Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/SOXmXV9P31pwHW7NWsF0dyYM7cI.roa
File: SOXmXV9P31pwHW7NWsF0dyYM7cI.roa (raw, json)
Hash identifier: FNOfkcrup4q/plg27vi+aoEzInTmS+MesCCyrwdRFj4=
Subject key identifier: 48:E5:E6:5D:5F:4F:DF:5A:70:1D:6E:CD:5A:C1:74:77:26:0C:ED:C2
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 48F1
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/SOXmXV9P31pwHW7NWsF0dyYM7cI.roa
Signing time: Tue 31 May 2022 00:30:10 +0000
ROA not before: Tue 31 May 2022 00:30:10 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18673 (0x48f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 31 00:30:10 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=48E5E65D5F4FDF5A701D6ECD5AC17477260CEDC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:65:8d:a9:ea:ce:74:3a:3c:9f:58:dc:23:20:
90:a8:82:1d:ea:6f:06:e8:f9:4a:4d:b7:48:66:b6:
69:b2:44:d7:b9:84:9d:48:f9:67:18:95:42:89:84:
c6:1e:f1:fc:02:03:20:f3:74:8c:0d:c1:4c:ac:cd:
39:b1:6f:2a:c0:73:fb:03:73:e8:1b:5f:e7:23:16:
e4:36:54:5d:6a:4b:9f:58:1d:bf:2d:f9:2d:72:74:
61:7d:86:b0:f3:b7:16:e6:c5:9d:cf:2a:b4:4a:d7:
99:2d:ce:94:41:40:fb:c5:bc:03:c3:7e:d5:81:e3:
dc:16:b8:56:56:1a:db:1e:64:ec:ab:80:83:9f:50:
37:2a:75:8a:8d:0f:18:c7:c5:9d:eb:8d:86:7b:5e:
c6:bb:8b:17:58:50:16:1d:76:06:e0:41:9c:8d:b2:
c0:ba:50:f1:d5:ba:42:65:9c:79:67:ae:97:98:cf:
c9:b2:e4:74:33:a4:d1:35:72:1e:75:83:8f:67:d9:
36:e0:18:d6:28:9e:83:62:54:b9:c0:4e:a4:9f:e2:
29:fe:b6:ee:7d:c5:90:04:80:f1:9a:b7:89:54:91:
de:36:44:95:80:aa:98:08:ed:b4:2a:ae:b4:bb:d4:
2a:38:6e:7c:5a:9c:c0:bc:fb:bd:e1:b2:37:35:0b:
03:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E5:E6:5D:5F:4F:DF:5A:70:1D:6E:CD:5A:C1:74:77:26:0C:ED:C2
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/SOXmXV9P31pwHW7NWsF0dyYM7cI.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:fd:5f:08:d2:a0:ba:eb:5f:61:aa:8d:42:95:29:42:2b:02:
54:6c:a2:65:53:c6:be:bc:a5:54:3f:89:7f:23:94:d5:cf:7c:
05:45:72:7e:54:98:c1:cc:bc:f0:66:b1:5a:98:c7:93:eb:cb:
57:83:c0:19:ff:22:5e:de:d6:39:49:21:0c:2f:fa:8d:3a:91:
34:79:8b:50:1b:69:aa:c4:1c:04:46:42:52:ca:2a:ae:af:8e:
66:e0:08:80:49:16:67:dc:ac:d0:eb:29:0c:ce:c5:de:e8:c9:
af:51:4a:27:c6:cc:3d:fc:be:4b:22:8a:7f:93:33:57:74:bc:
90:77:d8:dd:53:79:43:b1:2d:fc:b6:89:e9:ae:67:45:b3:f5:
0c:04:23:e3:c3:b0:ce:c8:d8:87:63:e3:fb:45:6f:a3:bc:f6:
ae:01:bc:03:c7:e6:93:b8:49:01:bb:e4:24:ae:bf:d1:20:8f:
76:36:d7:68:9e:43:08:09:31:fd:51:f6:69:b1:9e:1d:5e:d9:
b7:69:af:3a:70:a2:ff:b6:41:b5:10:ff:aa:54:e3:a5:a2:33:
57:a9:5d:04:3e:95:98:6c:f9:11:f9:09:2d:f8:95:e5:4e:52:
10:cf:df:9a:1b:9f:ed:3c:4e:97:ed:0f:31:56:0c:14:01:ea:
77:6e:3e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org