Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/T9IlS2f5RM-FFvFl6AGaqlDHxMM.roa
File: T9IlS2f5RM-FFvFl6AGaqlDHxMM.roa (raw, json)
Hash identifier: i6YUgmWv4v1sF0ysP2k0orl7uQUOgSTjSTCcGIrUWzI=
Subject key identifier: 4F:D2:25:4B:67:F9:44:CF:85:16:F1:65:E8:01:9A:AA:50:C7:C4:C3
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 46AD
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/T9IlS2f5RM-FFvFl6AGaqlDHxMM.roa
Signing time: Wed 20 Apr 2022 00:30:06 +0000
ROA not before: Wed 20 Apr 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18093 (0x46ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 20 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=4FD2254B67F944CF8516F165E8019AAA50C7C4C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3d:05:00:f4:1f:57:5b:ec:7d:89:b6:bc:c7:
60:f7:f2:93:86:7f:f3:8e:3e:00:20:1b:69:88:c9:
9b:15:b0:0c:a9:6e:a7:e2:40:d9:b6:ef:ad:c7:1d:
ea:49:e1:4b:30:cd:51:4c:24:ed:73:95:12:4f:6c:
b3:e3:3b:8c:ef:59:79:b4:07:67:ec:c1:9a:44:00:
bd:a7:41:49:83:bf:68:a2:c4:32:88:e4:13:da:12:
7d:3e:fa:d6:aa:c1:4f:ba:4f:e3:89:db:50:fa:4d:
59:7a:e8:90:9c:8b:f2:89:46:a0:40:aa:bd:7f:50:
e9:37:f8:1e:f5:27:f6:41:e3:0f:38:28:68:e0:a8:
a3:32:b5:0f:66:3e:ad:c9:f9:61:27:35:c2:89:f5:
4b:a1:8c:5f:a5:36:c1:6c:1c:9d:03:84:3d:22:35:
04:9d:c1:d6:2d:46:40:64:ac:12:42:98:70:44:76:
5f:54:09:da:3d:d7:7e:91:05:eb:75:a0:fe:e4:9f:
46:44:49:2a:79:01:b0:e6:ce:87:66:71:1d:77:02:
9e:2f:ea:a1:96:6f:2c:e0:62:0c:49:71:9e:8b:56:
78:73:cd:8f:10:61:e2:7a:82:f7:c7:36:60:db:57:
c7:32:a3:81:95:83:81:0b:96:06:42:c0:b4:32:a4:
03:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D2:25:4B:67:F9:44:CF:85:16:F1:65:E8:01:9A:AA:50:C7:C4:C3
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/T9IlS2f5RM-FFvFl6AGaqlDHxMM.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:2c:45:a3:d3:93:c9:67:bd:a7:94:80:ec:04:28:b3:07:8c:
c7:b6:89:dd:5a:87:5e:8c:17:ba:03:b8:5f:a0:6e:1a:89:c9:
fa:60:28:ac:3f:94:c2:c4:8e:0e:60:6e:7b:eb:20:80:b1:3c:
9f:b2:27:b7:d8:dc:24:e2:64:18:51:c3:64:91:58:1d:33:5c:
f9:33:25:f2:9b:19:94:45:7d:b1:58:aa:eb:48:b9:6d:4d:6f:
03:a8:1e:f9:26:30:f2:e3:44:89:6a:42:91:6f:cc:52:44:43:
2b:3e:58:66:2b:47:c0:50:0e:00:22:d2:cb:f8:20:e1:bf:5c:
fc:36:73:61:bb:f4:27:61:a5:dd:ec:83:97:da:7b:e9:ec:4b:
28:b4:9b:d4:fc:3b:fc:95:7d:18:72:58:14:fd:17:ca:5d:d8:
3c:1f:e0:6b:0d:43:c9:77:31:33:e1:7d:bd:62:09:8a:ac:8e:
62:ed:14:cb:88:3e:bd:21:f9:77:00:6a:ae:00:06:27:31:48:
d0:0c:14:5f:13:ae:42:61:10:3a:c6:8c:9d:80:78:47:2a:ed:
85:7d:44:3f:51:5f:e2:f0:66:0e:1b:5e:3e:b3:76:57:9b:7c:
a1:2a:5f:2c:c3:75:40:b3:28:a9:62:bf:49:a6:99:30:9c:92:
d5:ef:4e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org