Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/gLbv2tW_5AAvzSFa5VahNi4kumQ.roa
File: gLbv2tW_5AAvzSFa5VahNi4kumQ.roa (raw, json)
Hash identifier: h9j0poGmPUsnS7xrHTERawyamR+KABYmTqRFH+A5ySg=
Subject key identifier: 80:B6:EF:DA:D5:BF:E4:00:2F:CD:21:5A:E5:56:A1:36:2E:24:BA:64
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 48DD
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/gLbv2tW_5AAvzSFa5VahNi4kumQ.roa
Signing time: Mon 30 May 2022 00:30:07 +0000
ROA not before: Mon 30 May 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18653 (0x48dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 30 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=80B6EFDAD5BFE4002FCD215AE556A1362E24BA64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f9:a4:25:78:b5:1b:3e:57:ef:ab:5c:05:c4:
b2:64:b7:5c:15:1c:a2:dc:fd:99:e8:d0:4f:6a:f3:
0b:8e:ce:05:91:ef:db:de:2e:31:96:83:9d:7e:24:
c6:4d:3b:13:48:c9:e9:41:66:63:c1:cd:75:9a:4b:
8e:e5:2b:1e:7b:1e:ef:f2:51:36:23:7f:ed:10:5c:
d5:fe:51:75:7b:9c:a2:59:33:aa:b7:d0:e7:0c:1b:
44:ae:1e:3f:23:65:4a:4e:47:ec:46:64:c5:b1:e3:
fc:ba:e4:b0:2c:e8:56:2b:c8:be:c9:0e:41:76:81:
8d:24:f5:a5:5b:8e:e3:40:36:eb:74:a0:53:a5:e4:
bf:3d:b7:62:1c:1c:d4:14:48:5a:5b:f6:07:90:c4:
44:93:1b:0e:68:ed:01:e6:25:1b:86:c3:2f:1b:b0:
25:25:6b:4b:45:f3:30:5c:3c:d3:f4:c3:9e:b6:b6:
ac:9d:8d:12:9e:d9:72:5e:6a:44:94:d1:d6:e8:a1:
fa:de:39:ea:13:c5:4b:03:9f:5f:33:f8:91:d8:20:
f0:68:cb:ca:90:38:17:32:a6:70:87:96:46:cf:cd:
74:2c:dc:dd:67:b9:90:16:d0:65:2d:ed:b7:32:9b:
73:db:95:63:ec:35:c6:f9:6e:93:38:ad:90:1a:8e:
22:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B6:EF:DA:D5:BF:E4:00:2F:CD:21:5A:E5:56:A1:36:2E:24:BA:64
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/gLbv2tW_5AAvzSFa5VahNi4kumQ.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:49:ba:39:bb:2a:a7:0e:b1:e3:8c:f5:6c:61:62:a7:92:11:
56:69:9f:75:e8:d0:0a:a7:a5:59:3c:01:91:63:da:22:e2:d5:
6c:74:c3:0e:1b:5a:85:a0:2f:64:35:f9:e1:de:d6:17:14:d5:
87:5b:ac:be:9c:dd:df:bf:48:59:c6:ae:71:f5:11:8e:94:26:
12:97:d3:5f:1d:c4:41:28:7c:59:df:9b:47:6a:1b:52:44:b0:
06:35:81:1c:2e:7d:b7:6f:bf:f7:75:9d:03:f4:e6:7b:fc:40:
a1:a0:02:59:33:4a:dc:df:6d:25:b1:b7:6f:7b:66:68:35:73:
cb:85:f0:57:ee:0c:31:09:e1:44:81:37:38:32:6a:8b:fe:c8:
65:66:fb:7d:78:54:f7:d5:0f:89:8c:4a:e6:4e:b2:01:03:d8:
86:11:0e:7e:21:88:7f:3f:23:77:75:81:f6:d9:21:00:fa:54:
37:9c:71:e3:84:2a:39:ce:86:ca:49:2a:b0:50:f5:18:a1:e9:
9d:e5:f6:21:41:f5:6b:3a:ee:a2:07:da:31:8f:f7:ec:c2:ab:
0e:0a:5c:ea:df:e9:f4:28:1c:21:81:9b:12:b8:ae:ed:6b:7d:
4c:8f:5d:b2:d4:f9:ff:01:d8:39:9d:d5:13:6f:47:e4:de:81:
82:77:b2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org