Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/7ug5X68ttph1Tjkag9XeEs7F-4E.roa
File: 7ug5X68ttph1Tjkag9XeEs7F-4E.roa (raw, json)
Hash identifier: eZe908tPIIyT1Dc9ngn4wCyrYKvFlYEmrxSNakqgZM0=
Subject key identifier: EE:E8:39:5F:AF:2D:B6:98:75:4E:39:1A:83:D5:DE:12:CE:C5:FB:81
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 478A
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/7ug5X68ttph1Tjkag9XeEs7F-4E.roa
Signing time: Fri 06 May 2022 00:30:05 +0000
ROA not before: Fri 06 May 2022 00:30:05 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18314 (0x478a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 6 00:30:05 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=EEE8395FAF2DB698754E391A83D5DE12CEC5FB81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e9:d5:a0:22:ea:dd:33:03:9f:00:cc:8c:d7:
95:92:e5:0e:a1:04:1c:fe:eb:02:f1:18:7e:38:19:
be:6c:3b:e0:f4:3a:15:69:3a:89:93:10:0d:30:10:
86:2c:b9:99:be:84:82:5b:5c:c5:05:5b:2b:4f:e2:
d3:3c:e7:51:cd:c3:de:bb:88:82:2b:9d:71:81:85:
c0:72:bf:8a:0c:fc:99:fa:aa:71:2d:e2:6f:77:d6:
aa:d3:aa:98:d8:bc:7d:c7:eb:a4:44:40:b5:94:91:
ef:db:f9:61:7f:22:ef:eb:b5:df:d4:8e:bd:a4:01:
e1:a0:3a:4c:5c:7e:55:33:f4:b8:a8:7d:42:9d:24:
1a:16:5b:e9:e0:5f:ea:8b:16:da:79:13:75:7e:48:
9d:41:0b:dd:24:1e:90:b8:4b:d3:6e:cf:e4:25:47:
07:e8:bb:b8:e7:7e:35:da:5e:72:8d:a5:db:a9:32:
11:e4:0d:ad:31:c6:e7:5c:59:09:e1:74:5a:52:15:
1e:8f:2a:7f:05:1c:ad:b6:85:f6:27:75:eb:6a:d4:
b1:bb:b1:1b:75:df:9d:5b:fd:0c:3a:e1:2f:8d:bf:
f5:c8:60:7e:b8:9d:79:6c:e9:59:8b:99:5f:0d:63:
81:0f:c9:86:28:41:80:0c:f2:f0:e2:78:c4:87:6c:
4f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E8:39:5F:AF:2D:B6:98:75:4E:39:1A:83:D5:DE:12:CE:C5:FB:81
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/7ug5X68ttph1Tjkag9XeEs7F-4E.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:d0:4a:fe:63:86:61:85:5d:0e:1f:cf:b1:a6:b0:fc:09:f6:
72:8f:22:e1:0a:66:bf:fc:ea:63:f8:f3:6c:9c:86:31:a4:e6:
f8:ce:0a:01:29:61:20:8c:3e:28:d2:c0:dd:9b:53:ff:c6:bf:
07:87:bc:4f:c1:39:e9:78:3e:b8:d6:e3:4e:47:d5:ef:e8:98:
6a:29:6a:0f:f1:7d:c3:b8:8e:5f:67:b9:be:17:fa:98:ba:82:
dc:a8:e7:a0:17:62:e7:60:b1:b4:d1:a1:ab:4f:e8:08:c9:2a:
c3:be:6b:c4:94:72:a0:15:06:1f:02:70:19:d6:f0:a0:4a:52:
c5:7c:5e:07:af:e3:84:f5:6a:e7:eb:8f:3c:09:9b:b9:74:ab:
5f:b5:a1:14:94:15:57:c4:40:b5:10:40:69:f4:d9:1d:d7:4e:
b1:03:02:e7:cb:9d:d9:f6:2b:f9:a8:d1:1f:be:41:18:01:2c:
7f:01:84:d6:26:62:f3:b5:da:76:2c:31:f2:8f:3c:7e:d9:6a:
f1:86:cd:bf:0a:38:e2:fa:46:38:1a:5e:f2:97:00:d0:51:2b:
91:96:0c:8d:cf:3c:a3:92:9e:6b:de:12:da:cf:cc:9b:36:3b:
d5:bb:46:cb:10:a6:81:3d:12:d1:a9:9b:4b:52:7d:03:78:b5:
3b:23:5b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:52 2024 by rpki-client on console-fra.rpki-client.org