Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/-rCrasnIOiP3rYSWm9zk_HK8Fro.roa
File: -rCrasnIOiP3rYSWm9zk_HK8Fro.roa (raw, json)
Hash identifier: WYD3Z3ws+fr+1xPmDq6VqfqFyLA5PRN81VgZ76w7QhQ=
Subject key identifier: FA:B0:AB:6A:C9:C8:3A:23:F7:AD:84:96:9B:DC:E4:FC:72:BC:16:BA
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4353
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/-rCrasnIOiP3rYSWm9zk_HK8Fro.roa
Signing time: Thu 17 Feb 2022 00:30:07 +0000
ROA not before: Thu 17 Feb 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17235 (0x4353)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 17 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=FAB0AB6AC9C83A23F7AD84969BDCE4FC72BC16BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c4:88:b1:52:40:9e:fc:66:3a:de:b8:0f:37:
77:82:d3:ee:4b:6e:a4:d2:42:02:19:f7:84:d0:73:
fb:ca:af:76:e5:6d:8c:63:af:5f:86:fb:b2:be:ba:
93:c1:30:7e:4e:d7:10:d5:26:bf:55:9a:80:7c:26:
77:7f:3c:b6:25:fc:66:56:ab:06:d8:7d:c2:44:2c:
66:cf:af:09:54:06:f3:ce:90:c9:92:c0:34:78:ad:
67:88:e4:e9:47:cf:02:9c:97:59:50:bc:43:de:98:
56:09:7c:22:03:da:10:40:7a:8c:ab:5a:a2:95:8c:
d9:ef:06:01:f3:af:5f:99:20:3f:47:6b:51:9b:dd:
72:13:07:73:ab:0e:e5:45:ff:ee:5e:cb:45:a8:be:
21:54:c2:19:ec:cf:6b:a0:01:df:19:dd:55:71:df:
4a:fc:86:0b:3f:a5:c8:dd:35:40:70:33:f3:95:ae:
15:63:4d:05:3d:fb:66:a1:ec:51:7c:63:82:6e:ec:
f3:e7:a6:c4:49:4c:b3:1c:77:4e:5b:45:8c:8b:87:
9b:45:3f:67:f7:63:98:cb:41:4f:c4:bb:7b:b4:87:
30:d0:14:74:da:74:a4:54:62:38:68:d3:a9:19:b9:
a1:27:91:ac:a7:c6:6c:50:25:f0:d2:19:fb:0f:1f:
08:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B0:AB:6A:C9:C8:3A:23:F7:AD:84:96:9B:DC:E4:FC:72:BC:16:BA
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/-rCrasnIOiP3rYSWm9zk_HK8Fro.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
24:49:fa:c6:17:a0:7c:28:92:19:43:d6:f1:4a:d9:01:f5:d4:
09:26:47:1f:36:a8:72:dd:1d:d3:28:f0:49:3f:0f:d2:c8:1a:
aa:fb:27:03:96:46:58:3d:6a:d2:89:54:43:b9:12:1f:03:27:
1c:76:67:c4:af:7a:45:ea:80:bb:60:de:6e:c6:61:70:a6:67:
5e:bd:5f:b0:76:56:52:82:e2:c2:88:1a:ef:9c:4c:2d:21:02:
0d:ce:2f:1a:64:d3:61:b4:f9:ef:00:40:b5:b2:3a:77:b4:63:
51:90:ec:9e:83:03:fa:29:3b:89:d0:f0:c5:2a:2f:08:06:c2:
e0:2c:66:55:f3:0a:a1:42:6f:a8:1b:32:e3:38:e5:04:a5:b0:
5a:b5:b4:5f:ef:38:2a:22:94:6d:ef:41:99:f7:be:0d:ec:b0:
ef:54:b0:fc:7a:bf:af:c4:09:35:da:35:b9:d7:17:90:ad:1b:
c8:31:9a:94:07:3b:13:f9:f2:06:7f:2b:69:d3:6d:c4:84:2e:
a8:e9:2b:e2:03:c2:10:98:96:22:c4:a6:14:d2:f6:f7:c7:bf:
d6:d0:ae:33:0c:5f:8e:97:66:ae:e2:83:d0:82:d9:69:7e:9b:
4c:b7:50:ec:f0:7f:92:a4:98:ce:59:e5:81:7c:b9:4a:ba:67:
ff:f7:46:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:52 2024 by rpki-client on console-fra.rpki-client.org