Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/6PJy11S7RdwhS1r0kXBeqHRY-Mo.roa
File: 6PJy11S7RdwhS1r0kXBeqHRY-Mo.roa (raw, json)
Hash identifier: rPLHNZynidD8YIRUmXpeR6c4qGU+zmgkkFYtru5uqpc=
Subject key identifier: E8:F2:72:D7:54:BB:45:DC:21:4B:5A:F4:91:70:5E:A8:74:58:F8:CA
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 44A9
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/6PJy11S7RdwhS1r0kXBeqHRY-Mo.roa
Signing time: Mon 14 Mar 2022 00:30:10 +0000
ROA not before: Mon 14 Mar 2022 00:30:10 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17577 (0x44a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 14 00:30:10 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=E8F272D754BB45DC214B5AF491705EA87458F8CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c8:c3:c6:2d:14:53:d0:1f:90:9e:ac:80:08:
d0:49:f7:0a:3a:26:76:1e:53:7e:be:c7:64:0d:27:
28:6c:e8:9d:59:03:07:af:45:5e:93:ad:a2:6e:66:
53:6c:d3:3e:38:04:3c:e8:99:92:f4:74:f0:0e:f8:
94:8d:c0:44:67:5c:f3:64:0f:5c:81:a3:59:61:c3:
c5:5f:f7:86:2d:2c:c7:6c:a1:23:48:44:b3:c4:02:
85:45:ce:eb:41:d1:2f:96:09:19:b8:62:bd:2f:ee:
8e:61:42:b2:4c:33:d3:07:3f:b1:b3:b0:09:0b:16:
62:1a:74:52:51:26:25:b0:6f:b9:33:7e:2c:3d:aa:
9c:b7:db:a2:89:2b:77:30:f4:94:0a:73:c2:eb:91:
18:8f:3e:be:05:56:d4:13:97:b0:09:8d:e9:bf:01:
93:90:db:a4:4e:1c:7b:cd:b7:ce:cf:48:36:1f:ac:
30:d0:d2:38:34:eb:10:8f:56:45:78:2d:80:eb:ee:
a3:86:db:33:77:28:ef:b9:22:e2:37:7d:88:a3:ec:
c1:c9:1b:4f:71:35:19:56:c3:58:47:42:2b:35:38:
da:5d:6f:4f:cc:3c:07:3a:d9:91:41:ec:60:a3:ec:
78:18:73:e5:2d:44:a8:3c:73:64:2a:9d:e9:8e:5c:
11:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F2:72:D7:54:BB:45:DC:21:4B:5A:F4:91:70:5E:A8:74:58:F8:CA
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/6PJy11S7RdwhS1r0kXBeqHRY-Mo.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:72:bc:2b:3a:70:06:46:4d:47:ad:3b:d6:7f:48:1d:c3:ef:
1b:fe:04:4f:c0:22:de:16:70:fa:fb:7f:67:de:47:12:28:d1:
72:6a:17:c9:ca:2c:93:de:7a:ea:72:b4:54:b5:f4:67:7d:7f:
81:d5:74:79:13:b5:0f:ef:60:f2:5e:00:1d:2b:98:19:e2:fc:
ed:7b:0c:64:7b:27:37:f5:0c:b2:b8:25:f8:3e:12:5a:41:28:
17:90:2e:03:42:bb:f1:1e:15:0d:92:25:9a:55:7d:92:15:b1:
ee:ff:4f:f7:d6:95:2e:44:fc:ae:92:72:fe:0a:93:de:b5:5b:
ea:03:6b:b8:f0:e2:65:c1:3f:ae:32:7d:c9:c4:1b:4c:10:b2:
c0:50:0c:63:96:46:69:0c:25:ae:92:19:37:93:66:bd:3f:d3:
f4:34:ec:1c:df:21:ed:3c:24:a0:43:82:4f:53:08:4e:17:c1:
48:c2:4e:39:1e:d1:c5:ad:2d:f0:b2:93:3e:72:36:06:26:a3:
97:a4:db:ea:15:ae:51:14:e4:ee:cb:ff:2a:8c:54:32:e1:ab:
f9:76:1f:3c:23:3d:5c:ad:67:c0:7f:39:82:ba:05:06:b7:de:
eb:c3:38:28:3c:d2:14:0b:ff:ce:a0:3c:3b:d0:d2:49:de:53:
22:bc:f6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:52 2024 by rpki-client on console-fra.rpki-client.org