Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/tGW9RCmsNaIgVtRO8JIVPBUi4nU.roa
File: tGW9RCmsNaIgVtRO8JIVPBUi4nU.roa (raw, json)
Hash identifier: o+JKcTs+fWtHayIiaIXYFGL7WCexYw0bw/3kW7vf04Y=
Subject key identifier: B4:65:BD:44:29:AC:35:A2:20:56:D4:4E:F0:92:15:3C:15:22:E2:75
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 33DF
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/tGW9RCmsNaIgVtRO8JIVPBUi4nU.roa
Signing time: Wed 14 Apr 2021 10:34:45 +0000
ROA not before: Wed 14 Apr 2021 10:34:45 +0000
ROA not after: Fri 01 Apr 2022 01:01:03 +0000
asID: 47065
IP address blocks: 147.28.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13279 (0x33df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 14 10:34:45 2021 GMT
Not After : Apr 1 01:01:03 2022 GMT
Subject: CN=B465BD4429AC35A22056D44EF092153C1522E275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c5:91:80:49:74:d7:fd:8c:5f:a7:96:bc:62:
a4:b2:66:be:89:d4:5e:66:0a:b4:6f:a2:8c:e7:4e:
a5:2d:83:e1:9c:6b:8e:6c:6d:53:bd:bf:72:85:96:
f3:d9:f4:d4:48:a8:91:ef:e4:04:94:ba:17:76:e6:
56:fb:dc:2c:25:63:c2:ad:45:b4:cc:fe:e6:d9:97:
83:75:84:5b:84:66:96:2f:38:49:f5:f5:ab:97:96:
b3:08:c7:85:c6:bb:ca:3b:35:27:5f:8c:b8:7e:39:
c1:f7:e1:bc:38:7c:93:6f:2f:f3:99:2d:b0:8b:5d:
ce:71:0f:74:05:90:df:f8:49:f8:4f:73:48:ab:ce:
f2:dc:c1:f9:2f:9e:fc:c5:23:86:44:b4:0a:f0:0d:
b9:34:7a:ed:fa:de:c9:23:35:71:fa:d2:5c:62:e1:
ce:0d:ed:6a:fd:5a:86:4a:97:94:37:44:16:9c:cf:
7c:20:dc:ca:7e:fd:fb:6d:d3:e2:fa:e8:56:8a:4d:
22:10:4f:66:a1:9f:c4:01:54:14:2c:12:aa:a4:6b:
88:59:1e:67:97:28:68:0f:7a:39:6e:52:1b:87:70:
98:d5:0e:63:92:3b:0b:17:93:ba:06:23:13:da:a4:
99:3b:41:a5:13:4e:ce:e9:fd:03:2d:2b:fe:b5:0a:
01:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:65:BD:44:29:AC:35:A2:20:56:D4:4E:F0:92:15:3C:15:22:E2:75
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/tGW9RCmsNaIgVtRO8JIVPBUi4nU.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.14.0/24
Signature Algorithm: sha256WithRSAEncryption
11:61:42:33:04:70:41:c3:95:5f:9f:85:5e:d5:d2:b7:20:79:
d1:c3:f7:2b:26:52:8f:5f:83:cd:01:e1:a1:62:72:b4:da:72:
09:f1:ac:f7:fb:e1:2c:f5:9a:43:b8:d9:cf:61:2f:bf:5d:55:
82:e7:19:be:1c:b6:1a:41:e5:78:6a:3e:a1:fc:0e:42:51:d4:
07:44:72:6e:98:b8:35:45:07:03:83:84:20:29:9e:db:e6:11:
33:01:2c:bf:91:cd:53:98:32:20:6c:f9:e4:8a:47:1a:1e:97:
34:de:3b:1a:2b:25:34:76:50:d5:a4:d4:95:b1:ed:f4:9c:e1:
6f:fc:10:fe:03:97:35:52:c3:f0:76:f5:14:cc:03:79:9d:86:
cb:c9:48:95:2b:07:db:eb:a0:19:f8:83:4f:df:ad:38:e2:ce:
dc:c9:41:e4:43:ac:35:ee:3b:e4:92:bc:ee:5d:c8:8a:43:c6:
37:5f:ca:af:5b:19:08:c2:a9:d0:dd:a2:1a:15:24:44:5e:7b:
64:7c:88:81:67:92:aa:e9:76:42:db:fd:eb:84:33:b1:da:56:
65:ea:74:7d:6e:ee:15:ca:92:e3:59:85:a1:8f:34:f4:8f:3a:
75:4b:2a:d3:47:1b:23:14:68:d6:a8:94:47:73:f1:54:de:19:
90:a4:2f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org