Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/4bd1jHgPALPZRbwDFUhUAt-fkJU.roa
File: 4bd1jHgPALPZRbwDFUhUAt-fkJU.roa (raw, json)
Hash identifier: qobmvQspGguClS1XHISwq0/ZPooaGyiGf0hfUfaRGa8=
Subject key identifier: E1:B7:75:8C:78:0F:00:B3:D9:45:BC:03:15:48:54:02:DF:9F:90:95
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 48EE
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/4bd1jHgPALPZRbwDFUhUAt-fkJU.roa
Signing time: Tue 31 May 2022 00:30:09 +0000
ROA not before: Tue 31 May 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18670 (0x48ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 31 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=E1B7758C780F00B3D945BC0315485402DF9F9095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c3:24:ac:ec:1e:ea:bd:b1:48:9e:ca:7a:8f:
25:f1:bc:58:5b:af:10:06:38:30:f2:f2:e2:cb:7d:
d8:c6:71:82:8e:a0:b3:23:6b:92:f4:da:10:9a:e0:
c4:83:65:85:72:f8:52:e1:ed:7d:44:4e:f3:2b:a0:
bf:47:c3:6e:20:4f:98:d9:51:9a:f1:e6:ea:6c:24:
ea:e4:8f:3a:c6:c5:ac:be:ab:d9:6c:cf:0d:07:e3:
26:83:7b:d6:f4:82:3b:94:b2:5e:77:72:34:a0:12:
02:11:d2:c2:1f:2c:f2:7e:23:45:a6:40:b8:c6:75:
2b:b9:43:9d:c2:db:a9:73:5a:a9:bb:94:4c:cc:90:
24:c0:f1:63:b3:4e:52:a8:68:cc:64:39:76:ff:0c:
26:3c:33:2d:ec:e0:6a:d6:26:84:54:e8:17:50:dd:
7a:e8:9a:cc:18:5e:2a:57:a1:3d:65:c4:a6:87:35:
df:7b:29:4b:61:bd:68:4f:4f:04:4f:07:6a:37:98:
3d:75:38:d4:d2:21:68:4f:3c:14:10:a7:6e:bc:dc:
71:de:00:03:2a:07:8c:15:e1:4d:7b:a2:97:22:1c:
dc:82:57:fd:54:77:01:17:1a:f1:f3:0b:4d:7d:f1:
74:20:47:9f:f3:e4:6b:45:86:57:e6:2f:00:1e:d4:
88:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B7:75:8C:78:0F:00:B3:D9:45:BC:03:15:48:54:02:DF:9F:90:95
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/4bd1jHgPALPZRbwDFUhUAt-fkJU.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
76:82:80:11:e2:33:7b:d0:d3:f4:e9:9d:90:a6:61:d0:32:77:
83:e9:a2:00:55:f7:7f:85:e3:5e:ae:d1:ad:98:d3:2d:e3:1d:
25:6d:9d:8a:ff:5b:59:e1:0b:ab:76:d4:51:2f:3f:f5:3b:b8:
9c:72:04:4b:2b:69:df:ac:13:eb:ae:2b:45:96:c1:bd:c5:49:
54:2a:4b:7b:55:22:ce:e0:f1:02:39:04:d8:ef:cd:35:1a:c2:
5e:11:df:e9:67:ff:ab:5c:e4:fb:a7:02:0b:bf:5a:2e:c9:d2:
38:35:b4:90:8c:da:82:b5:54:9d:00:29:08:11:9f:05:ff:88:
3e:95:01:a0:6c:67:00:69:89:4b:7e:cc:00:89:e4:56:5d:fa:
77:2b:fd:06:b3:b7:35:df:f3:36:a9:74:0b:4f:bf:4f:7c:ad:
14:fe:57:63:fb:37:d0:61:f4:e6:97:18:ef:a3:79:3c:2c:d4:
2c:cb:33:18:69:60:13:cb:75:93:89:9f:50:9c:f6:7d:e3:38:
68:9f:71:c7:8c:ef:18:4a:12:96:4f:4f:a5:02:e9:1c:88:88:
10:9b:1d:b0:59:ec:96:d7:a5:d6:12:cf:67:2e:77:37:e4:d2:
15:2b:e0:7e:af:dd:4b:e7:fb:10:00:02:f1:7d:87:9b:0b:3c:
03:d1:c1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:52 2024 by rpki-client on console-fra.rpki-client.org