Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/41TnqAX7wP6iXLPG15SzsvsG1nE.roa
File: 41TnqAX7wP6iXLPG15SzsvsG1nE.roa (raw, json)
Hash identifier: Raln1W5SfgFEYdI2cFSZHCtS7ph0/QjBqBZJfKwy7Mw=
Subject key identifier: E3:54:E7:A8:05:FB:C0:FE:A2:5C:B3:C6:D7:94:B3:B2:FB:06:D6:71
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 42A9
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/41TnqAX7wP6iXLPG15SzsvsG1nE.roa
Signing time: Sat 05 Feb 2022 00:30:08 +0000
ROA not before: Sat 05 Feb 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17065 (0x42a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 5 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=E354E7A805FBC0FEA25CB3C6D794B3B2FB06D671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:74:fc:24:36:87:90:02:40:b8:65:a6:40:79:
23:6c:9e:92:a8:f3:c6:b6:64:28:31:a2:77:8c:b1:
ea:6c:c3:4b:94:86:f6:4d:0f:c8:61:c9:cd:77:2b:
ff:45:34:47:21:eb:80:28:c9:85:a2:6b:a1:91:57:
a3:fd:25:40:4f:2b:00:d1:2b:90:66:9e:64:fe:52:
db:a4:14:c6:ac:a5:c7:5e:b7:b5:f1:2f:26:f1:85:
54:5f:e8:6c:70:7c:ed:63:e0:4d:8a:81:20:f7:b8:
d5:b2:2c:91:fe:18:71:92:bb:a5:cf:17:fe:2d:81:
87:d5:84:25:8c:18:6e:61:9e:f0:9b:63:fe:a2:ec:
47:53:24:71:35:59:5a:0a:0f:21:ba:33:e7:ad:a0:
6b:f3:cc:a4:8d:0d:0c:37:f6:d4:40:77:64:b7:05:
35:1e:34:99:45:b6:ee:f7:70:de:05:47:72:4b:b9:
d2:13:03:51:0e:f0:2e:a7:ae:91:24:17:7e:53:69:
8e:9b:d7:9b:80:71:c4:cb:b4:4a:f0:9c:0d:e0:19:
3a:b9:86:d1:b9:66:07:2a:1d:7c:90:f6:60:18:be:
e5:eb:ad:2c:d6:5e:f9:c1:e2:9d:75:de:a8:3f:70:
50:7a:f4:02:7d:57:87:25:e9:73:00:62:0e:03:d3:
b6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:54:E7:A8:05:FB:C0:FE:A2:5C:B3:C6:D7:94:B3:B2:FB:06:D6:71
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/41TnqAX7wP6iXLPG15SzsvsG1nE.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:f8:fe:dd:0a:23:01:ca:46:67:42:a0:c6:15:26:54:48:5b:
58:c7:9c:bb:b7:49:d2:65:ea:c1:91:b6:9f:d4:87:39:b1:04:
b3:36:53:07:1d:cb:2d:81:2e:e3:3f:a4:34:5d:72:88:b2:b8:
21:f0:ea:a5:09:8c:0b:37:ec:b0:e1:df:0e:a6:92:05:2f:32:
d8:7a:84:bb:9e:85:28:df:dc:3a:c3:b4:1e:5f:a5:d5:d9:43:
ec:fe:18:75:11:c4:b7:af:8d:76:43:5c:fa:55:9b:f3:79:f8:
3a:75:3c:9e:73:4a:bd:49:39:83:ea:1c:03:22:a9:d2:b6:76:
fa:a5:22:f9:e9:01:f1:d0:5e:41:5c:f6:6c:1d:0c:dc:23:e5:
f5:bf:ca:1f:e2:a2:5a:3a:3e:41:5c:9e:68:bc:a8:c2:95:23:
4c:37:eb:ec:4d:64:ec:f1:21:dd:78:13:00:ef:d9:3e:2c:1a:
ce:ca:ac:b0:7a:f5:a1:87:8d:77:99:b5:bb:91:36:3f:f2:cc:
7d:8f:39:20:d1:08:32:6b:0f:70:72:02:fd:25:18:71:4b:ba:
13:8e:78:ad:31:cb:3e:e5:0b:01:e3:ed:5d:a2:7c:e0:5a:4e:
55:77:14:f8:8c:3d:50:75:e6:43:c7:5f:02:4b:93:2d:17:bc:
ae:b0:c5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:52 2024 by rpki-client on console-fra.rpki-client.org