Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/d2Ol6orJCFYHmfQxzulz713fGPc.roa
File: d2Ol6orJCFYHmfQxzulz713fGPc.roa (raw, json)
Hash identifier: WO/If+qk3JdwqNv9bAO17waAMbmvYCrh9bu0b0zEGdk=
Subject key identifier: 77:63:A5:EA:8A:C9:08:56:07:99:F4:31:CE:E9:73:EF:5D:DF:18:F7
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4335
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/d2Ol6orJCFYHmfQxzulz713fGPc.roa
Signing time: Tue 15 Feb 2022 00:30:08 +0000
ROA not before: Tue 15 Feb 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17205 (0x4335)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 15 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=7763A5EA8AC908560799F431CEE973EF5DDF18F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:02:ca:bf:98:7e:79:77:22:3c:88:d2:31:6d:
4c:d8:1b:47:be:00:6d:51:78:2d:e7:70:d9:6a:9b:
e4:80:fa:ea:cf:2d:8f:d9:f1:fa:18:c3:95:82:82:
57:f8:ad:78:01:46:e5:a6:b2:cd:b0:39:a5:45:87:
21:34:6f:59:55:02:7e:46:84:77:6a:ed:60:d4:53:
27:6b:01:7e:ea:25:0d:5b:8d:71:dd:67:1e:be:81:
cb:70:52:2a:ba:4a:d3:4d:bf:b6:26:70:9c:97:6a:
05:19:04:7a:02:48:1c:31:04:b1:58:51:4d:1b:f2:
66:c5:96:1f:0d:9a:31:fd:60:f6:73:61:55:87:e9:
c9:13:6d:cc:b4:1f:ad:42:d0:b2:07:64:1f:e7:2a:
19:1a:be:fd:f3:dc:69:43:cb:3f:7a:51:16:ff:1d:
aa:f4:08:8e:ad:6a:26:f1:fe:b7:c5:e9:71:0a:4b:
6d:19:0f:82:d8:95:c4:25:b8:64:4d:31:e2:85:fd:
a0:fe:86:8c:71:2d:39:01:79:ac:4d:b3:47:5e:20:
79:ff:16:1e:54:e6:1b:f6:fa:f4:68:8b:84:6e:35:
21:9f:d7:c2:06:9b:11:90:eb:da:ee:5b:0a:fb:39:
13:d4:1c:fd:1b:2d:e7:43:50:ab:b8:91:4c:dc:01:
33:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:63:A5:EA:8A:C9:08:56:07:99:F4:31:CE:E9:73:EF:5D:DF:18:F7
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/d2Ol6orJCFYHmfQxzulz713fGPc.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
58:74:2b:2e:44:26:71:db:20:de:c4:15:6f:96:a7:32:97:21:
8a:10:8a:17:d2:da:8d:d2:58:29:20:33:ed:a1:37:db:a9:e8:
59:a7:2f:96:4b:e7:6e:a6:01:2b:ff:1c:17:1f:9f:54:87:b8:
8e:62:14:30:f9:dc:03:01:77:04:30:d1:47:16:50:fa:ff:4d:
50:53:88:0b:1c:de:76:b1:ff:c8:dc:dc:93:86:3d:6e:49:d0:
e3:8e:3a:02:71:38:c4:97:97:70:4b:b1:c8:db:06:e1:f2:e5:
c5:d0:16:41:a0:c7:90:ff:d3:32:f6:6f:a9:b4:7d:b2:70:3f:
8e:92:55:d0:d2:d9:8a:4d:8b:78:ef:e9:0c:c5:49:ab:1e:ec:
a4:80:0c:b7:89:69:c1:9a:7b:58:d7:7b:eb:43:3e:46:24:fb:
96:f8:24:c6:42:2c:29:99:2c:0f:d4:b3:51:86:ba:87:ae:5b:
46:15:35:e8:3b:3a:eb:dd:ac:48:c5:32:c2:62:e8:b2:e3:6c:
f6:4f:eb:24:b7:f1:6b:4e:ec:d0:0b:82:db:5a:fa:11:04:bb:
ca:11:25:7b:74:c0:eb:8d:a1:c9:18:fd:74:3b:c2:71:ae:0f:
0c:cb:eb:60:84:f9:3a:31:89:3c:1b:f0:cf:25:73:0d:4c:ec:
ee:96:14:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org