Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/9CJBZ5mGSuuzT8EvIvoIXCI2Qb8.roa
File: 9CJBZ5mGSuuzT8EvIvoIXCI2Qb8.roa (raw, json)
Hash identifier: gJDULGFABmiUideFEwZg/foinqKwiRS1/BCitJ9XleU=
Subject key identifier: F4:22:41:67:99:86:4A:EB:B3:4F:C1:2F:22:FA:08:5C:22:36:41:BF
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 426F
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/9CJBZ5mGSuuzT8EvIvoIXCI2Qb8.roa
Signing time: Tue 01 Feb 2022 00:30:06 +0000
ROA not before: Tue 01 Feb 2022 00:30:06 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17007 (0x426f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 1 00:30:06 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=F422416799864AEBB34FC12F22FA085C223641BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d1:f4:f7:7c:e5:9e:30:d6:6e:f8:16:38:22:
e6:a7:f1:6f:9f:e8:7f:5e:72:83:40:0a:1e:e3:6d:
a2:5e:51:04:4b:a9:ce:ad:a7:b4:01:8e:df:65:09:
b5:b0:47:e8:34:10:cf:b2:06:63:1d:f3:33:cc:62:
09:4c:a9:35:62:e9:2a:04:43:43:3c:20:32:70:01:
c1:e3:9a:14:9b:9f:b8:c2:78:b3:32:0c:ee:d9:67:
cf:86:c5:c5:76:10:3a:d6:2f:14:28:85:c0:1b:53:
61:1c:32:66:fd:1a:25:b2:c3:16:2a:22:2a:5e:51:
16:f6:76:9a:18:51:d8:d3:44:b8:ac:7d:b8:09:cd:
5f:f4:93:0e:02:11:04:3e:05:a6:55:47:e7:52:6b:
f0:c5:ef:fc:7f:bb:eb:4b:84:ba:ff:2a:8a:c6:b6:
ba:70:d4:d5:33:2c:56:aa:b0:4e:77:75:f0:3f:34:
21:94:98:cf:6c:7b:78:6f:7d:bf:fd:94:95:ad:6a:
ad:17:5a:78:02:12:a7:21:f6:de:0c:ff:44:3d:31:
b7:9e:29:3e:27:70:9d:6c:e2:d0:5f:8c:96:3b:04:
2c:6e:79:69:04:b5:84:1b:86:f5:c2:34:1d:de:33:
dc:5d:e1:50:e9:d6:68:a3:96:1d:dc:54:a0:c3:c1:
2b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:22:41:67:99:86:4A:EB:B3:4F:C1:2F:22:FA:08:5C:22:36:41:BF
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/9CJBZ5mGSuuzT8EvIvoIXCI2Qb8.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
81:1d:92:e5:a8:1d:bd:1e:c5:6d:c3:8a:67:e3:ee:51:c1:ec:
fa:82:c4:6b:63:ee:01:6f:2b:18:0a:1f:de:cb:07:9e:64:3b:
dc:7b:60:cc:f0:68:d3:5b:2e:bc:86:b6:a3:2f:fa:05:c9:98:
06:05:0d:e5:61:d5:4a:99:19:4c:f4:f5:1e:4b:e2:0a:43:39:
a9:aa:eb:66:45:c4:97:17:02:75:c6:59:b2:79:bf:e8:e8:63:
63:1b:78:bf:57:27:65:97:16:33:8a:3b:3b:4b:76:5b:85:72:
3e:c9:06:d0:80:bd:2f:ca:09:dd:5f:35:ee:dd:99:ca:54:62:
18:97:ff:2f:00:eb:cc:a1:8b:0c:e0:67:cb:06:f4:63:e5:fa:
6d:03:11:fe:81:59:91:3b:47:0f:f4:5f:c5:c0:62:ae:86:f0:
3b:16:2d:93:01:ff:5c:3e:49:3b:71:1b:da:55:8d:62:2a:b2:
ce:25:37:d7:ab:da:17:aa:7f:53:87:d9:fd:c1:a5:0c:7b:82:
23:ce:a4:0f:87:12:93:66:87:7b:36:0c:e4:fd:e2:88:18:ad:
91:56:e6:65:4a:fb:68:3d:e8:0c:d6:aa:dc:7e:4b:81:a6:8d:
fe:b3:ee:b8:4b:c0:13:d0:eb:21:12:9c:3a:dc:4e:bf:f8:6c:
0f:ac:bb:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:52 2024 by rpki-client on console-fra.rpki-client.org