Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/RkMVS6JpSGJF_cLoB0iwqhnf8X4.roa
File: RkMVS6JpSGJF_cLoB0iwqhnf8X4.roa (raw, json)
Hash identifier: /nMMTtAnFN1+gbn7vfYst0x2cp/XnCCtpfybDUt/zps=
Subject key identifier: 46:43:15:4B:A2:69:48:62:45:FD:C2:E8:07:48:B0:AA:19:DF:F1:7E
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 473D
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/RkMVS6JpSGJF_cLoB0iwqhnf8X4.roa
Signing time: Sat 30 Apr 2022 00:30:11 +0000
ROA not before: Sat 30 Apr 2022 00:30:11 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18237 (0x473d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 30 00:30:11 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=4643154BA269486245FDC2E80748B0AA19DFF17E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6a:e7:17:82:c2:d7:70:2b:43:e0:81:c3:04:
63:40:3d:ad:85:2c:56:7b:5a:93:15:6b:49:34:9a:
cd:7b:b6:a0:86:40:77:57:61:d9:c9:fc:83:6e:c7:
3e:a7:9d:de:64:f0:89:80:86:20:90:e4:19:27:1f:
31:ad:b0:8c:5c:52:36:c4:fa:ee:ba:4e:c3:a1:84:
90:37:47:e9:c1:d0:b1:9a:68:9f:1a:8a:e4:e1:b1:
8e:4f:9c:06:1c:c1:9e:82:56:94:fe:68:21:68:85:
5c:28:1d:da:04:85:7b:62:86:89:66:2b:0f:ec:83:
ff:f5:e6:20:11:72:29:39:43:20:56:bd:ed:9a:da:
14:76:59:a2:7e:2c:b1:2b:75:cb:da:2f:1e:19:01:
6a:cc:b3:50:23:33:4d:da:29:6d:65:fe:1f:f8:2a:
57:0a:fc:9b:d6:90:22:13:25:1d:e8:f2:a9:3a:fb:
40:81:2b:4b:f7:26:f1:39:f6:18:de:58:2a:c7:48:
63:6c:fe:bd:04:90:90:0c:4f:e4:60:d7:3c:9f:26:
74:dd:41:e6:d8:3e:db:6f:54:5a:3b:f0:d8:cc:aa:
62:dc:07:08:06:0b:fe:fb:90:10:84:52:26:38:8d:
11:af:87:bc:07:9d:1d:8c:66:ef:85:2f:38:df:c5:
01:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:43:15:4B:A2:69:48:62:45:FD:C2:E8:07:48:B0:AA:19:DF:F1:7E
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/RkMVS6JpSGJF_cLoB0iwqhnf8X4.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
54:59:7d:2d:d1:57:9a:59:f0:96:87:6c:f2:20:39:e1:64:ab:
6d:ab:88:df:30:d5:11:ff:69:5e:b8:13:18:8a:6f:67:b6:70:
ff:78:c5:ad:a0:e4:d4:e7:cc:ac:09:f8:1c:db:56:08:e4:08:
ce:33:67:b9:86:b2:c5:cd:cc:9f:23:17:c9:b9:8b:ed:bb:df:
67:f9:c8:ef:a4:4f:37:6d:b6:3e:d8:1a:0b:c9:24:78:f1:36:
c7:dc:af:54:a0:bb:7e:c0:84:94:f0:46:e4:bc:72:c7:d7:ed:
60:cb:b8:35:ff:24:7a:39:63:2f:83:3c:58:10:8a:07:90:6a:
e0:5e:48:84:35:44:db:75:ca:31:cb:30:5e:0b:e7:3f:1d:89:
56:c1:f9:f4:83:14:eb:d2:61:7a:9e:af:bd:d2:f0:3b:08:e2:
1d:6c:29:54:32:e5:41:fe:bb:18:21:bc:a0:2e:00:37:65:bb:
e9:b1:b4:9a:cd:8e:8a:88:18:00:38:4a:2a:95:a1:d7:db:96:
e2:d5:f2:43:c9:26:11:39:a2:09:fd:8f:8b:a7:35:22:78:6b:
8e:86:55:f0:3d:cf:48:aa:ae:a3:1b:1d:2a:89:3b:c4:1f:cc:
3f:85:00:ce:80:e7:c0:f5:ec:15:83:e8:f2:ac:19:c6:c8:8b:
a5:ff:83:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org