Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/4syHW_qQzS7Y51WHIKlACg9uMUg.roa
File: 4syHW_qQzS7Y51WHIKlACg9uMUg.roa (raw, json)
Hash identifier: h1HIxQ26m0KJh+xWGcPaMrZXoVszjVLRe+ixWyJua+s=
Subject key identifier: E2:CC:87:5B:FA:90:CD:2E:D8:E7:55:87:20:A9:40:0A:0F:6E:31:48
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 45F4
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/4syHW_qQzS7Y51WHIKlACg9uMUg.roa
Signing time: Thu 07 Apr 2022 00:30:06 +0000
ROA not before: Thu 07 Apr 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17908 (0x45f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 7 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=E2CC875BFA90CD2ED8E7558720A9400A0F6E3148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fb:b6:99:66:a9:4c:7d:40:f0:b0:2d:44:7e:
4f:4c:f2:a3:62:e2:89:9d:a9:77:43:85:ca:89:2a:
27:aa:c0:c2:dd:63:ff:0d:b9:45:70:9c:9f:f0:cf:
74:06:ba:da:9c:80:cb:6d:eb:8b:ea:be:c0:b5:63:
fc:d8:08:10:ea:0f:8a:75:89:b6:f5:b1:5f:79:86:
32:3c:07:c7:ea:93:7e:fd:cc:e9:22:0c:06:ea:19:
5a:a8:7c:58:70:17:b4:f8:19:33:0f:bf:3a:80:4a:
e0:bc:cf:94:33:92:a0:f1:83:31:a9:9e:18:4d:4f:
25:3e:64:e9:53:7a:46:ed:5b:bb:10:2c:c0:c5:b9:
a0:63:2a:e4:54:f1:12:51:6e:f6:60:a5:7b:d2:0a:
9b:59:81:6b:53:a0:9f:aa:5a:f5:cb:25:15:ee:7a:
db:d8:ef:53:60:62:11:dd:8c:72:e8:41:8b:36:48:
93:37:90:f7:20:1b:eb:c0:dd:56:f6:b5:70:bb:32:
de:08:90:ff:cd:16:f5:4a:ab:56:72:27:ee:7f:a0:
1a:8d:bd:41:e1:4a:45:55:31:3a:a1:cc:d9:f7:f6:
ae:57:45:f5:05:aa:42:2f:96:17:53:91:bd:06:4c:
fa:d7:48:36:f6:66:0f:4d:b0:8f:99:6d:11:c1:02:
70:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CC:87:5B:FA:90:CD:2E:D8:E7:55:87:20:A9:40:0A:0F:6E:31:48
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/4syHW_qQzS7Y51WHIKlACg9uMUg.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:8f:a4:f4:0b:52:9d:d6:c9:d0:bb:46:71:1e:ca:40:2e:43:
2e:44:70:d6:8c:a2:05:b2:23:73:3c:da:ae:b4:e4:ea:c0:88:
1d:77:32:f8:11:21:4a:b1:c7:da:8e:5f:dc:14:6a:36:21:fe:
27:0c:da:ac:09:9b:c2:6d:74:6e:2e:ac:c1:05:9d:07:48:5e:
9b:70:b5:f4:6d:2f:15:67:2b:06:af:f7:61:4e:85:30:32:f8:
48:b3:05:29:71:a5:5f:fb:e5:9f:41:6d:12:e8:22:a8:80:26:
23:c7:08:ea:b3:fe:8c:0f:b6:1e:22:bb:f3:bd:b1:ff:5b:8a:
28:fc:bd:0f:f8:e3:eb:fb:40:ed:d0:aa:8e:4b:32:95:5e:6e:
7f:38:df:cb:f0:16:f7:c0:7f:0b:48:3c:3f:62:dd:ff:8e:9d:
19:58:9c:26:d9:13:ed:4f:a9:1e:79:32:73:73:60:40:f9:58:
ec:86:23:a8:d8:0f:78:b0:17:c1:ae:cd:bd:37:22:9b:db:37:
c0:df:7a:15:c2:d3:8f:25:27:a6:8d:f8:e9:3c:b9:74:6d:f1:
4f:66:04:5b:75:0e:99:4b:6e:84:e0:db:25:3b:bd:3d:9c:0c:
67:b8:ec:70:0a:64:20:63:98:c0:7f:e7:01:e1:45:49:f9:51:
59:ae:c4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:52 2024 by rpki-client on console-fra.rpki-client.org