Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/JPa9g0taDFQ55FVJP7GBz3S09-M.roa
File: JPa9g0taDFQ55FVJP7GBz3S09-M.roa (raw, json)
Hash identifier: 5ZBR2WXWjoIJmIRwjhdvd7BPhoJjB8/jG5p0hO52oqc=
Subject key identifier: 24:F6:BD:83:4B:5A:0C:54:39:E4:55:49:3F:B1:81:CF:74:B4:F7:E3
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4540
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/JPa9g0taDFQ55FVJP7GBz3S09-M.roa
Signing time: Fri 25 Mar 2022 00:30:07 +0000
ROA not before: Fri 25 Mar 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17728 (0x4540)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 25 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=24F6BD834B5A0C5439E455493FB181CF74B4F7E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:a5:e7:4e:74:9d:65:0b:fb:a1:9b:3f:49:cb:
00:58:91:2e:db:5f:40:0a:6a:8e:6e:2b:0b:86:e8:
bb:b8:7f:55:07:56:b6:1e:d0:06:6a:04:0c:00:09:
b7:e8:ac:a1:1b:ce:a7:8a:a5:d0:45:30:bf:48:29:
4d:5c:c3:31:89:37:f7:75:78:6d:26:ab:f6:23:0a:
5d:9c:46:b9:a3:d3:5f:68:3a:ff:b5:f0:b6:8e:92:
0b:3b:f5:14:de:d8:c9:b3:cd:c8:51:df:05:a7:be:
81:e6:5d:d6:6f:e6:9e:84:87:38:81:e8:be:f4:52:
ad:d1:21:40:40:9e:d6:9c:0b:49:c1:c6:65:6b:50:
1d:f8:ba:6e:16:a3:f8:1a:18:97:f1:68:b6:96:9f:
ab:b2:79:ed:0d:f8:c7:40:1f:ae:33:62:92:87:3b:
33:23:db:86:bb:0c:ae:89:4f:c5:56:f2:29:ad:72:
e5:3a:41:91:f6:57:05:24:61:12:37:29:da:8d:05:
fb:2d:5f:64:87:8d:c8:a4:9f:65:03:02:53:0e:39:
d7:fb:01:95:da:c8:f3:bf:b1:5c:3a:19:aa:ea:49:
8b:5d:a4:61:6e:bd:93:c4:00:f5:85:07:4b:af:c6:
25:df:5c:1a:7c:01:b8:06:ce:95:fb:b1:96:57:01:
c9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F6:BD:83:4B:5A:0C:54:39:E4:55:49:3F:B1:81:CF:74:B4:F7:E3
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/JPa9g0taDFQ55FVJP7GBz3S09-M.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:6d:bf:05:58:88:b2:a8:9f:63:ee:31:11:ae:d0:b6:df:3e:
8a:d3:06:66:95:82:84:05:1f:53:e9:5e:8e:f9:c4:70:e1:00:
36:26:d9:03:85:65:f2:d7:75:30:39:e0:31:3f:d3:82:9e:3e:
9b:4b:ef:f7:80:41:e1:c5:9d:12:c6:51:7c:cf:f4:70:83:54:
4a:ca:cb:a8:28:11:a7:67:12:7d:2b:23:d4:29:3a:c7:a4:85:
9e:f8:c2:6b:85:ff:d3:64:38:58:5b:da:dd:e4:38:44:ee:88:
1f:6e:5a:6e:8e:2e:fe:f1:ae:f4:90:fb:72:79:e3:d9:5b:12:
34:1c:ea:e9:8f:4d:b1:04:76:5a:dd:7e:22:0a:3a:ca:8a:4c:
d6:9e:5b:32:26:7b:02:9d:bc:8c:a7:29:ec:4e:a1:c3:45:8f:
6c:1b:07:a9:8d:14:04:69:27:bf:05:13:b9:b6:df:4e:05:cd:
87:b7:df:19:13:98:da:1e:4b:54:c7:9b:53:e8:a9:73:d1:e1:
33:98:33:84:f3:65:9b:31:48:80:e3:c0:55:03:27:dd:c7:48:
46:c5:b7:e2:0c:25:4c:1d:81:d4:7e:e3:60:86:92:72:dc:d2:
69:90:a4:8e:9c:bb:cb:86:6a:bc:d8:f7:bc:41:84:93:60:a9:
32:56:a2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org