Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/cvHtkGvg7LVBF1Sc1AHEbdBUVBI.roa
File: cvHtkGvg7LVBF1Sc1AHEbdBUVBI.roa (raw, json)
Hash identifier: +bnTPL9ITH0sujB13pBkL0gD4z4d2sGL5oAp9/fPyzY=
Subject key identifier: 72:F1:ED:90:6B:E0:EC:B5:41:17:54:9C:D4:01:C4:6D:D0:54:54:12
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4442
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/cvHtkGvg7LVBF1Sc1AHEbdBUVBI.roa
Signing time: Mon 07 Mar 2022 00:30:08 +0000
ROA not before: Mon 07 Mar 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17474 (0x4442)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 7 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=72F1ED906BE0ECB54117549CD401C46DD0545412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1e:35:3e:23:a9:85:fe:be:9c:a1:db:93:d1:
a8:7d:66:0f:8c:3c:3a:96:6a:d7:e6:0d:c2:37:4a:
bc:40:98:1a:64:3b:49:5d:10:06:1c:e5:b5:a9:dd:
1d:99:a2:13:e0:5b:7f:48:b8:a5:3b:06:7b:cb:40:
00:b5:fb:77:08:fa:4b:fd:0b:38:72:c0:3b:26:c1:
04:15:1e:8e:35:7c:d2:b0:f8:9e:0a:ab:50:3d:9a:
16:ab:b0:ea:ac:52:76:c0:9a:ef:35:9c:86:9b:15:
dd:b5:6b:c1:7e:f4:ba:7e:99:be:98:5c:a0:ff:ad:
99:e6:80:68:1a:39:9c:db:8f:dd:48:96:03:80:f5:
03:10:98:d0:53:f3:d7:a2:2e:c4:89:dc:cc:1a:4b:
59:4e:99:5c:da:67:91:00:be:14:1a:2f:87:89:fa:
b8:01:87:d7:3b:e7:67:2d:a4:e8:94:ea:02:f1:ce:
bd:44:9e:1a:2d:27:59:5a:14:ef:ea:4a:73:77:34:
ee:94:c0:49:f9:10:cd:5f:43:57:ca:73:d1:40:41:
33:e0:72:1d:c1:c0:06:4f:b4:dd:eb:1c:3a:20:d1:
fb:58:52:c4:d4:f3:a1:d6:06:16:f0:91:77:90:d2:
5e:76:c8:7e:c5:cf:2d:11:fa:b0:24:d8:f9:4e:7a:
fd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F1:ED:90:6B:E0:EC:B5:41:17:54:9C:D4:01:C4:6D:D0:54:54:12
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/cvHtkGvg7LVBF1Sc1AHEbdBUVBI.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:fa:39:69:d0:bb:8d:6e:e6:54:68:ec:dd:0e:7f:74:be:fa:
bc:23:19:22:ac:ac:7e:a3:88:01:00:94:bd:1d:02:79:25:e0:
d0:20:2e:59:1c:05:5f:d9:53:e9:25:17:5b:cc:b1:ad:30:3f:
a4:8e:3a:12:84:8e:29:e8:b8:9f:6a:91:67:3c:8b:6d:b9:90:
d5:d8:93:e9:51:37:c8:8a:8b:f0:04:6f:07:c9:0f:22:d8:65:
d7:9f:67:a7:4a:b1:17:7e:46:b0:b4:74:eb:92:2e:c3:d2:c7:
88:96:67:5e:0e:3f:34:f3:ee:63:71:c7:d5:0e:47:15:d5:6d:
b8:c7:26:98:26:fe:1b:54:9a:c8:cf:7f:3d:db:dd:7a:4c:48:
2c:01:03:98:1a:7a:39:fe:f9:c8:ba:b0:e5:d9:73:4a:a4:21:
91:28:db:cd:60:e5:68:f8:d6:b7:d4:e7:51:3d:bb:73:29:b2:
9f:e1:14:80:51:98:e3:50:a0:07:af:c5:61:3a:3e:aa:b9:24:
5e:0c:98:da:5f:00:fc:64:2e:dc:78:00:e8:c1:0e:46:91:e8:
cd:0c:32:f4:d8:06:7b:0d:d9:63:1e:3d:7c:83:1f:e7:47:d0:
30:ec:af:41:37:05:3d:1a:01:16:56:fa:52:af:71:09:13:5a:
d5:33:16:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org