Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/axxqQcTHq-_cqXUsXyayxidJmL4.roa
File: axxqQcTHq-_cqXUsXyayxidJmL4.roa (raw, json)
Hash identifier: bY3e9uVtIpmhQZy/6fk3QUQyg2XfNXnJuA/YFMxUfUM=
Subject key identifier: 6B:1C:6A:41:C4:C7:AB:EF:DC:A9:75:2C:5F:26:B2:C6:27:49:98:BE
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 42F1
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/axxqQcTHq-_cqXUsXyayxidJmL4.roa
Signing time: Thu 10 Feb 2022 00:30:10 +0000
ROA not before: Thu 10 Feb 2022 00:30:10 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17137 (0x42f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 10 00:30:10 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=6B1C6A41C4C7ABEFDCA9752C5F26B2C6274998BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a3:ed:22:a2:be:01:d6:97:5f:c1:39:98:7a:
95:f4:87:91:cc:fc:d4:57:8e:19:7e:8e:7d:e0:8e:
5b:88:ce:b8:2c:9d:21:ac:89:fa:d1:f4:75:70:c0:
cd:85:db:84:f8:c2:d3:c2:9f:44:2a:18:a6:2e:a7:
9e:57:18:1f:e8:11:c4:6a:3c:e8:75:79:f0:d0:17:
ca:58:04:49:a0:6a:6e:05:ff:f8:e1:8b:2c:52:e7:
71:2d:90:ed:5e:66:ff:2e:10:42:56:ff:79:ac:eb:
b1:87:4d:94:ff:00:81:b1:ac:20:67:73:c3:2e:7e:
c4:0a:5b:03:1d:a1:57:2c:a5:97:06:5f:1d:cf:75:
34:9b:20:01:a9:83:97:47:69:a0:d2:d8:83:2c:18:
4f:d4:83:58:20:aa:3e:99:07:dd:29:f7:2c:1d:89:
15:98:7f:89:3f:24:42:83:41:de:b9:91:4f:6e:02:
00:48:34:c3:92:85:21:05:de:ad:df:f0:eb:e6:5b:
30:22:02:f8:47:c4:83:8f:9b:45:02:69:e5:59:c5:
d7:48:98:04:c2:8d:90:1f:22:f5:00:ac:49:72:9e:
0c:f7:d1:f5:ec:98:d7:9d:f0:cc:b8:4a:f0:6b:0d:
ce:71:e0:fd:91:b3:d1:03:48:23:8b:16:3d:f0:33:
73:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1C:6A:41:C4:C7:AB:EF:DC:A9:75:2C:5F:26:B2:C6:27:49:98:BE
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/axxqQcTHq-_cqXUsXyayxidJmL4.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
71:3b:26:41:ca:82:51:cd:b9:97:7e:bd:cc:3e:a6:87:40:f8:
61:fa:ae:11:f7:8c:c9:f2:98:a6:0f:d6:92:10:d9:72:5c:ad:
4f:42:03:e6:d6:6a:25:12:f7:92:ce:13:31:21:dd:fd:c3:34:
c3:a3:3d:4c:c9:92:77:ae:73:35:a7:e5:ff:eb:8c:39:a5:9d:
32:b0:3d:6c:a1:11:44:1c:71:46:86:9f:80:bc:91:5f:55:2f:
85:06:97:b5:06:2e:75:68:5f:2f:eb:20:92:2b:8c:0e:91:e5:
9c:6a:e5:95:f5:ac:4c:e4:cf:c2:99:f0:26:67:da:be:fc:44:
73:35:4d:fb:96:40:b7:d3:41:dd:c6:ad:f5:fa:94:08:33:a7:
a3:ee:9a:73:b6:d9:9c:65:47:3d:f4:f1:d8:7d:c4:32:91:d7:
a4:30:91:50:0b:e8:c3:55:c1:88:ba:0c:54:27:b0:a1:e8:bb:
d6:b6:11:ca:15:69:5b:b5:4f:44:9e:28:af:bb:89:2d:a1:50:
c7:6b:0c:a1:9c:cc:19:c7:8d:10:95:2e:35:05:9e:2f:90:5f:
92:bd:f2:1d:f2:bb:87:97:a3:a6:d0:3a:74:fe:61:8d:b4:ae:
6d:85:6b:72:4c:b6:85:cb:fe:f1:fe:80:64:23:a3:29:e5:3e:
c3:2e:a5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org