Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/Hsx-bk9dnY7Yeul4O4IvtxN0RjQ.roa
File: Hsx-bk9dnY7Yeul4O4IvtxN0RjQ.roa (raw, json)
Hash identifier: XCz5tDoSuuUeFNEkI74NWiiQGsMMJ08UvMciKbnJu2o=
Subject key identifier: 1E:CC:7E:6E:4F:5D:9D:8E:D8:7A:E9:78:3B:82:2F:B7:13:74:46:34
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 462D
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Hsx-bk9dnY7Yeul4O4IvtxN0RjQ.roa
Signing time: Mon 11 Apr 2022 00:30:07 +0000
ROA not before: Mon 11 Apr 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17965 (0x462d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 11 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=1ECC7E6E4F5D9D8ED87AE9783B822FB713744634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:89:60:2b:9e:79:17:5a:50:e1:a7:fe:ee:ad:
30:b8:42:a1:bd:ab:be:d0:a2:c8:e9:bb:af:f2:07:
4b:41:db:97:c8:54:51:23:90:94:e1:3d:a2:94:75:
3c:29:ed:32:11:cb:73:b5:5e:f4:c0:20:b2:75:83:
2b:5e:10:d0:03:4e:9b:ab:14:0d:8b:3b:e9:68:c9:
50:ac:37:29:38:1e:74:ca:af:85:d7:2f:68:9d:fc:
10:4b:47:fc:91:e5:6b:88:d8:3d:15:78:6c:c0:77:
8b:88:95:39:d4:94:dd:0d:20:c4:5a:3f:7d:1f:43:
b7:f0:a4:bf:96:a5:e7:68:a1:b4:bd:2d:c9:7c:1f:
f0:1c:9a:3e:a5:7b:9f:74:35:cc:98:f9:8a:d8:b8:
e9:9e:1c:bb:f2:a8:97:89:7c:97:26:76:f5:6c:9f:
8e:19:22:a8:f1:f3:48:84:9d:93:b7:d8:eb:cd:ca:
36:89:bf:a5:e3:44:28:b0:0a:b9:55:26:cb:b5:92:
fe:41:53:37:19:c4:c5:f9:28:a5:df:69:67:86:65:
13:93:ae:97:14:5e:c8:72:62:9f:f6:f6:3c:76:dc:
6a:4e:35:e4:28:5b:44:9d:a3:e3:c9:1a:87:47:67:
25:80:62:d4:de:53:86:df:c7:f5:71:31:e9:76:37:
3d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CC:7E:6E:4F:5D:9D:8E:D8:7A:E9:78:3B:82:2F:B7:13:74:46:34
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Hsx-bk9dnY7Yeul4O4IvtxN0RjQ.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
55:dd:81:a4:fc:36:aa:1b:e5:80:95:60:49:d3:cb:5d:7a:77:
87:55:8a:27:9b:15:3b:60:db:61:f3:b4:46:b1:53:2c:3e:c8:
d7:78:62:d7:f6:b1:bf:b7:61:70:0c:92:5f:e2:28:21:5b:85:
08:fb:c8:79:82:c1:b4:26:e9:10:1e:f2:10:49:0e:18:d8:99:
ef:c3:81:9b:2b:30:49:38:49:e4:ab:c0:d4:1a:b0:36:3b:56:
ec:37:38:ff:90:c3:c6:24:a3:f7:65:ab:20:d2:76:7a:83:e6:
58:37:c9:16:0d:c0:da:4c:18:2c:33:f0:ff:06:c4:c1:81:4a:
db:f0:93:8d:df:59:40:2d:54:0e:e8:7b:25:1e:e1:4f:9a:06:
db:83:15:03:0a:51:11:0b:b7:82:8b:cf:7d:4e:53:e8:4c:04:
76:36:37:72:b4:86:9d:43:46:e9:bc:5f:d7:42:7b:64:7d:3d:
94:a6:22:9c:c8:7a:5a:cc:46:c1:08:da:a7:e1:17:94:30:0c:
c1:41:28:b5:39:60:05:f9:ae:04:61:28:f0:94:d2:2b:87:59:
e2:d8:76:92:f8:5c:df:0e:da:a2:50:0d:92:1f:6a:a6:7d:b2:
8d:72:b2:3c:c1:f0:4c:bf:fc:79:80:14:ee:0e:4d:25:34:99:
4f:3c:40:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org