Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/9xxs41yCZ1frolpMcgugYgcbqSg.roa
File: 9xxs41yCZ1frolpMcgugYgcbqSg.roa (raw, json)
Hash identifier: SgDsGxDc1pydCF9Adf9EauDYxew++n7ipfGdM5/h8Ts=
Subject key identifier: F7:1C:6C:E3:5C:82:67:57:EB:A2:5A:4C:72:0B:A0:62:07:1B:A9:28
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 43C6
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/9xxs41yCZ1frolpMcgugYgcbqSg.roa
Signing time: Sat 26 Feb 2022 00:30:07 +0000
ROA not before: Sat 26 Feb 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17350 (0x43c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 26 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=F71C6CE35C826757EBA25A4C720BA062071BA928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a9:36:71:ba:cd:1e:a5:a5:da:9b:54:6b:48:
12:1a:66:06:50:68:eb:c5:06:2c:53:71:73:5a:94:
93:66:5c:28:5a:52:55:ba:fc:76:9e:96:b2:2e:0c:
a6:22:c9:43:8d:a4:75:51:c6:2e:68:34:10:03:63:
54:9a:2a:14:e7:f2:87:d6:5d:8d:4a:cd:d0:03:bf:
52:ec:9d:fb:f6:e1:07:7d:9b:2f:ca:aa:10:e3:4b:
80:3a:6d:68:fc:b5:da:11:07:89:c2:e3:8d:96:d5:
a0:30:37:4b:7d:9d:18:5a:03:9b:54:86:75:78:de:
21:8f:a3:7b:06:b8:9e:64:6a:22:58:f3:57:82:3f:
5f:59:f2:1a:9d:93:13:0f:39:73:06:6d:ac:34:ef:
5b:36:77:58:80:c8:12:27:1a:b1:4e:4c:1a:21:e5:
61:68:80:fb:1c:5c:82:59:65:72:19:d4:af:eb:e6:
d7:ea:a3:0c:fd:4b:e9:5d:26:78:1d:51:41:a2:45:
69:6a:d2:db:b0:b3:8b:3f:23:d5:4e:0f:30:59:ee:
0b:03:d4:9b:f4:c4:25:a7:53:d6:5e:e9:e1:25:ad:
eb:e7:e7:36:36:53:19:3a:31:72:66:3f:45:cb:f1:
a6:19:b9:79:87:a7:6d:91:92:42:16:66:8c:97:42:
5a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1C:6C:E3:5C:82:67:57:EB:A2:5A:4C:72:0B:A0:62:07:1B:A9:28
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/9xxs41yCZ1frolpMcgugYgcbqSg.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
be:a8:e9:45:46:08:86:80:54:66:e5:ad:b1:de:91:98:8a:03:
ab:ac:ad:aa:80:89:2a:2b:53:ae:8b:d4:e3:1a:81:2c:57:ad:
62:d3:75:b5:1b:f7:72:e4:ea:0a:48:45:a6:a8:93:2f:ff:20:
3c:7b:e5:59:c0:fd:86:2c:d9:f6:97:56:4f:af:da:23:89:ed:
7a:7c:94:71:43:f7:75:4d:ea:44:d0:08:3b:d1:8c:55:47:fa:
5e:0c:0d:a9:5a:80:27:89:e7:30:5f:75:33:42:01:78:d1:04:
80:91:1e:a6:83:b5:e3:fb:3c:94:39:4c:ae:5b:6a:18:b7:be:
e6:7b:e8:61:b9:19:e1:ae:49:37:5d:a1:a5:48:f0:8b:4b:cc:
2b:d1:f6:98:13:0f:5a:21:b1:cd:5e:d2:12:60:4b:99:c4:10:
34:bb:7c:aa:5c:24:4b:62:9d:24:a5:de:c7:fe:1f:d9:77:fb:
1c:8a:f1:3f:d7:a1:b0:a3:69:2b:41:7f:15:0e:a1:bf:b3:cf:
57:6b:ab:f0:df:a6:bc:87:80:41:a4:43:90:4a:c9:cd:77:29:
91:f1:88:60:dc:44:19:81:10:bb:b6:9a:fb:22:7c:ff:12:4b:
4d:bc:8c:0f:d9:33:c0:e2:a3:55:d8:13:6b:46:73:f8:0a:b8:
71:b6:e0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:52 2024 by rpki-client on console-fra.rpki-client.org