Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/rtYiMHujDLDzMhtWwpQvOsjbx6g.roa
File: rtYiMHujDLDzMhtWwpQvOsjbx6g.roa (raw, json)
Hash identifier: cuORVQLOIuoGpAYD7gaychsXL2t1nJwiKZYlnWaeeyM=
Subject key identifier: AE:D6:22:30:7B:A3:0C:B0:F3:32:1B:56:C2:94:2F:3A:C8:DB:C7:A8
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 469C
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/rtYiMHujDLDzMhtWwpQvOsjbx6g.roa
Signing time: Tue 19 Apr 2022 00:30:05 +0000
ROA not before: Tue 19 Apr 2022 00:30:05 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18076 (0x469c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 19 00:30:05 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=AED622307BA30CB0F3321B56C2942F3AC8DBC7A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d5:26:bb:ec:66:3b:f1:18:d6:4b:41:be:4d:
21:0b:36:85:32:d4:59:60:41:c0:5a:2e:05:3b:23:
48:65:2a:5f:9d:70:aa:b8:cb:4a:b4:5a:84:e1:1d:
bd:f1:2f:10:b9:5d:0e:24:6a:a3:e8:05:50:73:48:
5f:9f:3e:f9:26:1f:9e:f1:69:aa:8f:2d:46:11:90:
a8:79:23:a0:a0:e2:73:61:fa:75:e1:cb:9e:52:50:
e3:3f:bf:a8:12:82:65:b0:43:45:a8:6f:f3:01:7d:
a9:99:f6:72:a0:fa:92:85:56:9b:86:21:a7:43:28:
b2:13:d3:d1:b1:a8:36:3c:ca:37:37:8f:1f:71:01:
4d:72:ce:68:d9:01:ce:e9:cc:59:cf:c3:7c:09:34:
47:2d:76:ec:8d:d2:a8:94:a4:c1:9a:ba:d6:7f:10:
b0:44:57:aa:88:c7:d7:2b:fd:f2:07:57:4d:df:d4:
f5:e0:3c:27:3a:d3:cd:bd:91:91:55:02:69:d6:4f:
78:ed:aa:77:a3:c6:9b:42:45:b7:42:04:84:0f:7e:
87:64:bc:c7:81:71:8f:2c:b0:fb:d4:2d:9f:0c:76:
ca:a7:d1:ec:a2:cd:50:a1:40:13:e4:ec:44:c6:18:
84:de:a5:a9:c5:5d:35:da:5e:a9:ff:1d:ce:75:e7:
bb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D6:22:30:7B:A3:0C:B0:F3:32:1B:56:C2:94:2F:3A:C8:DB:C7:A8
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/rtYiMHujDLDzMhtWwpQvOsjbx6g.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:5e:84:00:2c:8e:d8:5f:d1:88:19:c1:b8:eb:29:82:2a:75:
30:cd:b2:7e:2a:67:d4:9a:e6:d6:43:76:84:32:71:f7:9a:1b:
a7:25:99:c9:75:94:e9:8f:1d:a7:84:40:55:eb:cb:6b:54:02:
d3:f8:e9:97:22:10:82:1f:bd:a9:24:c3:ec:69:61:6a:89:58:
f3:a6:f2:f0:ad:e7:04:42:a3:f6:83:6e:a0:e5:2f:3d:05:9d:
50:e5:0c:e0:e2:a9:56:fe:b5:67:f8:47:e7:75:d9:2b:71:ab:
82:8f:92:67:76:3d:32:ec:02:d5:d7:18:b9:20:86:ee:ae:41:
00:5d:4c:81:70:2e:1c:fc:a5:ab:13:72:1f:0b:b6:c8:c9:e3:
89:53:52:12:fa:62:fd:1a:74:61:6f:0f:69:5a:10:7f:ab:53:
47:dc:dd:ad:fd:f2:43:a8:64:76:2b:b2:3b:e9:85:a0:94:a1:
d7:5a:e4:03:13:ce:c5:97:a3:c6:60:32:ff:cf:31:15:db:df:
41:1b:e3:2e:a2:0e:99:8e:32:ce:24:7b:6b:ec:a3:09:c8:32:
48:25:81:77:2c:e3:21:47:b5:21:d7:9c:49:b0:8e:26:c5:a2:
f2:a1:09:96:a5:00:30:15:5f:fc:4a:01:9f:a0:17:47:a1:22:
a6:99:4a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org