Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/Ey_tgJBe2fTCEB4kRCYgTRoYpmU.roa
File: Ey_tgJBe2fTCEB4kRCYgTRoYpmU.roa (raw, json)
Hash identifier: 9x88cw3pWogIMToXUh+AbxGiRr9BiUYV6qfS54Ezexs=
Subject key identifier: 13:2F:ED:80:90:5E:D9:F4:C2:10:1E:24:44:26:20:4D:1A:18:A6:65
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 46F4
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Ey_tgJBe2fTCEB4kRCYgTRoYpmU.roa
Signing time: Mon 25 Apr 2022 00:30:08 +0000
ROA not before: Mon 25 Apr 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18164 (0x46f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 25 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=132FED80905ED9F4C2101E244426204D1A18A665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2c:28:b1:9f:16:85:9e:17:c7:e7:c8:fc:a8:
d9:cf:ad:dd:9f:bb:19:93:ab:25:b7:86:75:a3:9f:
99:1e:7d:bd:18:a2:07:89:40:37:82:e8:0d:0b:1d:
46:e9:19:1f:0d:0f:0b:6e:13:74:8b:70:a8:93:fe:
2e:a1:aa:65:d5:0f:b0:e0:11:0d:cd:d5:16:73:bf:
32:9b:14:96:d3:58:f3:a0:22:f5:56:21:e7:24:84:
c3:8b:33:03:b1:ee:80:0f:3f:9b:31:e3:b7:3f:be:
a3:ec:1e:71:cb:6c:35:4d:8e:9e:cb:f7:2c:87:55:
d3:dd:9f:42:3b:3f:e2:c1:2d:b6:8b:87:9d:9a:23:
9e:d9:11:6f:9e:4e:84:ac:28:a8:5e:84:cc:14:ba:
0d:84:26:20:19:dc:2f:d9:93:81:6a:9b:bd:e4:a8:
5f:b3:4c:41:d5:6a:1c:54:c2:fb:7b:c2:00:bd:c7:
3f:f3:4c:40:fd:6e:f0:cd:4d:68:64:a1:a7:e4:b2:
96:bb:1e:d6:2c:21:58:3a:00:e7:4b:8e:98:26:fd:
c6:b7:da:53:79:c3:0f:54:d3:f4:01:26:9d:d3:59:
1a:b1:f6:c2:a3:fa:59:82:d9:d0:65:02:42:d9:17:
e8:48:e3:65:f3:b7:c5:50:02:5d:f7:29:5b:f2:12:
52:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2F:ED:80:90:5E:D9:F4:C2:10:1E:24:44:26:20:4D:1A:18:A6:65
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Ey_tgJBe2fTCEB4kRCYgTRoYpmU.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:a6:b4:08:c0:b1:83:51:4a:b8:eb:35:6b:9b:19:7d:81:06:
26:8d:a6:77:42:b3:7e:a4:26:a8:f7:cb:2f:7d:e8:b5:73:18:
fa:01:c8:44:a7:e0:31:e0:db:3a:8a:5d:78:32:90:36:08:1a:
ad:3a:21:34:0d:01:b7:d2:11:3c:c1:98:d7:0f:ec:3e:00:d3:
54:31:f0:5d:c1:38:a9:b1:4b:e9:d9:26:07:44:04:7c:9d:9a:
65:59:a4:47:71:ad:ca:42:ac:c5:55:bd:79:3d:5e:20:b6:c8:
6a:8e:38:05:58:44:4d:58:6c:5d:d8:cf:9d:aa:ce:f9:10:c9:
83:38:77:39:f3:96:06:e4:ec:e4:b1:43:d2:85:30:5a:a4:6a:
c3:3b:11:d5:cc:5b:5c:d7:54:84:1c:b4:20:54:0b:76:3c:09:
58:7b:1d:e6:fe:31:b1:52:3f:25:a7:cd:cc:31:40:7b:e1:19:
47:40:40:f7:3d:ff:1f:9c:3e:0a:00:05:6d:9d:d4:77:47:d0:
ab:ce:d7:25:a4:5c:dc:9e:f7:32:0e:67:0a:50:7a:4d:05:01:
57:aa:1c:5d:5c:0c:5f:42:88:11:ad:91:9c:ca:a0:70:ee:e0:
c4:48:d7:2c:74:9d:d1:09:59:67:df:c9:27:34:27:32:13:8e:
76:ab:7a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org