Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/7X1jsGlAYTPvhLALEtnOAhDD2aI.roa
File: 7X1jsGlAYTPvhLALEtnOAhDD2aI.roa (raw, json)
Hash identifier: DuaYIg24E9q9ydwgTT6c+niZ+L/N6eHKPOc2zZQ1AUs=
Subject key identifier: ED:7D:63:B0:69:40:61:33:EF:84:B0:0B:12:D9:CE:02:10:C3:D9:A2
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4829
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/7X1jsGlAYTPvhLALEtnOAhDD2aI.roa
Signing time: Tue 17 May 2022 00:30:08 +0000
ROA not before: Tue 17 May 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18473 (0x4829)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 17 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=ED7D63B069406133EF84B00B12D9CE0210C3D9A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1a:2b:0a:e9:66:be:10:a8:da:28:bb:73:99:
70:85:c1:62:8c:cb:8f:23:27:ca:e6:8d:1f:d6:f1:
69:53:35:94:96:c8:ce:68:d5:8e:e7:f8:60:78:b0:
90:57:41:fa:b9:71:21:1c:57:a9:08:17:d9:3d:c2:
52:94:51:a1:71:39:fd:b7:57:af:2a:97:9d:ca:fd:
54:eb:09:46:0a:75:b2:fe:2a:d7:f0:32:37:d7:7f:
dd:ae:1d:70:39:b4:3f:b0:fd:08:86:d4:73:6e:52:
a6:8a:28:48:c2:2a:b2:3c:1e:88:9c:12:28:0a:71:
42:7a:c5:b2:34:9a:0b:9f:f6:47:9e:d4:b0:bc:ea:
35:65:e6:c2:8e:93:70:95:e3:c8:30:5a:11:3d:c2:
24:45:af:a5:7b:4f:0b:ac:dc:5d:24:f8:61:df:96:
ba:45:3e:73:63:7f:eb:07:3d:a4:be:9d:48:27:6e:
96:48:b4:fe:7e:93:b6:3d:ac:a7:e3:b7:05:71:19:
22:eb:0f:91:4d:52:64:7c:e9:7b:a6:27:ac:42:9e:
eb:ff:a2:2d:72:5c:e6:4a:eb:31:a2:78:b5:cf:2a:
1f:a3:b9:8f:7e:14:75:0f:d1:5a:19:48:2f:a4:5c:
ce:09:cb:0c:2d:ae:4a:3a:19:0d:b9:e6:54:1e:19:
b0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7D:63:B0:69:40:61:33:EF:84:B0:0B:12:D9:CE:02:10:C3:D9:A2
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/7X1jsGlAYTPvhLALEtnOAhDD2aI.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:e3:94:e6:a6:22:44:90:30:d2:97:72:9a:03:c6:51:81:34:
b3:81:b4:7a:55:0a:61:64:05:a1:77:7a:42:d7:ed:b5:26:33:
8c:92:bb:69:07:15:45:d6:c5:75:e6:8f:fc:65:fd:cf:6a:fd:
c7:c7:73:06:76:e2:04:c0:2d:82:50:4b:f5:63:c0:93:b5:30:
7a:db:3b:7c:b6:ac:50:c2:93:cf:53:49:ce:12:e8:ac:2b:7e:
bd:3c:cb:17:e3:8a:d7:b5:b0:3c:d7:10:a3:bf:58:fc:11:23:
b1:a4:e3:5f:d5:d1:fe:36:f2:4c:e1:23:c3:70:a3:cd:d1:e9:
06:63:cf:31:c8:f4:64:f5:d5:cc:3f:af:c7:70:73:00:94:01:
ba:dc:98:4a:d3:03:2f:d1:2c:02:41:f4:2e:14:5d:5d:24:ea:
78:47:73:3a:72:44:e3:96:bd:0d:ce:ad:6e:78:0a:7b:b2:2e:
78:00:cd:c5:10:71:64:d7:7b:c7:19:d0:bd:3c:91:b9:4e:c7:
36:18:48:0a:dc:13:4e:6f:22:f8:8a:96:ee:b7:8b:dd:9b:19:
37:ac:7f:a6:d9:34:ac:77:84:27:f9:9f:2f:35:87:00:8b:d0:
fd:73:5e:73:71:f3:0c:40:9e:70:09:aa:fd:e5:72:52:80:42:
e2:4c:1a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:52 2024 by rpki-client on console-fra.rpki-client.org