Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/JEl8kqtyv2UHFTv3l_Oo1X3ZEIY.roa
File: JEl8kqtyv2UHFTv3l_Oo1X3ZEIY.roa (raw, json)
Hash identifier: RaCxNuL/m0G4I9KyqGzDxlBfUphurPevyCNpLFNNCbE=
Subject key identifier: 24:49:7C:92:AB:72:BF:65:07:15:3B:F7:97:F3:A8:D5:7D:D9:10:86
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 499A
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/JEl8kqtyv2UHFTv3l_Oo1X3ZEIY.roa
Signing time: Thu 09 Jun 2022 00:30:11 +0000
ROA not before: Thu 09 Jun 2022 00:30:11 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18842 (0x499a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 9 00:30:11 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=24497C92AB72BF6507153BF797F3A8D57DD91086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a2:03:65:d6:90:6a:85:0c:78:53:d0:12:25:
cd:15:9d:05:30:da:7f:71:e1:83:2d:aa:bc:58:75:
7f:46:a7:fd:be:a3:96:96:c3:9e:70:f0:74:ed:1b:
81:f2:12:63:8b:b9:90:65:3d:f2:d8:93:a3:b7:6b:
fb:ee:32:19:f7:7e:f0:35:91:c0:7f:95:22:6b:13:
cc:e0:3e:cf:04:c3:03:d2:ee:22:2a:c1:6a:53:16:
cc:53:fc:18:41:be:e1:51:a2:51:94:1a:66:e1:58:
51:93:f9:6f:dd:61:a9:2f:99:13:f4:96:60:87:01:
6e:ed:cc:93:d5:a9:b9:ca:9a:d9:5f:47:2f:5a:38:
96:b2:21:de:dc:d4:9f:76:6a:60:ac:b2:26:a3:60:
55:f7:10:c9:e1:57:6e:eb:93:f8:1b:0a:cf:a2:ea:
de:0c:fa:0c:8e:c4:3a:bd:a6:c2:19:c5:e1:36:3c:
fa:82:c1:c6:08:ea:e8:c5:99:e8:63:13:8f:4b:f0:
92:fb:41:03:df:ad:90:c2:c4:7f:d9:ce:c0:aa:d8:
14:8d:a9:85:9f:fc:f1:f8:74:26:eb:ef:21:74:98:
60:70:49:fa:be:25:ad:35:ee:97:c5:b6:be:b6:44:
32:d3:b2:1b:36:f3:6d:c1:41:fe:68:5a:f5:5d:ea:
4c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:49:7C:92:AB:72:BF:65:07:15:3B:F7:97:F3:A8:D5:7D:D9:10:86
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/JEl8kqtyv2UHFTv3l_Oo1X3ZEIY.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
06:01:da:6b:10:13:c1:06:ac:81:86:bb:43:55:5d:5d:8f:7e:
11:2b:33:d1:c8:f6:3b:4f:39:b5:c0:04:d5:7f:65:d7:1a:aa:
69:a3:2d:ca:88:8a:9e:a7:5a:d5:32:78:20:ab:02:9d:87:ed:
0a:b8:c5:ce:cc:a3:60:32:e8:58:0b:46:5e:52:1d:da:60:e4:
56:fd:d7:fe:1e:7d:31:18:79:5c:60:78:ef:9e:d4:09:31:63:
37:0c:94:80:7e:28:06:a6:b5:f2:4a:2d:fc:c1:99:9c:97:ee:
ce:4b:3a:de:9b:41:65:af:af:26:f2:55:e7:c1:76:be:86:60:
4e:4c:cd:1a:28:95:12:d9:88:aa:38:f5:a8:aa:b2:9a:f6:cb:
a5:18:1b:55:58:79:2d:bb:f1:0f:2b:03:7e:93:fd:4d:ca:10:
55:cc:a2:3b:4d:4e:97:cc:06:7d:74:19:f8:bf:c5:e7:90:d1:
c5:5f:e2:17:4c:68:29:1a:c1:18:ae:dd:8e:6c:64:c1:5f:0b:
d8:dd:a2:5a:2a:22:19:ea:fa:de:6a:d8:e0:b9:82:a9:16:a8:
95:c6:11:35:b2:1f:47:f5:ae:6f:cc:6b:53:d6:b1:b8:7c:de:
bd:bb:d8:7b:80:18:08:10:d4:7c:54:d7:f3:fe:58:61:a4:09:
7b:b3:28:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org