Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/gwklfH6ffFOOxL5A_zo-Bx7NZ4Y.roa
File: gwklfH6ffFOOxL5A_zo-Bx7NZ4Y.roa (raw, json)
Hash identifier: MGK6jpX+xZyNC0BqY5lcmeXwlMcdLA1qLuAOCPoWN6Q=
Subject key identifier: 83:09:25:7C:7E:9F:7C:53:8E:C4:BE:40:FF:3A:3E:07:1E:CD:67:86
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4325
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/gwklfH6ffFOOxL5A_zo-Bx7NZ4Y.roa
Signing time: Mon 14 Feb 2022 00:30:06 +0000
ROA not before: Mon 14 Feb 2022 00:30:06 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17189 (0x4325)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 14 00:30:06 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=8309257C7E9F7C538EC4BE40FF3A3E071ECD6786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6f:2f:0f:5d:fa:fd:4d:37:ce:16:6a:25:94:
f7:44:7b:db:53:79:a3:83:2c:89:a5:1b:f7:d4:75:
ce:2f:5f:a7:90:1b:ad:33:9d:33:76:3a:84:ac:5c:
54:38:43:9c:0a:e3:dd:43:b6:a7:b8:2d:fe:f1:7e:
e3:a1:42:4a:c9:e7:ac:73:72:c7:ee:17:e8:c5:f2:
ce:c9:af:63:7b:63:2c:2a:d6:e1:48:28:80:a8:7f:
ab:3b:da:74:16:cf:f2:16:5f:ee:4d:da:d4:ee:00:
b2:87:0f:ad:25:3d:98:76:ba:27:5d:ce:2b:d0:74:
99:07:a3:c0:15:92:86:13:83:8d:ae:27:4b:7d:4a:
18:1f:d7:99:d6:b7:8b:28:78:a5:a4:92:10:ec:6e:
17:a9:40:8f:f3:bf:43:18:08:d2:d0:a7:07:91:4d:
33:15:06:ae:3a:00:32:24:b0:74:28:1b:5d:86:b9:
e8:55:ec:4c:3a:e7:fc:66:e5:0b:a0:3e:4d:7e:48:
b4:84:84:4e:31:51:6d:c8:cb:d8:2c:cf:45:07:f1:
7e:d5:50:49:8f:07:3b:bc:66:53:b3:7b:f7:53:2b:
67:f2:17:0e:47:64:60:d1:d2:5b:03:b1:5d:a0:70:
eb:f3:2a:cc:44:9d:67:12:64:a0:40:b2:83:fb:06:
b7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:09:25:7C:7E:9F:7C:53:8E:C4:BE:40:FF:3A:3E:07:1E:CD:67:86
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/gwklfH6ffFOOxL5A_zo-Bx7NZ4Y.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:f7:eb:d6:23:dc:b3:e2:78:db:35:1f:d6:10:e0:3f:21:b8:
f3:97:43:65:b0:fa:e1:85:a7:68:91:c5:50:3b:0d:42:30:ab:
a0:2e:96:f3:5c:53:91:08:c5:4d:c0:c9:7b:19:41:2d:30:23:
02:e3:c4:e5:74:f7:d8:33:72:70:74:9a:55:ec:7f:04:45:b5:
37:6d:a0:e9:ca:a4:f2:ee:7b:19:bf:d0:0e:eb:ab:a5:bb:2c:
f2:24:dc:b1:ac:61:b5:58:51:f5:ab:01:e1:47:5d:31:fb:8b:
35:6b:80:d8:75:de:4f:f6:1a:9d:34:0e:07:33:69:01:10:81:
f2:f9:fb:98:61:c1:8d:39:a6:c5:1c:dd:60:32:6b:12:9c:17:
a9:6e:a6:d8:40:a9:da:1b:56:10:f6:d4:08:f4:56:47:d9:80:
37:00:8a:fb:98:b7:32:06:d9:48:bb:9f:0b:9a:3b:23:19:de:
fa:cd:a8:05:03:d5:6b:9f:ba:a9:be:21:9a:d7:24:40:6a:f2:
06:77:dd:66:af:27:59:c1:f0:cc:cb:7e:7b:88:c6:0a:6e:b6:
32:73:3a:85:dc:42:80:5f:58:7d:44:42:cd:ba:ea:e8:ec:b0:
c5:b9:b4:ba:77:3e:ea:53:ae:9f:04:be:7c:dc:11:94:f5:35:
6b:92:dc:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org