Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/m_pK0yuEuSidWVW6ER3D5JIUWYw.roa
File: m_pK0yuEuSidWVW6ER3D5JIUWYw.roa (raw, json)
Hash identifier: 0b310IlXvItTjA/BzIbnyZs9GcVeaGaEyDGglQZ69vg=
Subject key identifier: 9B:FA:4A:D3:2B:84:B9:28:9D:59:55:BA:11:1D:C3:E4:92:14:59:8C
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4648
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/m_pK0yuEuSidWVW6ER3D5JIUWYw.roa
Signing time: Wed 13 Apr 2022 00:30:05 +0000
ROA not before: Wed 13 Apr 2022 00:30:05 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17992 (0x4648)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 13 00:30:05 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=9BFA4AD32B84B9289D5955BA111DC3E49214598C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c8:1b:3a:f3:92:66:eb:93:4a:b5:63:02:a8:
8d:8a:cd:24:55:d1:9c:85:3c:85:49:7d:11:05:95:
8a:f2:0f:0f:67:19:96:71:45:76:b8:0f:02:77:e2:
93:43:3c:17:bb:f4:68:29:f8:6e:aa:87:16:d1:5c:
d6:45:df:c9:84:2f:fe:c8:bf:79:9d:d5:ff:82:b1:
6f:90:f7:86:db:db:6f:00:10:7a:8d:fe:0d:60:25:
c5:c5:ac:f3:ba:9e:7f:09:3f:31:b2:e7:2f:dc:6e:
a2:7b:26:c2:d4:8c:4d:92:05:7d:71:90:9e:86:3c:
c3:50:6b:1a:b4:c2:63:17:31:0d:62:34:28:5e:7f:
5e:32:76:1d:32:22:c9:c6:aa:a3:b7:79:8b:45:fd:
77:46:16:a2:3d:16:81:e9:ae:88:58:8e:d7:ac:88:
d8:e4:c6:11:44:15:9c:8b:03:9c:a4:bb:12:ea:63:
1f:76:55:53:0d:72:9f:31:7d:fe:e8:a5:61:a6:ca:
df:81:b3:50:7a:ce:57:26:bd:32:f5:78:08:06:5c:
9a:d9:cb:d4:69:5b:da:79:3e:3b:62:8f:9b:ad:2d:
b7:98:ae:c8:b3:8f:84:f3:67:55:82:1e:c9:8b:65:
f7:20:6f:3d:2e:5b:be:8f:19:ea:c0:f4:b2:fc:11:
9b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FA:4A:D3:2B:84:B9:28:9D:59:55:BA:11:1D:C3:E4:92:14:59:8C
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/m_pK0yuEuSidWVW6ER3D5JIUWYw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
86:24:36:45:ec:a6:67:48:59:aa:4f:93:c6:15:d1:90:84:3a:
9b:4d:c4:c8:dc:bf:10:05:4c:94:2a:8c:43:27:be:03:15:78:
23:05:19:5e:d1:47:76:b9:40:9b:37:63:7a:9a:90:27:b8:b4:
1f:22:bd:33:27:b6:db:3e:61:e5:1e:ff:05:03:77:6b:7a:4b:
04:8e:e5:46:fd:aa:6b:8b:76:51:41:21:03:49:80:9d:60:7f:
1a:ba:3c:7f:d7:2a:c7:28:da:a2:61:14:08:a0:be:39:48:b8:
01:17:db:98:55:e7:3e:d0:d0:d3:d1:eb:7a:ef:ed:08:b6:c1:
9d:60:d0:ff:75:5a:74:bf:4e:e2:35:c2:f8:f3:64:7d:29:27:
3b:d4:47:2f:9e:7a:22:46:a5:00:ec:c1:f9:60:70:68:0e:ee:
77:60:62:5b:be:1f:5f:f7:dc:d6:56:53:49:3f:eb:d2:48:46:
cb:ab:91:62:23:cc:9e:56:24:0d:02:36:70:1f:f5:ce:92:89:
91:3b:93:63:e9:5d:23:e0:be:40:a2:b4:0b:27:4a:38:7a:2d:
18:3c:95:03:9d:53:58:c3:41:a2:7c:60:17:43:7e:35:39:3a:
48:f7:a9:cf:78:2a:14:eb:18:a7:90:fb:b0:fc:d2:a1:77:27:
25:98:7e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org