Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/DDQ5uFLJS1VceT7mtPnHxv5vLww.roa
File: DDQ5uFLJS1VceT7mtPnHxv5vLww.roa (raw, json)
Hash identifier: o6skgyMVzR6da4cubLHmTguqEe/LgiT0dSu+8ko09nA=
Subject key identifier: 0C:34:39:B8:52:C9:4B:55:5C:79:3E:E6:B4:F9:C7:C6:FE:6F:2F:0C
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4394
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/DDQ5uFLJS1VceT7mtPnHxv5vLww.roa
Signing time: Tue 22 Feb 2022 00:30:09 +0000
ROA not before: Tue 22 Feb 2022 00:30:09 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17300 (0x4394)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 22 00:30:09 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=0C3439B852C94B555C793EE6B4F9C7C6FE6F2F0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e2:bf:6a:ab:6e:26:32:3a:3b:aa:ce:bc:cf:
2e:b8:59:72:d7:26:4d:5c:45:50:9d:29:f1:f2:cf:
7a:98:b6:52:cb:3b:51:a8:1e:5c:74:9c:f6:4f:34:
bb:b9:88:2c:42:49:3c:56:8f:17:40:8b:f1:df:43:
31:9c:28:f2:13:e0:39:8d:5a:1a:95:03:8e:68:76:
5f:7e:7f:0e:44:82:d6:25:51:c5:af:10:29:2f:56:
81:90:d6:55:91:99:32:51:bf:b6:d8:4e:59:db:eb:
18:e7:d3:2c:9c:b2:59:b9:61:4e:4e:38:6b:19:70:
22:ae:7e:82:bb:be:90:c1:23:a6:d2:d1:06:9b:63:
5d:20:66:ce:96:52:d8:ea:7a:64:c9:9f:28:e9:1a:
8e:05:03:5c:ed:53:27:2f:01:9a:aa:ce:9a:74:d9:
e0:6a:26:6d:a6:97:81:a9:01:85:58:ac:4a:7d:00:
e2:e7:d4:c7:53:c0:6f:62:08:36:fa:34:fb:7e:54:
ec:93:9c:1c:94:83:45:85:4c:60:ab:9c:e3:ef:c5:
54:99:af:a4:2a:8c:05:2d:2e:7b:1f:98:b6:b0:81:
51:d2:0e:15:1b:95:2c:d5:59:86:90:16:53:3e:7a:
c3:07:23:51:eb:6a:49:1c:b7:9a:0c:b9:71:31:1b:
84:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:34:39:B8:52:C9:4B:55:5C:79:3E:E6:B4:F9:C7:C6:FE:6F:2F:0C
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/DDQ5uFLJS1VceT7mtPnHxv5vLww.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
01:05:ac:38:21:97:1b:2c:b7:b6:36:5f:d6:87:96:ef:d4:76:
ff:b4:a1:b2:7d:19:20:49:6e:f3:20:9e:55:df:c5:15:fb:93:
57:25:25:4f:c0:87:13:d5:ca:82:fe:35:a3:91:5b:56:de:18:
8c:a0:74:c9:49:96:80:73:db:6a:ad:5d:15:ad:f6:16:2b:32:
3f:9d:f4:50:4f:cb:63:e1:47:02:73:e5:ad:25:42:9a:18:1b:
ba:74:f3:be:69:90:61:8a:27:be:8d:0b:cf:1b:3c:06:f8:3e:
6a:65:07:35:56:db:f5:74:fa:96:d2:23:a3:03:be:4b:20:e1:
13:b0:c4:66:2a:df:23:26:79:ac:1a:37:5e:5e:46:ba:86:bd:
71:aa:27:d0:14:bc:03:98:5e:05:06:64:52:93:1f:f9:66:06:
15:09:f5:bb:78:2c:b0:05:ac:d0:79:20:37:c0:ba:d4:b8:32:
51:74:a5:51:e7:57:ce:33:42:59:1d:af:16:26:5e:66:65:b5:
e5:15:73:be:63:1a:4c:c3:d0:34:c0:a4:c7:6a:e9:62:56:81:
0c:41:9d:83:b0:19:93:eb:8e:b5:9a:b7:52:ba:c5:b7:13:b2:
98:a4:e2:be:e3:1c:a9:4f:a5:fd:b4:84:0d:9d:ce:e6:72:fa:
f4:8a:0f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org