Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/6LSaq4eTmzkleUli_Vxv5qLDLmw.roa
File: 6LSaq4eTmzkleUli_Vxv5qLDLmw.roa (raw, json)
Hash identifier: QFenl4YNGFEgTvGU3jOcVnSlmJbrUb5FCMQs2FThXEY=
Subject key identifier: E8:B4:9A:AB:87:93:9B:39:25:79:49:62:FD:5C:6F:E6:A2:C3:2E:6C
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 48C1
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/6LSaq4eTmzkleUli_Vxv5qLDLmw.roa
Signing time: Sat 28 May 2022 00:30:06 +0000
ROA not before: Sat 28 May 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18625 (0x48c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 28 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=E8B49AAB87939B3925794962FD5C6FE6A2C32E6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:80:af:43:3e:e1:2f:21:22:d1:f6:de:d1:68:
45:45:11:0c:af:2b:d6:5f:80:1a:cd:e1:5d:6b:60:
b8:37:6c:e7:68:2c:f8:bd:72:5f:88:68:13:9d:dd:
dd:cf:8c:78:2d:d5:1b:49:80:af:1b:ed:05:f5:20:
5a:fa:4c:28:5b:6a:26:88:03:27:6b:fc:d5:23:25:
17:96:55:f1:44:75:26:a0:90:6d:79:05:00:c4:d9:
cf:85:0b:e8:45:9a:ff:76:ac:13:97:10:95:c9:a7:
d6:c8:3a:03:44:67:fa:24:e5:e4:40:eb:d2:4e:03:
1a:50:bb:e6:ca:ea:b6:53:74:1a:7e:2c:6c:ff:12:
cc:38:6a:be:02:a0:65:16:99:93:ff:af:46:2e:44:
c2:bb:cc:2d:a1:cc:b2:90:1f:ca:df:70:8d:4e:c6:
70:42:b8:c1:9a:df:49:57:be:93:1d:6d:10:91:a4:
ac:43:2c:34:4c:43:ac:95:a0:8f:69:f5:79:a5:7d:
66:3f:31:8d:f8:14:2a:ce:88:36:6f:8a:a3:8c:0f:
3e:9e:a7:bf:a0:f3:87:7e:17:65:87:2c:9f:0c:5b:
d0:b5:93:37:77:34:ce:61:3b:1e:a8:ce:81:48:f0:
f1:4f:81:10:e4:fc:d5:25:8c:35:39:07:f9:63:42:
d5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B4:9A:AB:87:93:9B:39:25:79:49:62:FD:5C:6F:E6:A2:C3:2E:6C
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/6LSaq4eTmzkleUli_Vxv5qLDLmw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
57:5e:af:c6:33:ab:19:b0:db:6c:de:22:9a:d5:68:e0:5b:de:
e4:61:b0:64:02:61:f7:21:66:d8:19:dc:fd:db:7f:16:f3:de:
31:6e:9c:bc:50:c0:d1:3d:dd:95:0f:4d:e5:65:f5:1b:50:55:
0b:ff:2c:c9:ef:a2:be:cf:be:11:46:e8:d6:bc:fe:04:89:d7:
fa:b4:29:d9:21:af:93:63:e6:ce:93:19:15:7d:50:0d:83:d5:
1c:27:4b:0d:94:1a:42:0a:69:02:b2:4c:1d:46:9a:d7:ce:90:
7d:9b:6a:90:a8:d2:93:76:8f:6f:38:14:b0:4a:34:80:a8:51:
f3:e3:af:d3:32:23:3e:b9:37:d4:f9:92:2b:36:d7:35:f1:d1:
22:f4:bc:30:7c:ab:3c:56:65:f5:39:21:11:35:fb:9c:4b:ef:
33:ed:d0:5b:1e:89:9f:fb:dd:8e:8a:c0:5a:9f:55:3d:a2:35:
0d:1e:7d:cf:80:04:6c:20:cf:2f:c1:b2:30:2b:9a:e7:04:27:
f7:14:b0:a0:ba:5b:47:ed:67:18:14:6c:01:5d:0e:31:58:83:
29:b8:58:1c:4f:d1:01:da:82:56:cd:8f:15:6c:a0:78:b5:0a:
19:bf:63:23:cb:0d:21:c8:e3:de:1d:0e:f1:87:11:12:3b:8c:
a0:27:6c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:52 2024 by rpki-client on console-fra.rpki-client.org