c:74:79:51:03:aa:50:cd:d3:65:
21:0f:85:82:c3:1c:38:20:e7:39:cb:98:6b:a1:9a:
cd:e6:fa:f7:9c:6a:ea:6d:ed:50:ad:77:21:88:1d:
0f:96:0d:19:fd:ac:b9:dd:7f:e2:1b:ce:4c:69:9b:
f1:63:e2:08:46:47:42:ca:4f:bf:0a:59:c9:92:f7:
6f:8e:e0:fa:50:aa:25:39:ad:e0:c5:af:fa:e1:f9:
6d:b7:ed:fd:58:b0:48:19:d8:a3:08:63:71:94:2a:
5c:4d:16:e3:2d:2c:b0:7a:19:c9:61:8c:5c:d2:46:
46:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:36:61:A4:5A:9F:2C:7B:E1:98:03:EB:1C:EB:40:F6:F7:27:E5:7C
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/RTZhpFqfLHvhmAPrHOtA9vcn5Xw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:5d:4f:48:ea:2d:bb:07:7f:de:9b:94:e3:a7:16:22:06:e4:
3e:b7:4b:ae:d9:19:86:ba:5a:4e:e4:34:d7:1b:f8:35:6c:c3:
89:dc:aa:39:25:68:39:2e:20:74:56:d3:31:58:fd:09:b1:f4:
72:55:ec:22:ef:c0:8b:f8:80:f7:99:3a:9e:b4:0c:0b:0d:8f:
84:d9:6d:be:0f:27:3e:0f:da:12:fe:2d:b2:09:77:6c:74:42:
a7:5c:d8:5b:af:91:8e:d3:64:50:96:68:fc:59:58:a6:cf:65:
b7:7d:a4:be:a9:4d:ca:8e:22:af:02:3f:1e:6e:4e:70:8d:cb:
5f:3f:60:c4:19:a9:e8:53:bd:65:08:da:5f:4b:af:39:74:60:
c0:a2:6c:91:62:46:e0:e6:a4:6b:c1:91:e3:94:4b:11:ed:d5:
cb:f3:f1:89:4d:cf:e1:df:70:17:d1:7d:32:25:bf:29:42:f9:
2a:97:46:ed:46:29:85:a6:03:da:d3:c3:4a:4a:f4:df:b1:a8:
7f:dd:f4:51:c5:a5:ad:ec:b7:07:0b:d0:6e:c5:3e:77:de:73:
e6:c0:8e:f0:58:66:f2:16:25:32:8c:39:84:ea:98:64:45:cb:
77:7b:a1:8a:ef:10:d5:25:a8:ce:64:25:03:01:96:bf:94:b6:
06:05:55:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org