Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/5Kh-Rh2eZADYGboOWl_zXdDHVwc.roa
File: 5Kh-Rh2eZADYGboOWl_zXdDHVwc.roa (raw, json)
Hash identifier: ZpSRFvhBbZiiFqloVvkWzva0HuUCwSH/Vbn2peenaAE=
Subject key identifier: E4:A8:7E:46:1D:9E:64:00:D8:19:BA:0E:5A:5F:F3:5D:D0:C7:57:07
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4395
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/5Kh-Rh2eZADYGboOWl_zXdDHVwc.roa
Signing time: Tue 22 Feb 2022 00:30:10 +0000
ROA not before: Tue 22 Feb 2022 00:30:10 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17301 (0x4395)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 22 00:30:10 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=E4A87E461D9E6400D819BA0E5A5FF35DD0C75707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a0:0b:0c:76:7c:49:85:82:5b:f2:dd:c9:88:
e9:6a:6a:3f:4f:47:7c:cd:7c:e3:a5:93:9a:84:1c:
28:54:89:ab:42:ba:62:2e:0a:be:43:76:95:10:5d:
da:54:1d:b8:f1:d1:c3:f1:e2:a2:00:f5:3b:cc:33:
ba:1e:4d:d3:8e:40:ff:b7:8f:ea:c8:fa:ae:52:1e:
49:ee:2a:ad:d8:04:21:ab:45:ed:21:cb:b5:35:9a:
04:2e:61:02:41:26:67:48:0d:a2:37:81:df:71:b9:
30:b3:87:d7:5b:b8:b6:6f:d5:e7:6a:1c:39:07:29:
4a:6a:62:30:9e:22:2f:a4:02:11:cc:f9:91:01:1f:
97:45:01:9c:4a:59:54:67:e9:32:ff:73:01:e5:1c:
72:76:b5:70:ba:4d:a0:3f:96:72:8d:95:2f:3c:11:
6b:51:33:74:ef:23:1f:c6:34:54:5c:98:41:dc:60:
78:14:04:99:6e:d3:e4:d4:99:10:3e:5f:23:7c:ad:
37:40:c7:a0:48:16:e6:ed:21:8e:95:b8:ce:6f:2c:
bd:68:3e:6b:ae:d9:83:a6:91:9d:d6:1c:be:1e:36:
eb:ba:53:a5:23:57:59:e9:39:50:9b:e8:7c:f0:74:
5b:3f:45:54:94:a3:7a:ee:4f:1d:e4:43:5b:84:24:
bc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A8:7E:46:1D:9E:64:00:D8:19:BA:0E:5A:5F:F3:5D:D0:C7:57:07
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/5Kh-Rh2eZADYGboOWl_zXdDHVwc.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
27:61:88:55:9f:51:7f:fd:a3:57:b4:6b:98:b4:68:a7:4c:ec:
45:8d:ea:a7:c4:db:55:22:b7:fa:24:bc:4d:0b:ab:8d:c1:90:
25:45:19:f4:08:61:69:82:7e:7f:ce:ad:0e:83:1e:20:40:db:
c5:df:7f:e5:87:f1:65:a6:71:d4:41:eb:04:69:f7:cb:87:84:
69:7e:70:34:6c:29:41:c0:36:ea:70:84:b3:3a:31:ad:54:01:
19:b1:6a:79:a0:86:7f:e0:88:94:4c:60:f4:e2:4e:06:ab:76:
b8:e6:23:50:fa:80:88:20:ad:8c:00:5a:3c:be:f7:e8:db:44:
32:61:ce:ef:48:99:01:0b:37:80:09:0f:74:64:5c:69:59:d7:
05:d3:af:e4:7d:e3:f5:55:3e:76:69:66:75:0e:83:f3:b7:e7:
63:bd:67:50:e3:ae:1e:b6:23:ef:8c:1e:54:a0:70:10:ba:8b:
43:8e:31:43:50:9d:ff:87:3c:5e:ce:2c:3d:36:54:62:ac:c9:
49:5a:d0:25:4e:c9:5e:62:19:d9:fa:14:a0:ac:ff:7e:38:17:
e3:32:0c:6f:57:c9:73:0b:d2:67:82:78:c8:ad:df:ba:2c:84:
76:83:c2:db:a9:d6:cc:d0:c4:99:ef:f6:b1:d7:13:a0:51:7c:
1e:bc:c1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:52 2024 by rpki-client on console-fra.rpki-client.org