Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/pCdT-CiNiltPXerAMGbJ7t7uTAU.roa
File: pCdT-CiNiltPXerAMGbJ7t7uTAU.roa (raw, json)
Hash identifier: RtbG1e5XFsceiTABewAPme7MEt2A58yoy/ilE5UJqpU=
Subject key identifier: A4:27:53:F8:28:8D:8A:5B:4F:5D:EA:C0:30:66:C9:EE:DE:EE:4C:05
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4606
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/pCdT-CiNiltPXerAMGbJ7t7uTAU.roa
Signing time: Fri 08 Apr 2022 00:30:08 +0000
ROA not before: Fri 08 Apr 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17926 (0x4606)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 8 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=A42753F8288D8A5B4F5DEAC03066C9EEDEEE4C05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:be:73:fb:2f:ea:63:08:e4:3b:1e:38:c8:77:
40:d4:37:1d:16:e2:84:2b:23:45:bc:2e:97:0e:16:
3e:eb:4e:43:c4:30:c9:c1:6a:59:56:fd:fb:c6:90:
3e:b2:b5:e3:8a:77:e1:bb:c5:2e:52:ee:77:b3:d6:
b8:d2:6c:97:d9:80:56:d4:70:e8:ac:4f:f6:0c:0a:
61:c0:33:52:31:ff:cf:6f:8e:45:de:e9:31:bc:e3:
0f:b7:4f:a1:96:7d:34:60:87:a4:9f:1a:dc:5e:8e:
04:57:08:b7:15:f7:46:4d:89:15:90:e7:20:d2:54:
90:0f:8f:a7:fa:a9:e7:41:3a:f1:ed:53:67:c1:df:
fe:98:94:4e:65:62:8d:df:c8:5d:42:d2:5b:0e:cd:
49:5a:c2:78:bf:9b:4b:24:e9:4d:19:bc:22:45:a3:
89:93:02:9f:95:e6:fc:12:45:67:03:0d:19:7c:2b:
dd:3b:59:a4:d0:c9:87:c4:91:a1:10:93:23:31:b1:
8a:ee:96:55:d5:7d:da:1c:05:3b:9c:e8:34:74:5f:
b0:b6:09:eb:cc:99:c7:b6:ce:53:21:a4:02:6a:47:
aa:97:8f:bc:cd:c3:b5:b2:40:a1:12:c8:58:b0:dd:
d1:88:0a:c1:c7:a9:b2:5c:61:ad:0a:36:f2:8d:d8:
07:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:27:53:F8:28:8D:8A:5B:4F:5D:EA:C0:30:66:C9:EE:DE:EE:4C:05
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/pCdT-CiNiltPXerAMGbJ7t7uTAU.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:20:05:7b:6e:fe:98:76:31:6e:9a:93:f7:f4:4c:9f:eb:37:
e7:fe:42:18:b1:a9:9d:d7:14:42:15:d8:f9:62:07:02:37:9d:
28:38:50:ee:a0:89:29:96:55:bd:0b:df:bb:63:ba:4c:71:22:
94:55:71:84:72:f9:42:49:87:3a:6d:08:ef:9c:8c:2f:92:83:
61:7f:21:6f:59:8f:41:f5:b9:6a:94:d2:e2:40:08:82:4f:9a:
d1:6b:07:7c:07:b1:09:42:b0:1d:f4:56:61:78:82:24:4c:62:
b7:03:e2:ec:b0:c9:ea:3e:ee:15:5b:df:a9:cc:a0:ec:20:29:
31:ad:54:49:1e:ea:ef:3f:b8:9d:d3:c3:95:07:26:f2:9f:40:
91:e7:e1:00:05:19:a7:3f:a8:f5:f0:75:cf:1d:1a:dd:4e:9a:
9e:b9:2a:4f:f6:68:8b:65:a9:ea:94:dd:c3:fe:e8:1e:fc:b1:
02:4a:59:5d:04:78:e3:d9:70:01:70:89:7a:28:20:b7:b4:c0:
d2:de:52:2e:33:8f:e7:ff:e0:3c:7b:ed:26:9e:b5:6d:11:00:
d5:84:54:04:79:33:bf:65:5d:91:63:11:da:62:fd:bf:e4:76:
ca:f1:30:eb:0a:83:92:b8:6a:55:a7:59:0c:5e:a1:0c:7c:d2:
72:69:a0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org