Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/1CH10EDSMC0JEaE4_bgR4Kp5DT0.roa
File: 1CH10EDSMC0JEaE4_bgR4Kp5DT0.roa (raw, json)
Hash identifier: QZrua9mlnyLdVWCOpYS+MbFqwgigdJVLJvpTqKgMRq0=
Subject key identifier: D4:21:F5:D0:40:D2:30:2D:09:11:A1:38:FD:B8:11:E0:AA:79:0D:3D
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4245
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/1CH10EDSMC0JEaE4_bgR4Kp5DT0.roa
Signing time: Sat 29 Jan 2022 00:30:07 +0000
ROA not before: Sat 29 Jan 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16965 (0x4245)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jan 29 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=D421F5D040D2302D0911A138FDB811E0AA790D3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a4:a7:9f:de:62:86:b5:14:f4:07:53:b3:af:
96:73:7e:0a:4b:33:7f:2b:12:7a:22:84:0a:70:86:
b8:57:f5:c6:8e:cb:6c:26:dc:cd:aa:59:72:a3:14:
35:d0:26:f1:63:63:ef:dd:ab:4c:e1:d1:e3:b6:fa:
1e:d2:dc:25:83:c4:8c:f2:9d:8e:3c:99:be:23:25:
3d:68:01:7a:21:8e:d2:c6:42:43:4f:c6:95:1b:f5:
6f:e6:d2:91:55:f1:1b:99:7a:45:fe:13:c3:c0:8b:
41:e5:10:68:58:a8:46:fb:4c:ca:64:76:ca:30:7c:
d8:4f:8c:ae:5d:e2:e8:8f:18:99:23:53:8e:44:bf:
d9:bf:23:23:68:0c:8c:36:39:a5:ac:99:33:ec:17:
fc:5e:b8:29:e2:be:fd:b4:0c:bd:78:87:13:80:06:
e7:14:7e:c8:6d:6b:79:77:04:b5:47:b8:84:71:83:
8b:0e:e3:8b:60:42:98:4a:f4:54:5f:38:4d:7e:e7:
c9:7c:b6:83:0c:15:bc:e8:e9:72:a0:b8:d3:3e:d4:
68:e0:3d:d1:6d:63:92:c0:f7:77:6c:9a:6d:dc:a0:
2c:1f:0c:d9:f3:f8:26:87:9d:3b:20:18:96:7a:cd:
07:f3:5e:f4:ce:e1:c6:6e:1e:93:1d:71:2c:b7:e0:
05:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:21:F5:D0:40:D2:30:2D:09:11:A1:38:FD:B8:11:E0:AA:79:0D:3D
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/1CH10EDSMC0JEaE4_bgR4Kp5DT0.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
79:25:df:b3:16:61:34:2b:b2:2c:88:bd:70:28:e0:64:ac:d3:
a9:e6:a2:6b:90:30:f1:e1:e5:02:88:ea:7f:c6:0e:ec:52:98:
f4:ba:86:8f:6a:cb:fe:e2:30:ed:a2:d5:ce:83:06:50:eb:5c:
70:4c:a1:5d:6c:59:00:39:ca:a1:f4:0c:0d:62:9d:86:c2:71:
9e:49:a1:d6:0d:1f:ce:a1:ca:42:5c:76:a7:db:06:15:37:90:
50:81:0b:1a:04:6f:c8:30:d9:46:e6:66:6d:e4:a8:e1:3f:d7:
1a:03:0e:a5:23:10:d0:e0:99:b2:4a:98:67:b6:0b:90:e1:c8:
c6:6c:a2:1c:aa:11:3b:e0:26:65:99:1b:97:1a:16:15:93:09:
b1:03:00:09:bb:cf:79:8c:95:2f:c2:e2:58:fa:12:3c:0f:4d:
ed:51:95:2a:7c:af:ea:f9:16:fb:5b:ea:28:06:c6:ac:97:1d:
5a:25:d0:28:03:94:05:f6:24:8f:8d:62:65:93:5d:7d:84:74:
6e:d4:ae:7b:73:2f:19:aa:ca:ae:dc:3b:b6:53:0e:b0:3b:c8:
9e:57:cd:93:b9:03:ef:f4:66:64:34:11:c7:6a:60:70:32:84:
dd:0e:03:ac:9b:e4:74:5a:9f:a0:f7:69:4a:03:98:61:14:d2:
42:6e:23:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:52 2024 by rpki-client on console-fra.rpki-client.org