Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/C6FuC9KFcLjmJjZd754czJZiWMQ.roa
File: C6FuC9KFcLjmJjZd754czJZiWMQ.roa (raw, json)
Hash identifier: 0fTvNMv+dFzMQI2F6v3y+gOZix1hnKIX6SiGVjv8ur4=
Subject key identifier: 0B:A1:6E:0B:D2:85:70:B8:E6:26:36:5D:EF:9E:1C:CC:96:62:58:C4
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 42B2
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/C6FuC9KFcLjmJjZd754czJZiWMQ.roa
Signing time: Sun 06 Feb 2022 00:30:05 +0000
ROA not before: Sun 06 Feb 2022 00:30:05 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17074 (0x42b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 6 00:30:05 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=0BA16E0BD28570B8E626365DEF9E1CCC966258C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5c:02:8e:f4:34:a8:2c:21:2b:c2:2b:c6:01:
f0:3f:60:23:81:cf:de:73:ea:00:4b:88:d0:14:7d:
3f:9e:79:57:31:f6:4e:57:cf:7f:c1:51:57:f7:d0:
2b:dd:47:33:0f:c9:33:aa:34:10:64:c7:c2:cd:72:
36:29:e4:55:dc:d0:69:ea:94:91:dc:fe:6d:72:9a:
09:70:0c:ac:15:a5:57:dc:57:cb:88:2f:36:1b:f2:
7a:88:c3:c0:54:e0:97:fd:80:55:38:c3:ec:60:68:
49:c4:28:03:fb:f8:36:14:1f:3a:0e:d3:be:2f:6b:
a7:4e:13:bb:89:b5:33:55:8a:43:a6:be:2d:9d:c8:
0a:c0:90:8d:90:e0:ec:56:de:40:1a:9b:63:bd:72:
fa:79:5e:6c:7a:d9:14:8b:f9:9b:a7:6a:9d:ec:7f:
7e:29:52:16:69:21:d7:5a:1a:41:40:e7:f8:e8:8f:
8d:f1:65:75:a1:c9:d5:5c:6f:69:ea:82:e5:06:32:
9b:d6:2d:f2:5a:78:56:79:7b:1c:bf:15:a6:1c:e1:
12:c7:d0:63:65:e6:85:80:5d:be:bb:2a:d7:45:5b:
f5:c2:99:e4:42:2c:33:33:9d:9c:f3:fb:8a:74:4d:
b9:8a:0a:53:2c:62:37:09:02:4a:40:4a:47:ea:d7:
fd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A1:6E:0B:D2:85:70:B8:E6:26:36:5D:EF:9E:1C:CC:96:62:58:C4
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/C6FuC9KFcLjmJjZd754czJZiWMQ.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
29:25:37:5c:a7:bf:9a:27:47:19:1a:fd:e4:2f:ce:f8:5f:ec:
dd:ff:be:e5:bf:d9:7a:f6:70:9e:a9:96:0e:be:81:12:9d:50:
2c:32:99:01:4d:3b:7c:52:5b:c5:3d:ac:0e:86:16:38:6f:59:
e5:69:f7:eb:5c:52:47:a2:cd:cd:ab:f6:44:27:7e:23:bb:33:
b2:41:ac:06:d1:4e:6b:49:66:ee:9c:a9:4b:dc:f4:fa:c0:db:
ca:63:98:98:e9:38:26:86:cf:fe:c1:4f:66:6e:6a:3b:a0:32:
85:13:2f:fc:69:dd:03:5e:f4:38:6b:87:1f:f8:6d:9c:7e:da:
a9:37:52:46:8b:63:98:3b:a0:f4:3c:88:0d:3e:f4:4a:95:28:
57:71:61:52:ae:3d:c5:a5:5d:5b:03:e4:b1:4c:cb:f4:79:60:
2a:49:04:ce:2f:62:55:69:e8:cd:7a:34:5e:f4:b7:bd:e9:0c:
d9:5f:84:c0:02:d0:0a:9a:00:15:2e:30:2c:70:7f:e9:84:d4:
41:29:41:86:ae:4f:5c:7c:79:1d:8a:c3:d5:08:79:b5:b4:33:
ec:d1:e7:c2:10:42:a2:56:87:6d:5d:c9:8a:fa:df:b8:38:85:
fe:ab:cd:92:b5:b9:91:f6:e7:df:20:a9:e4:7d:fc:95:82:7a:
5e:91:93:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org