Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/VubkveeH0hkkZ5p3E5ttRL7vOSM.roa
File: VubkveeH0hkkZ5p3E5ttRL7vOSM.roa (raw, json)
Hash identifier: MvvwTEvNRjq0jimcfMlI16vDdjK0H64QvcYbUhzAdHk=
Subject key identifier: 56:E6:E4:BD:E7:87:D2:19:24:67:9A:77:13:9B:6D:44:BE:EF:39:23
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 43C0
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/VubkveeH0hkkZ5p3E5ttRL7vOSM.roa
Signing time: Fri 25 Feb 2022 00:30:10 +0000
ROA not before: Fri 25 Feb 2022 00:30:10 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17344 (0x43c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 25 00:30:10 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=56E6E4BDE787D21924679A77139B6D44BEEF3923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a6:4e:8e:3f:b9:48:59:ac:a4:d6:48:aa:65:
ca:d1:e1:6a:a4:e9:fc:97:d7:03:3c:a4:1e:73:6d:
a9:c2:e5:c9:5c:21:93:b2:2c:4f:2f:2f:10:e2:6b:
59:c8:9e:ed:a4:d0:2a:40:dd:64:2b:29:99:31:3b:
1e:ed:c4:60:29:2a:c9:c3:ae:79:2c:34:01:ea:0a:
58:36:13:38:b2:39:a1:60:8b:5e:87:90:09:50:45:
fe:33:1e:5b:8c:ce:28:af:1c:b7:32:2e:5b:0c:6d:
04:4d:d8:b1:93:9c:6e:22:ce:5e:5c:e8:12:40:05:
21:f2:7e:5e:86:b2:5a:39:a1:3e:a7:24:1e:81:6d:
0f:86:59:7b:02:71:36:d4:4c:fd:93:c0:68:0c:41:
36:b3:91:6d:4e:10:65:79:88:f0:53:e1:27:04:d9:
1e:00:11:02:72:85:4b:58:9e:6c:f3:e1:3d:12:0b:
3c:e3:64:7d:9a:d0:cd:f7:b1:55:d4:4a:90:ed:39:
9c:7c:7e:03:43:d7:78:5a:96:93:78:32:4b:68:a0:
c8:f5:e0:f8:1a:7b:b4:d0:23:a7:93:5f:47:5f:8e:
a4:91:a3:87:d7:92:8c:ca:40:56:62:f4:f0:23:83:
6f:95:f2:a0:e6:82:73:ef:c2:85:c7:e0:e2:47:8d:
6e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E6:E4:BD:E7:87:D2:19:24:67:9A:77:13:9B:6D:44:BE:EF:39:23
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/VubkveeH0hkkZ5p3E5ttRL7vOSM.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
57:8a:d2:87:b7:7d:47:36:82:6f:07:54:4f:ac:d5:36:63:37:
b2:02:de:9a:a2:9b:a2:46:89:85:6d:2e:b9:b7:0a:5f:be:b7:
32:b9:6e:d0:0c:e8:ed:03:62:73:72:bd:5f:7f:2a:2e:a3:07:
16:7b:91:5c:78:9f:e3:b8:d9:d7:20:ea:4a:d3:eb:ec:db:57:
14:ea:65:27:59:c6:c6:75:8b:fa:ab:82:71:9d:96:5b:01:12:
a8:8e:57:d0:ed:a4:0d:d5:b4:86:0c:ec:43:37:d4:f6:14:23:
ff:6c:90:bc:c3:96:cf:c8:88:31:36:e5:fb:aa:67:d8:00:30:
f1:59:e1:6a:a8:82:f8:47:45:7c:b3:e2:02:11:d4:8a:4a:22:
2f:54:82:67:ed:92:2f:a8:b3:fd:85:7d:a5:6b:76:08:42:17:
de:0c:4b:53:5c:08:55:3b:33:e6:d8:50:09:67:5b:e2:ae:01:
78:aa:32:97:c9:44:37:e2:43:73:a8:e1:e0:bf:aa:d2:e2:96:
d5:c2:cb:f5:53:03:04:90:03:35:68:bb:5c:6a:e1:6c:9a:69:
bd:0d:81:83:d5:b2:70:5f:b9:df:4f:0b:69:13:96:18:9a:9f:
bf:28:dd:76:10:6a:37:d1:3f:19:0f:64:84:2b:90:5e:4e:85:
f9:48:c0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org