Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/tNCGkp0k-Zhruwg6R2_83YnNCNk.roa
File: tNCGkp0k-Zhruwg6R2_83YnNCNk.roa (raw, json)
Hash identifier: hBQI9KMfyHiyLsUnrWcCPwC0aaCKUl+IiMZYmo9MFEI=
Subject key identifier: B4:D0:86:92:9D:24:F9:98:6B:BB:08:3A:47:6F:FC:DD:89:CD:08:D9
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 480B
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/tNCGkp0k-Zhruwg6R2_83YnNCNk.roa
Signing time: Sun 15 May 2022 00:30:07 +0000
ROA not before: Sun 15 May 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18443 (0x480b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 15 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=B4D086929D24F9986BBB083A476FFCDD89CD08D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fe:74:b8:72:63:2c:16:a5:69:7a:f1:e3:a9:
7b:7b:a9:ea:4b:d9:5b:cc:c8:bf:fd:a2:40:fb:f0:
7e:13:bf:a8:a6:2d:06:d4:69:3b:3f:8c:81:8c:b9:
a6:5e:20:3b:25:17:5f:81:66:f1:45:49:7e:42:0d:
51:af:02:2b:3e:e8:7c:ba:7c:85:b0:f4:01:0b:a1:
28:47:8e:b7:a7:eb:e4:5e:84:c6:73:bf:6b:f1:04:
7e:53:9f:51:e2:d9:d1:78:aa:19:0d:20:12:72:8c:
b3:5b:5f:1e:c8:b5:77:8f:e0:fa:35:f9:32:d6:f8:
e0:07:03:7d:81:ee:fd:64:f6:5b:e2:66:ca:3b:89:
8a:97:ac:9c:a8:f4:75:6d:e3:87:cb:fc:9a:a1:32:
c5:0b:ba:08:e6:ec:83:7c:41:a8:0c:05:9c:73:a2:
f2:1a:5b:c4:47:80:ba:db:2c:86:dd:a4:5a:83:cd:
0a:79:1a:61:59:bd:2a:99:c3:d2:49:59:81:3e:8c:
c9:04:31:52:ab:57:d4:33:71:ce:5f:e2:b7:73:ff:
1a:8c:de:20:1a:71:d4:d7:54:ab:21:0d:da:e6:b2:
0d:ec:09:fd:08:c9:ba:6f:1e:f6:92:09:bc:80:01:
90:92:a0:4f:7b:9c:42:61:f0:9c:4c:79:b9:7d:6f:
f4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D0:86:92:9D:24:F9:98:6B:BB:08:3A:47:6F:FC:DD:89:CD:08:D9
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/tNCGkp0k-Zhruwg6R2_83YnNCNk.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:ff:28:3e:ff:3b:7d:49:07:74:e0:2f:eb:dd:fe:7b:79:28:
ac:77:19:4f:4e:bf:58:3a:14:44:a2:a3:a9:8f:b8:c8:80:ed:
11:03:64:15:7e:fe:5b:6b:a1:a8:fd:5f:1f:9c:b7:d9:27:90:
79:3a:2a:6b:2f:18:c2:2a:8b:52:51:99:5c:fe:d0:98:ba:8a:
c1:3d:d6:cf:a7:d8:68:54:46:28:90:66:f2:90:7e:a5:0f:40:
de:67:ff:aa:35:f2:c5:73:1f:80:1e:ce:c9:c6:13:01:0b:57:
c8:78:30:9a:47:1c:49:d8:ba:1c:f9:3f:53:5f:93:a0:be:48:
4e:0a:10:d5:f5:a6:3b:50:2e:c9:d2:01:da:31:ca:4f:4d:67:
a6:71:35:06:e0:28:eb:db:63:ce:1e:1b:b5:6b:3f:3f:ee:d9:
49:d3:6d:dc:47:87:51:31:1f:4b:b4:31:22:45:f0:63:cd:66:
8e:98:e5:8f:a6:8a:b9:cb:15:7b:43:cd:53:99:01:5b:25:b7:
80:ce:61:ae:0a:af:f4:58:3b:7f:55:bc:91:77:2b:6e:85:b6:
b1:80:18:11:a9:69:8b:d9:91:1a:3b:2b:17:03:2a:b2:34:af:
79:e0:e8:8d:7d:c5:e2:8b:ab:75:f8:b3:b1:a6:49:78:5b:4a:
35:28:b7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org