Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/9YZeOI4CtEbW1zBvOWEi7YHvgc8.roa
File: 9YZeOI4CtEbW1zBvOWEi7YHvgc8.roa (raw, json)
Hash identifier: cHzvyZLdxblNNjuyPKQk120vD5Any/FdNY9tWQoD2DE=
Subject key identifier: F5:86:5E:38:8E:02:B4:46:D6:D7:30:6F:39:61:22:ED:81:EF:81:CF
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 46A3
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/9YZeOI4CtEbW1zBvOWEi7YHvgc8.roa
Signing time: Tue 19 Apr 2022 00:30:08 +0000
ROA not before: Tue 19 Apr 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18083 (0x46a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 19 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=F5865E388E02B446D6D7306F396122ED81EF81CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:21:9a:1c:bb:ac:25:f8:02:b4:84:8d:98:76:
f5:99:10:5e:a2:36:c0:b2:a8:63:6f:5d:db:c2:0f:
31:dd:2a:cd:b2:e7:eb:6e:7b:72:6f:f2:70:7f:9a:
da:83:08:34:97:7f:2e:d9:68:09:f5:8c:33:9e:5d:
17:c4:29:07:4f:73:aa:2f:8d:46:a0:9f:9a:04:63:
99:a1:26:bd:8d:24:0e:60:1f:db:3e:32:9a:8c:e5:
fa:fc:f4:23:b8:68:da:8a:6c:92:98:8a:b9:07:9c:
73:80:3b:8c:31:3e:1d:3d:fc:41:70:ea:9c:e6:b5:
e2:a6:3d:89:1b:04:8c:df:2f:96:81:d4:6c:a6:b6:
17:7b:f6:bc:47:6d:28:4d:4e:3a:6a:9e:f8:bc:da:
37:f7:97:68:32:5d:c8:f6:48:b6:41:2c:bf:61:aa:
4d:51:d8:2b:16:3f:81:cd:55:fc:d4:d0:63:d7:8d:
d1:a7:12:82:7d:fd:cc:4e:1d:18:90:86:51:5b:ab:
7f:2d:b0:8b:f2:db:9f:ec:3b:d3:11:50:ac:be:3f:
7b:9c:e5:3f:72:a0:ee:08:63:41:09:78:de:83:fc:
2f:2b:25:13:53:d6:02:c0:79:84:27:cc:42:90:7e:
ce:f6:19:61:23:d0:17:1e:ff:80:23:29:be:a2:de:
6d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:86:5E:38:8E:02:B4:46:D6:D7:30:6F:39:61:22:ED:81:EF:81:CF
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/9YZeOI4CtEbW1zBvOWEi7YHvgc8.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:53:2a:9d:2a:d0:9a:0e:7a:41:b7:18:68:ec:00:03:12:7e:
74:65:7d:51:62:77:6a:db:76:7e:54:07:30:e6:2c:7f:5f:06:
46:33:5a:1d:f8:5c:9a:c1:b5:f7:02:49:f1:26:1b:f3:8a:ef:
84:85:aa:61:c9:45:46:e7:9a:c1:d4:15:8a:67:e3:95:c5:fa:
c1:55:f2:0a:d2:ce:be:e7:b1:2a:ed:34:c7:da:72:74:7e:cf:
04:05:5f:e3:aa:10:34:eb:fd:ae:55:64:b6:1e:6a:4c:d8:c6:
02:9c:c4:c3:cb:97:bb:b9:c8:61:d1:59:ab:4c:cd:31:27:94:
b2:0a:f7:d6:5e:e6:1c:67:ea:69:a2:16:f2:b3:0f:44:65:c0:
79:64:78:d6:b7:73:67:ea:10:ea:ba:a9:3c:b9:0d:de:7b:9a:
80:89:5e:5c:3c:f8:13:1a:84:e5:09:5d:43:92:02:51:66:c8:
bd:84:83:4c:b9:0e:49:ad:94:5b:dc:28:64:e0:20:16:8c:7a:
4f:87:a1:15:db:ce:e7:a9:63:ca:11:d8:c8:49:e6:c3:cb:17:
11:10:3d:32:7f:00:91:37:da:6f:1f:6b:8b:a0:ee:d5:09:5e:
11:c9:1d:6f:58:f8:17:2b:b8:24:60:07:93:5f:81:dd:31:40:
b8:af:c9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:52 2024 by rpki-client on console-fra.rpki-client.org