Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/eQlIHpnXRIeRbL3b7-y3jGne2rc.roa
File: eQlIHpnXRIeRbL3b7-y3jGne2rc.roa (raw, json)
Hash identifier: 3aRXH0L5/TSka1Lfejk981P2O+6XRqcpLeJA/SW2IJs=
Subject key identifier: 79:09:48:1E:99:D7:44:87:91:6C:BD:DB:EF:EC:B7:8C:69:DE:DA:B7
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4288
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/eQlIHpnXRIeRbL3b7-y3jGne2rc.roa
Signing time: Thu 03 Feb 2022 00:30:05 +0000
ROA not before: Thu 03 Feb 2022 00:30:05 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17032 (0x4288)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 3 00:30:05 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=7909481E99D74487916CBDDBEFECB78C69DEDAB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:58:0f:49:11:ae:d9:7a:5a:89:e0:73:19:58:
27:59:c0:3d:79:39:f6:0e:95:51:66:ff:10:fa:b7:
58:5a:d3:e0:b3:7f:bd:6b:b0:ce:55:1f:b7:df:30:
7e:ad:b5:df:f4:b3:ef:fe:32:ae:0e:79:07:54:f4:
13:8c:d8:9b:1f:41:c5:8f:6c:cb:8e:f9:09:35:90:
a6:20:fa:9a:f5:bd:ab:16:4f:60:6c:df:13:d1:7b:
92:d9:44:98:cc:66:c7:1c:37:71:91:9a:ee:ca:c3:
b8:44:0f:7c:50:6e:5d:d1:79:43:c0:10:a5:70:77:
8c:2b:fa:d9:96:fd:67:6c:1a:4d:cf:10:22:3b:e0:
33:9d:8a:ce:99:b6:70:e4:9e:7a:e8:33:dd:8d:b8:
25:2d:7f:91:8d:4a:12:20:c5:9a:3d:1c:b0:d1:24:
ce:98:6e:0b:95:8f:53:50:02:b6:cd:1a:bd:06:0a:
17:ba:33:53:08:93:46:bf:31:7f:7d:1e:eb:57:ee:
b2:a4:cc:27:53:d2:43:71:4c:78:00:dc:78:91:22:
49:b3:7f:eb:50:51:b1:9a:69:80:c3:62:03:05:c4:
f5:8c:56:2d:be:18:fe:a8:1f:f2:63:07:48:03:8c:
18:e0:c2:77:55:58:d4:65:34:df:28:1a:b9:22:48:
4d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:09:48:1E:99:D7:44:87:91:6C:BD:DB:EF:EC:B7:8C:69:DE:DA:B7
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/eQlIHpnXRIeRbL3b7-y3jGne2rc.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:08:86:89:84:3a:19:f8:a5:75:30:fc:bd:fc:6b:59:8b:a8:
11:bc:5f:37:f4:a5:69:16:dd:35:d3:b8:98:35:c3:4a:ce:80:
29:45:59:1c:11:f3:4b:4e:66:6e:9d:fe:78:f6:21:af:d5:09:
c9:5b:78:a0:f0:4d:61:10:8e:5d:84:0e:0a:b6:d3:d5:38:92:
53:36:96:fe:98:07:d1:4d:65:3e:dc:7d:a1:f0:24:95:eb:af:
0d:8a:89:19:3a:ac:ad:6e:df:b6:fe:4a:82:d4:7b:0c:c7:06:
a2:4a:0d:ff:5c:37:9f:d2:58:59:2d:49:50:f7:eb:ed:a8:73:
95:80:b6:44:ae:3b:cd:29:4c:a2:7e:dc:08:31:d4:df:37:14:
05:3c:22:53:30:08:c5:a8:7c:64:79:b8:27:7a:8d:37:24:cd:
25:99:53:47:b8:f4:c0:2a:2b:3c:8a:6c:95:05:84:c1:53:0f:
fd:1d:ac:ba:22:36:42:b6:18:4d:27:a0:31:47:66:78:79:2d:
16:b5:65:81:de:de:7b:d8:35:31:2b:55:e2:36:00:a0:02:1e:
a7:c0:16:82:90:e7:49:93:05:11:e6:50:05:9f:4c:57:a5:b1:
f9:85:f2:1b:64:d7:83:a0:57:34:61:a2:0c:c0:78:98:97:85:
7f:b6:32:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org