Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/Ib3qdsbCD9anVNGALWH7yfgeWXs.roa
File: Ib3qdsbCD9anVNGALWH7yfgeWXs.roa (raw, json)
Hash identifier: 8tgXgUWU8/YcuzVvoOb2tQFrQAY8PlCzWcDg1ipqsBc=
Subject key identifier: 21:BD:EA:76:C6:C2:0F:D6:A7:54:D1:80:2D:61:FB:C9:F8:1E:59:7B
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 48A9
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Ib3qdsbCD9anVNGALWH7yfgeWXs.roa
Signing time: Thu 26 May 2022 00:30:18 +0000
ROA not before: Thu 26 May 2022 00:30:18 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18601 (0x48a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 26 00:30:18 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=21BDEA76C6C20FD6A754D1802D61FBC9F81E597B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c2:70:ea:d6:84:aa:4e:4e:30:ed:b4:6d:77:
5e:09:05:5e:9a:38:44:e0:1c:26:b4:91:e3:b8:ec:
8b:a2:64:4e:8e:92:ed:89:31:5f:3c:fa:49:d5:4c:
3d:3a:2a:45:34:a6:6c:ed:f0:03:65:52:ee:0c:fc:
25:01:b6:87:fc:8f:d0:e8:66:a8:0f:b8:bc:7f:6b:
2f:70:8f:83:62:d2:4e:ed:69:34:c2:4c:25:c1:be:
4d:59:ff:34:cb:7f:df:47:4f:20:9f:b0:6c:68:24:
f8:a6:23:3f:8a:76:70:47:70:0c:6b:7b:31:86:57:
ce:18:54:38:98:ff:7f:79:1a:47:87:08:7d:49:16:
62:d0:aa:c0:ef:f2:e8:89:af:0f:b3:4e:44:76:f8:
e3:e1:ab:cb:30:44:b2:7c:95:c9:6d:90:bc:86:88:
d5:11:56:59:b0:e5:3c:b6:4b:b3:9a:2a:b8:34:c8:
8d:ee:3d:75:e3:98:cb:b7:7e:49:c0:c4:d5:c4:1b:
73:03:01:68:4c:d8:c1:d3:fd:36:c4:df:58:1b:1e:
42:85:ef:10:a1:07:89:65:df:7e:25:02:1f:58:51:
68:6b:2c:2f:97:f1:af:6a:b1:cf:71:68:b2:6f:fb:
ed:4d:02:ec:2e:12:ae:3f:1a:41:ae:0c:35:8a:b4:
e0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BD:EA:76:C6:C2:0F:D6:A7:54:D1:80:2D:61:FB:C9:F8:1E:59:7B
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Ib3qdsbCD9anVNGALWH7yfgeWXs.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
71:f6:9e:07:56:3b:11:51:19:76:7c:90:d7:be:37:d1:93:00:
f0:e4:8e:8f:40:6b:ad:f1:4c:0c:d7:a4:6e:c4:4c:f4:29:54:
0b:e5:9b:60:48:be:46:f6:a2:8d:c3:d9:25:96:05:d6:8d:db:
31:dc:34:bc:eb:8e:28:41:93:65:6f:b0:71:74:36:02:2f:0d:
86:1e:0c:06:ca:b2:d2:c7:92:3e:3f:b3:b4:e5:45:ca:30:5f:
41:ce:7c:69:59:8e:f5:3c:ab:42:53:0b:a2:ab:d2:bb:1c:fa:
d1:41:e5:e4:43:36:dc:61:b8:95:cf:c1:74:aa:44:b6:f3:c2:
1b:07:5c:96:2c:0a:bd:6d:be:6d:6d:20:7a:40:b0:36:e6:95:
9e:52:35:29:a0:7d:e4:7a:58:eb:7c:ea:d2:30:d9:4f:a4:98:
80:99:26:d6:50:29:40:f8:cf:d7:21:f3:8b:96:09:ca:84:17:
49:86:be:ff:c6:ef:3a:72:ff:3c:e5:13:a5:d3:1b:c4:45:9a:
b6:94:bb:9f:be:01:42:10:66:2a:ec:1c:3d:e4:b9:a0:e0:b3:
ea:a7:45:0d:29:13:3c:ca:ce:97:38:bd:91:62:5d:c6:b6:30:
10:10:3b:4f:34:70:6a:9f:cd:77:4d:09:17:27:b5:ac:c0:2b:
c6:03:3f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org