Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/hvm5lKi9RpfV4BCU8QsgOSQ9oIY.roa
File: hvm5lKi9RpfV4BCU8QsgOSQ9oIY.roa (raw, json)
Hash identifier: 9kcIe6Y3xtaI865zEDYI15wP+BxJ39s1+2Wa6bDE7N0=
Subject key identifier: 86:F9:B9:94:A8:BD:46:97:D5:E0:10:94:F1:0B:20:39:24:3D:A0:86
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 48F5
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/hvm5lKi9RpfV4BCU8QsgOSQ9oIY.roa
Signing time: Tue 31 May 2022 00:30:12 +0000
ROA not before: Tue 31 May 2022 00:30:12 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18677 (0x48f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 31 00:30:12 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=86F9B994A8BD4697D5E01094F10B2039243DA086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c9:5b:1b:8a:5b:0c:14:6b:7f:3a:26:91:fe:
fc:d0:74:f8:2d:b5:a3:ad:f9:51:6f:84:f0:12:0b:
32:50:82:59:d1:f8:68:b4:7b:9e:2e:9d:23:39:08:
5f:22:47:ec:c9:f8:1f:7e:83:26:fe:7e:b1:f5:f3:
63:65:f3:01:a6:39:5f:92:0c:88:2d:45:b4:45:6e:
00:71:70:d0:47:d2:75:7c:17:90:24:51:ab:c5:ba:
55:f3:79:aa:c8:8c:80:36:fa:23:5f:09:1d:3a:b3:
27:9e:46:10:64:81:3d:0a:52:d1:b9:bd:23:1d:29:
ee:41:b8:48:9b:28:2a:8d:4e:87:d1:f7:4a:b3:8d:
27:e5:70:b6:86:59:9b:a4:37:d9:34:e8:5d:ef:a4:
39:95:89:ff:bb:4a:78:e6:a2:12:84:8f:ed:07:98:
9c:8b:8f:de:c2:9c:09:16:62:12:35:f5:bf:9c:89:
3a:e7:ca:b6:d0:8e:b1:52:84:b8:9c:1e:31:c8:9a:
d6:35:15:b7:d1:87:99:92:30:f7:91:6c:3f:9f:b9:
bb:36:6d:96:a7:38:80:9f:58:4d:7a:f5:45:0d:9f:
b3:52:88:24:61:3e:0a:87:d6:b6:e6:f7:ee:7e:7f:
01:f4:ed:f7:53:02:ba:e4:fc:46:e2:48:dc:ff:16:
29:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F9:B9:94:A8:BD:46:97:D5:E0:10:94:F1:0B:20:39:24:3D:A0:86
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/hvm5lKi9RpfV4BCU8QsgOSQ9oIY.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.10.0/24
Signature Algorithm: sha256WithRSAEncryption
70:b7:ad:72:a1:e9:ca:38:9c:ff:2b:ee:de:f5:b5:fd:e9:72:
3b:3a:bb:3a:f0:ea:0b:23:30:7c:56:97:16:d3:52:00:fa:fd:
46:cb:ca:9c:ca:83:1a:35:fb:74:55:55:b9:77:d8:0f:d8:57:
11:66:5f:0e:cc:0c:60:7a:0e:f2:ba:bf:d9:3a:01:b6:6e:d4:
4d:a2:dd:fd:4f:13:01:e2:7f:e6:57:80:22:20:89:1b:79:70:
b3:d5:8f:8f:5f:69:55:0b:a1:c1:e3:c8:2b:4b:0b:46:b7:a1:
7e:fb:00:2f:6b:6e:17:59:5f:6e:85:b3:27:43:9f:e4:ec:95:
6f:7c:73:7c:00:a9:9d:ab:8a:dc:19:04:77:33:d2:88:67:4b:
bf:7b:c9:da:04:3d:20:c7:bb:7f:cf:c2:0e:65:61:b2:7b:61:
b3:c8:10:32:04:11:a8:5d:96:45:b9:79:a2:5d:23:97:6a:ff:
30:0b:f3:2b:f7:1f:d3:40:1d:ba:ca:9e:c9:09:19:9d:e4:20:
ba:ce:50:36:98:07:0e:6f:21:14:b5:36:92:03:1a:ba:ef:f4:
eb:2c:63:29:96:ad:a4:10:91:92:2f:59:24:ce:29:12:c7:55:
32:74:da:25:dc:c0:e0:e3:02:7e:43:ed:84:9c:68:09:a1:7a:
0b:b9:da:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org