Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/EzLqJQSvnq-h9L0kAxyvUmZIu6U.roa
File: EzLqJQSvnq-h9L0kAxyvUmZIu6U.roa (raw, json)
Hash identifier: v0ubJ/BhSvn8NdYpMaRX8jANLGgwuVqIoBik2cfSGUE=
Subject key identifier: 13:32:EA:25:04:AF:9E:AF:A1:F4:BD:24:03:1C:AF:52:66:48:BB:A5
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 498C
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/EzLqJQSvnq-h9L0kAxyvUmZIu6U.roa
Signing time: Wed 08 Jun 2022 00:30:08 +0000
ROA not before: Wed 08 Jun 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18828 (0x498c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 8 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=1332EA2504AF9EAFA1F4BD24031CAF526648BBA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:af:a1:d7:69:d1:00:6e:f7:d4:7a:35:81:57:
bd:c2:a0:65:75:36:06:80:a0:13:e1:04:b4:cc:4f:
b1:f1:7a:cd:66:04:05:2d:4f:a9:06:b4:bd:88:2c:
a0:82:bd:25:c4:8a:f7:16:0c:65:ce:1b:22:00:30:
1f:73:e9:fd:dd:39:8b:e8:e4:ab:b3:53:9d:ed:3d:
1d:03:4e:32:48:a5:5a:c4:e7:fb:27:3d:af:2d:e7:
91:ce:1a:75:b4:b5:ed:47:d6:9e:60:72:72:fc:84:
ea:7b:ea:14:8e:a4:cc:83:d5:73:73:23:b2:35:72:
5c:40:59:9d:0e:c4:af:c8:ca:38:29:a2:df:38:8b:
94:5c:7c:cc:36:e3:d0:9e:d1:d1:ac:6c:b9:a4:7f:
4b:a1:3b:b6:24:40:85:54:23:8a:16:29:a0:1e:66:
30:8c:5d:9d:cd:a3:df:73:b3:4e:b8:36:40:7a:d8:
dc:33:4f:0e:06:55:ed:5d:6b:fc:c5:da:da:14:ab:
2e:98:47:b5:27:aa:20:72:39:55:41:72:41:b6:1f:
5d:00:e0:53:da:07:e4:c0:14:19:e3:0e:db:d3:f1:
9f:6c:64:28:d3:fd:f9:44:9e:70:f6:65:ab:9b:46:
bf:d5:a7:db:e2:c8:37:cc:2b:d9:1d:e0:69:de:ba:
fa:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:32:EA:25:04:AF:9E:AF:A1:F4:BD:24:03:1C:AF:52:66:48:BB:A5
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/EzLqJQSvnq-h9L0kAxyvUmZIu6U.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
62:06:11:6e:9a:b2:3f:db:39:91:be:32:06:b3:33:99:d9:a9:
b8:9a:96:d5:b2:37:2f:4d:66:c7:00:6c:b2:f8:f0:77:1d:2e:
5a:0a:23:6f:5f:02:1c:e0:28:9a:71:12:a3:25:d1:0d:45:a7:
13:53:02:a1:6b:ec:4c:f1:6c:27:54:de:c8:e9:0e:61:db:62:
29:76:3f:6e:6f:91:fa:2b:42:da:4b:79:83:4f:af:01:4f:51:
87:fe:fe:13:9e:d7:ac:b9:41:2e:80:ae:1c:31:1a:34:22:46:
74:74:a5:53:76:bd:b8:48:cf:4d:52:4f:e0:f2:77:49:3f:ab:
a4:89:bc:8f:45:05:34:07:17:d3:5b:17:14:52:44:8b:93:22:
90:9a:d4:8a:c1:d5:aa:12:f2:d5:f9:26:3b:4c:9f:0e:b7:1a:
1f:a3:e7:13:72:d5:3d:a8:bf:8d:f5:8f:34:65:1b:fa:fa:4b:
a2:d3:49:f3:39:22:0e:d7:35:7c:b8:8e:c7:f1:a1:37:ba:77:
49:fc:9a:1d:ad:49:ff:ba:c8:f2:78:b0:c5:6e:cb:32:7a:06:
fa:09:c2:bd:dd:19:75:41:86:f6:30:ca:b1:a9:4a:5e:26:69:
a1:91:65:fd:ce:ec:79:1c:03:b0:39:e0:07:9d:0a:ea:4b:7d:
26:45:eb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org