Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/rsRQ9fntdx-uJVVCt575jOe3NTY.roa
File: rsRQ9fntdx-uJVVCt575jOe3NTY.roa (raw, json)
Hash identifier: QaljjLGrHgd+QE3XSHdnFKtcmy3+BwNozVckA/kKTAU=
Subject key identifier: AE:C4:50:F5:F9:ED:77:1F:AE:25:55:42:B7:9E:F9:8C:E7:B7:35:36
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 46BB
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/rsRQ9fntdx-uJVVCt575jOe3NTY.roa
Signing time: Thu 21 Apr 2022 00:30:09 +0000
ROA not before: Thu 21 Apr 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18107 (0x46bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 21 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=AEC450F5F9ED771FAE255542B79EF98CE7B73536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2e:0b:23:14:a8:a5:03:f5:44:f9:3f:87:4b:
d6:47:fe:7b:7f:0d:fe:09:03:08:99:26:c0:1d:0f:
93:b0:fb:55:bb:1c:47:5a:8e:50:a0:f0:bc:6e:ad:
b6:71:ae:27:72:34:8a:37:96:d1:bb:65:a7:0f:a8:
59:37:56:60:80:28:94:d6:78:59:df:a7:ae:cb:9c:
34:6c:ab:36:6a:80:73:cb:76:b2:5a:37:e8:b3:59:
5e:4a:2c:6a:20:75:27:37:97:f5:5a:25:8f:2a:6e:
91:dc:00:39:68:33:a4:58:75:31:7c:fe:2c:30:94:
b4:f6:13:eb:a6:5c:f8:8e:c7:69:1e:3b:ef:72:4e:
12:08:d8:70:e4:d4:69:a4:5a:5a:75:2e:60:38:08:
91:2a:23:fa:e8:76:e0:1a:07:fe:aa:2b:8b:6c:a0:
b1:38:ca:71:c6:42:15:c8:1d:0a:7b:eb:61:d7:99:
44:23:3b:bb:e2:74:f9:71:d7:76:b2:a5:d2:ec:d6:
96:c7:36:fd:cb:c4:09:6c:ed:74:ee:8e:b0:f9:25:
c7:00:36:4e:aa:01:72:b0:62:40:b8:eb:f9:bb:47:
c1:4d:2d:67:fb:51:8d:b1:86:6b:7a:88:2b:ff:66:
cb:31:51:b4:2b:dd:11:dd:ea:3e:1d:74:91:b9:fb:
e9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C4:50:F5:F9:ED:77:1F:AE:25:55:42:B7:9E:F9:8C:E7:B7:35:36
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/rsRQ9fntdx-uJVVCt575jOe3NTY.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
11:66:e2:8f:6b:18:32:24:c2:af:2b:15:b6:30:1e:09:6d:16:
51:ce:5c:e9:06:d5:36:c5:53:ec:da:c1:34:cd:a5:8d:91:21:
4c:16:96:e5:76:ab:b7:57:cb:c4:4f:44:8a:8e:50:09:f1:3c:
c6:1a:3d:09:d2:3b:c8:cf:ab:79:e0:77:c1:21:92:f6:f2:aa:
bf:58:6d:70:34:38:95:8b:6f:9e:a1:76:0f:9a:53:d0:01:82:
c2:91:8e:07:e2:ba:6c:4c:cd:61:18:fa:77:98:4a:0b:6d:ad:
f8:8a:d0:4d:8e:b1:a6:23:92:f6:62:d3:70:73:95:0a:f1:d6:
43:c7:47:61:f9:57:b8:57:d6:1e:ac:a3:9a:ee:01:c6:76:bd:
7f:ed:fb:63:c2:77:22:2f:14:19:c2:54:7c:0a:60:bb:26:f3:
b7:bd:c3:fc:87:75:41:3b:85:65:ee:08:8a:4d:fa:2d:d6:ed:
d5:af:a3:ff:31:19:44:2c:a7:a2:e6:31:66:81:6b:c3:32:43:
57:96:c1:b1:54:40:e5:6d:7b:24:78:3b:7b:60:82:48:bd:f5:
61:63:3e:10:e4:63:02:11:40:ab:51:5b:25:70:0b:3b:11:9e:
38:ee:b4:28:d7:ec:0e:2f:7b:44:10:ed:41:5b:aa:ef:44:8e:
9d:22:8b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org