Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/xF8zgAYNX0ueFlO4woHFDV2t-Lw.roa
File: xF8zgAYNX0ueFlO4woHFDV2t-Lw.roa (raw, json)
Hash identifier: pCsuueULHxfX/QyuS8juUsEmuqaviQbSGNxyGYK1tXU=
Subject key identifier: C4:5F:33:80:06:0D:5F:4B:9E:16:53:B8:C2:81:C5:0D:5D:AD:F8:BC
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 482B
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/xF8zgAYNX0ueFlO4woHFDV2t-Lw.roa
Signing time: Tue 17 May 2022 00:30:08 +0000
ROA not before: Tue 17 May 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18475 (0x482b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 17 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=C45F3380060D5F4B9E1653B8C281C50D5DADF8BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:04:b3:0c:82:4a:f6:14:97:f1:3f:c7:ae:2c:
c6:fa:d4:83:b8:f5:fd:84:6f:46:92:41:57:72:7f:
41:25:2c:51:71:d3:d7:a2:f9:23:99:5b:32:ee:83:
f5:c8:a8:22:2b:e2:75:f5:95:69:7c:2d:4c:cf:58:
f5:af:78:4c:19:11:4f:48:d3:e1:a9:09:8c:18:da:
69:38:23:2b:67:7e:39:22:99:25:a2:46:44:99:37:
d9:de:1e:d3:5a:d0:c3:2e:93:b3:87:3e:ff:0c:8f:
cb:58:ca:90:4b:b7:03:28:93:f4:5a:6d:ae:7e:e0:
a0:31:19:cc:05:dc:51:fb:03:34:12:b3:87:5d:15:
d4:15:9d:05:27:cf:1d:9a:73:b8:0f:fc:b2:60:a5:
00:20:78:36:4b:52:89:b7:b2:4f:fb:25:ef:f8:90:
3d:db:47:dc:78:cb:2e:b5:7f:73:44:97:0f:28:61:
51:cb:f8:e3:52:00:d6:fe:99:8a:ae:21:bf:45:e5:
89:27:1a:68:02:b9:b7:6a:d0:1a:ec:7d:23:7b:ac:
24:54:fa:f5:ee:0a:d3:d8:4b:7c:f3:06:fd:0e:89:
d5:08:cf:66:f3:51:b9:1c:86:8d:f8:77:2b:e7:7e:
d9:63:9c:f4:8e:f7:45:ac:4c:88:37:12:03:ce:c7:
1f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5F:33:80:06:0D:5F:4B:9E:16:53:B8:C2:81:C5:0D:5D:AD:F8:BC
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/xF8zgAYNX0ueFlO4woHFDV2t-Lw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:09:17:cf:34:d8:aa:ed:0b:33:6b:1a:d2:09:b4:f7:51:77:
50:e0:70:a5:fc:d8:d2:5e:c6:68:d8:cd:51:07:85:59:13:24:
1c:42:6f:56:94:25:65:98:fc:a7:06:0a:af:d7:11:2c:bf:0e:
29:89:f1:51:f1:5f:db:76:f3:db:69:75:6f:b0:b9:06:57:72:
fd:47:25:d3:67:34:3c:76:ff:9e:24:dd:8c:c2:9c:6e:79:0f:
fc:f4:57:f7:7a:84:6d:83:11:32:a8:89:61:05:7c:5a:7b:dd:
a8:46:70:9c:74:46:ee:bf:51:cf:23:a8:64:29:81:e4:f8:e4:
0a:31:2d:ed:a2:60:84:76:76:9b:48:f3:25:f4:d6:dd:b3:a7:
64:34:41:c9:e6:8a:e7:89:d7:bd:d4:8a:7f:b0:bb:02:01:a4:
4e:d3:de:2d:20:e3:be:a9:8d:73:8f:7d:d7:a0:a6:14:d5:2d:
8b:88:dc:49:7f:60:ac:94:12:08:48:d5:da:84:6c:05:c8:6b:
c5:f0:73:ae:83:80:62:e4:89:21:7e:fe:5d:42:40:c9:a6:67:
27:a5:71:82:ac:55:f9:5a:1a:4d:07:bf:91:e4:52:72:ae:69:
d9:f8:8c:e3:e6:ac:71:da:a2:98:f4:cf:56:0b:c5:f8:84:53:
64:00:2a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org