Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/Yuzsa9688m_zltvvVpgyk1IYN_c.roa
File: Yuzsa9688m_zltvvVpgyk1IYN_c.roa (raw, json)
Hash identifier: ObE3bHqbiYxEgSUM0gFuscn027nocA1Foxc3/Ucbnqs=
Subject key identifier: 62:EC:EC:6B:DE:BC:F2:6F:F3:96:DB:EF:56:98:32:93:52:18:37:F7
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 49D2
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Yuzsa9688m_zltvvVpgyk1IYN_c.roa
Signing time: Mon 13 Jun 2022 00:30:09 +0000
ROA not before: Mon 13 Jun 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18898 (0x49d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 13 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=62ECEC6BDEBCF26FF396DBEF56983293521837F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:93:47:fa:c1:8b:9e:a3:68:7e:27:8f:64:6e:
1b:ea:79:64:ef:b7:10:34:b1:67:dc:6a:3b:86:ba:
8d:4d:ac:f2:85:1a:c7:60:02:89:28:fb:7b:a4:51:
e4:c5:d7:95:f4:66:77:7c:05:31:6b:16:a3:74:96:
41:70:a7:a1:6f:45:cd:be:a9:4f:43:58:12:74:12:
3d:ae:e1:23:bf:7b:bc:9e:43:e3:60:46:78:9a:18:
2f:77:d9:53:54:c1:20:6b:0c:44:63:90:fd:47:ad:
c0:a5:4c:3b:fc:27:fc:3a:24:a8:de:b9:25:5b:82:
56:82:18:48:37:9e:89:19:b2:51:ca:51:79:6b:de:
b9:3d:b3:34:0d:a0:df:30:5f:73:48:12:c9:ea:01:
38:8d:7b:02:01:d3:5e:8e:e0:cc:57:ff:a9:ec:34:
0a:f8:e0:99:f6:f8:41:7b:89:fe:bc:74:2f:d3:87:
50:f0:d5:15:2e:ca:e7:c4:f0:56:1b:f8:0a:08:77:
15:c7:a2:44:4a:20:0a:b5:dc:11:03:b3:5b:80:ad:
0d:e8:02:0c:3e:63:15:af:0b:90:d0:0c:bd:e0:c2:
2e:4f:2b:11:66:a3:99:af:33:d4:87:1e:03:c4:45:
51:37:ea:f5:35:cb:30:5e:39:19:ec:0d:18:84:6e:
b2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:EC:EC:6B:DE:BC:F2:6F:F3:96:DB:EF:56:98:32:93:52:18:37:F7
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Yuzsa9688m_zltvvVpgyk1IYN_c.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
49:e6:ab:32:8e:4f:d7:25:41:9c:1f:6d:21:c4:da:e1:17:a5:
4f:c9:5e:66:ec:24:9e:c6:91:9f:f1:78:98:12:30:3c:c4:e8:
da:18:3a:ee:6a:d9:73:64:aa:3e:0a:1f:52:1e:27:a2:50:86:
0d:ac:bf:f8:30:87:63:73:92:0d:9c:ed:b4:ee:33:c4:46:da:
b3:25:42:44:47:ee:dc:43:27:b8:84:16:98:dd:07:ce:18:11:
e0:4d:a7:9b:14:14:a9:e3:d6:09:36:21:80:5e:a1:06:cc:ee:
eb:6a:58:b8:81:7f:9b:61:a9:04:e1:0f:ae:8b:b3:89:7f:60:
d7:26:36:c8:02:15:61:15:f6:da:6e:73:91:41:85:68:f3:32:
ca:76:6d:d9:07:6c:bc:e0:ad:bf:19:b5:90:cf:1e:01:ae:2b:
65:39:38:30:59:32:10:f5:33:09:dc:c2:b1:ef:58:26:7b:c3:
f1:37:a9:c9:2d:bb:91:6e:18:e2:82:03:9c:75:1e:69:7b:eb:
4f:38:69:16:09:50:a6:f8:9d:2d:81:16:aa:8a:9c:2d:85:b9:
bd:ac:f4:65:7e:b4:1c:57:d8:c2:22:9d:90:ef:d3:8f:6a:17:
66:53:25:a2:3e:39:be:a3:6c:b3:78:e7:e7:a6:89:f1:db:74:
d6:ea:2f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org