Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/SV7G_yCCLvB7Lo6Tn8nJ3mSCMrs.roa
File: SV7G_yCCLvB7Lo6Tn8nJ3mSCMrs.roa (raw, json)
Hash identifier: k/kCudZrFBR1nhaImFNIZRT6FbW5Qw6bKuLTC2iMowk=
Subject key identifier: 49:5E:C6:FF:20:82:2E:F0:7B:2E:8E:93:9F:C9:C9:DE:64:82:32:BB
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 45AE
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/SV7G_yCCLvB7Lo6Tn8nJ3mSCMrs.roa
Signing time: Sat 02 Apr 2022 00:30:06 +0000
ROA not before: Sat 02 Apr 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17838 (0x45ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 2 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=495EC6FF20822EF07B2E8E939FC9C9DE648232BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:29:20:2a:b4:54:05:e3:cf:11:0c:ab:20:85:
4b:0d:5f:1a:3c:c5:26:0e:a4:4a:e9:c0:35:23:85:
24:8c:e0:15:95:e8:7e:8c:d4:51:9c:86:86:51:f2:
0b:5f:50:ed:a7:0b:8b:24:e7:61:93:08:f8:83:aa:
4e:3d:4a:58:17:75:1e:32:d9:5c:47:a9:6d:37:f9:
be:81:e4:05:0c:d4:13:18:02:e2:fd:2d:36:6c:b1:
e0:cb:64:b5:b0:fc:1c:8b:4b:7f:4a:c5:1e:47:ac:
5c:da:1b:48:66:3d:b6:30:eb:dd:0c:ce:2c:0c:72:
70:1c:cc:79:d8:cb:e7:55:81:17:67:16:16:69:d1:
20:0b:e7:9f:c4:7c:19:8f:85:b7:40:cf:1b:b2:de:
35:68:35:4e:63:97:0f:d3:8b:29:1c:eb:56:62:c5:
09:b6:48:77:40:3b:75:33:5e:81:8f:34:3e:c2:86:
0b:23:7e:f1:7a:94:a5:d6:89:c9:5b:95:6c:4e:cc:
4d:6f:ce:2e:f4:47:b9:80:02:56:72:8c:3b:7c:21:
ff:41:42:f9:4b:f4:6d:53:ab:ce:7c:a7:4e:e8:c7:
90:06:1a:2b:29:7e:16:58:87:20:43:2f:a8:b0:5d:
62:53:8e:3b:7d:30:cc:f5:1d:01:84:33:c7:b8:d3:
0b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5E:C6:FF:20:82:2E:F0:7B:2E:8E:93:9F:C9:C9:DE:64:82:32:BB
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/SV7G_yCCLvB7Lo6Tn8nJ3mSCMrs.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:c2:64:b3:8f:81:ea:f5:d7:e5:9d:bd:2a:e9:f0:6d:87:02:
ab:cb:55:73:b9:7b:97:24:ec:41:40:00:e7:f0:45:87:cd:0e:
2b:a5:39:eb:f8:2b:a2:58:1a:44:9b:90:8b:5a:6f:a1:72:c4:
c1:03:6d:a6:79:49:a8:58:01:61:56:d7:7f:99:5f:5c:81:5b:
fd:8c:a9:30:db:d5:4c:1d:1f:e6:21:d5:3b:7c:e9:e8:7b:f4:
e2:77:b7:52:c3:dd:0f:18:18:40:36:0e:f3:a2:a1:5e:2f:02:
5e:6c:99:5b:6e:bf:9f:bc:43:30:47:10:11:5a:5c:b7:c1:01:
3a:33:57:3f:4b:43:53:25:43:f8:53:7a:e7:76:43:b8:2b:d6:
74:18:d9:66:9e:b7:b9:7e:ce:1d:02:3f:e6:b2:0b:4d:76:f2:
5c:a6:e6:a4:bc:04:e4:59:10:cd:19:8d:5d:3a:71:c9:43:0a:
46:d5:95:40:42:b9:81:22:c6:ae:2b:1f:5b:11:35:02:8b:ec:
14:1b:79:33:13:e9:71:1c:18:a4:74:77:91:de:31:58:09:13:
6a:20:19:0b:b0:69:38:09:91:8a:1b:62:78:24:d4:47:9b:62:
a7:79:ff:9e:77:8e:59:37:80:a9:df:27:7d:e2:1e:78:5d:b1:
66:54:92:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org