Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/qXhe0zVpBz7f2XAbA0TTpod6yYU.roa
File: qXhe0zVpBz7f2XAbA0TTpod6yYU.roa (raw, json)
Hash identifier: PXnMPdxwh2IsBQ3AVRIyv3NTzTj4ULDvcgtX5sUu2qo=
Subject key identifier: A9:78:5E:D3:35:69:07:3E:DF:D9:70:1B:03:44:D3:A6:87:7A:C9:85
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4905
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/qXhe0zVpBz7f2XAbA0TTpod6yYU.roa
Signing time: Wed 01 Jun 2022 00:30:09 +0000
ROA not before: Wed 01 Jun 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18693 (0x4905)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 1 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=A9785ED33569073EDFD9701B0344D3A6877AC985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a3:a9:0d:26:8d:b0:f4:6c:6f:85:67:f0:81:
78:7b:9b:69:61:db:08:42:25:8f:f3:8c:2a:7b:ac:
06:12:b6:6d:4e:0f:69:08:2a:09:78:92:b2:6b:ad:
0a:09:dc:37:76:13:69:2d:78:20:07:ae:6e:e1:25:
36:41:19:da:1b:eb:6f:62:3d:0d:b7:8c:e2:57:bc:
e7:73:70:38:a4:da:cc:5e:95:24:37:30:01:7b:30:
10:76:c2:1d:3e:84:01:b0:00:0c:77:88:8e:93:15:
45:e9:80:91:df:fb:8d:15:ab:ad:5a:fd:8a:37:f1:
ce:3c:71:01:ac:50:c2:5a:f2:e4:e6:82:85:aa:95:
78:7e:33:81:67:43:28:16:8e:fe:fe:e4:a1:bb:9c:
99:d4:4d:fc:fb:9a:81:de:f7:30:d9:b4:38:11:7d:
f5:6a:4f:1f:b6:ef:70:b8:27:cc:fe:37:65:f7:53:
ec:6a:20:b3:be:b0:d6:1d:00:11:6f:02:d0:cb:c1:
a7:fd:59:89:59:bd:6c:77:a1:13:8c:59:24:75:1f:
65:60:93:d4:01:2f:85:7e:a0:38:8c:20:4d:24:6e:
88:6b:e6:b4:eb:8b:a2:59:22:21:97:8c:cb:68:29:
d1:a1:e6:4b:26:a7:e4:eb:71:5a:28:f4:5b:57:df:
88:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:78:5E:D3:35:69:07:3E:DF:D9:70:1B:03:44:D3:A6:87:7A:C9:85
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/qXhe0zVpBz7f2XAbA0TTpod6yYU.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:8c:9d:72:ae:7d:67:3e:98:4d:05:be:01:f3:b6:95:c3:b1:
a8:c4:d2:27:42:81:63:be:c0:ec:3b:79:df:fc:2d:16:a6:ea:
b2:50:37:c4:b6:18:30:b3:db:5c:15:76:91:40:04:b9:a8:c8:
43:43:ad:b4:b6:82:8b:c8:04:20:ec:55:37:0a:ac:5a:0b:a0:
89:f7:38:74:fe:73:8b:61:6f:ab:49:b5:06:d3:3e:70:f7:e8:
7c:86:b3:4c:aa:5c:1c:8c:45:4d:5e:12:88:12:0d:0f:dc:af:
7d:03:8f:a1:41:33:2e:17:c2:dc:cb:22:e2:b1:a0:ec:7e:96:
0a:67:25:77:92:13:eb:f5:a0:22:c8:c8:e5:11:c2:5e:3e:16:
07:1b:57:08:55:6c:0f:9d:a9:6c:18:29:cc:b7:53:17:68:cf:
b8:0c:31:55:78:b5:f9:f0:fe:45:56:57:2b:1b:39:fe:9e:d1:
19:eb:10:9a:2e:e2:42:a3:80:11:ec:e6:3b:f9:71:17:d8:86:
30:ab:de:60:83:38:d6:0c:34:1a:15:8a:fc:31:b7:df:3c:f1:
82:fe:72:f5:b2:b6:d6:4c:ce:33:38:04:b3:43:6e:90:bb:77:
c5:6f:3e:72:8c:83:b4:1b:16:1f:6c:90:03:73:ef:42:a9:3b:
17:0a:c0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org