Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/L-HyYonm-hBXWwyXqcEdfmrTw88.roa
File: L-HyYonm-hBXWwyXqcEdfmrTw88.roa (raw, json)
Hash identifier: lM/oaHiul9B8kw6O+19cpe/YVSEuwCxJvKhZG0YpMUE=
Subject key identifier: 2F:E1:F2:62:89:E6:FA:10:57:5B:0C:97:A9:C1:1D:7E:6A:D3:C3:CF
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4781
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/L-HyYonm-hBXWwyXqcEdfmrTw88.roa
Signing time: Thu 05 May 2022 00:30:08 +0000
ROA not before: Thu 05 May 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18305 (0x4781)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 5 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=2FE1F26289E6FA10575B0C97A9C11D7E6AD3C3CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fd:d6:e9:65:4e:bd:3f:b9:36:3c:52:ff:9b:
79:23:bd:d1:64:b9:2b:ee:8d:6f:41:de:7c:35:ab:
9a:0a:a3:80:88:5b:29:15:b7:0a:a4:2b:ad:86:6e:
cb:c1:1f:8a:d5:80:bd:ed:1d:48:0b:2d:64:39:59:
bf:e0:90:73:79:89:c5:fb:c5:87:fb:25:e0:a4:36:
59:74:b0:28:36:4b:e3:8a:d2:b1:84:41:4e:e4:69:
87:e8:3a:f9:f1:e0:74:6d:67:09:6f:88:65:cd:9f:
ab:8a:0f:df:77:b2:cb:f9:2c:c0:f9:fe:c5:7c:e1:
8b:1b:56:5c:c4:d9:73:94:51:6a:f3:94:a2:11:5c:
e9:ed:b1:23:0c:61:b6:c1:38:f2:7c:50:fb:ab:ac:
7c:42:7d:c2:0f:88:d6:f9:27:7f:e1:c9:c9:77:1f:
1c:b6:a4:93:ff:69:c9:49:f5:d5:54:19:1f:64:92:
9c:a7:ba:ea:36:7f:0c:4f:29:b6:e7:44:ca:60:65:
40:6f:4d:2c:97:2a:33:36:39:03:26:f8:81:09:fe:
82:2b:22:f0:2c:dd:c3:f8:3d:f6:a6:9e:8b:d5:1c:
ce:cb:01:fb:e6:bc:5b:c0:ac:8a:a8:16:a6:32:d0:
c3:35:7f:3d:b4:e1:b4:5e:94:c8:2c:29:f4:28:69:
0e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E1:F2:62:89:E6:FA:10:57:5B:0C:97:A9:C1:1D:7E:6A:D3:C3:CF
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/L-HyYonm-hBXWwyXqcEdfmrTw88.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
36:81:0d:d5:0e:71:f9:f2:7d:63:33:12:00:4a:8e:f9:2e:37:
2f:4e:15:94:97:c9:66:47:b3:ab:c1:63:d2:3c:26:fe:e4:83:
f4:25:ea:bb:bd:d8:d7:4f:a4:b0:f2:63:a8:46:eb:54:20:15:
51:7f:f9:c7:eb:2f:8a:3b:38:72:35:d4:fa:99:a3:17:a5:aa:
3f:52:80:47:36:e1:62:75:51:71:e2:be:4e:af:5f:df:21:dd:
1d:02:84:41:bd:01:91:ef:7e:17:f8:d4:f3:ca:5a:fc:53:af:
74:55:47:68:b2:07:39:54:3e:25:0c:4b:05:1c:10:03:aa:33:
9b:1e:1f:48:b2:54:72:67:0d:55:91:52:6a:94:13:c5:ce:5f:
cd:f2:cd:f0:cb:ce:c7:7c:c6:4c:4d:8a:db:50:14:0c:25:f6:
3f:d1:07:c9:97:06:bb:5f:07:1b:aa:6d:8a:85:8b:88:f3:51:
02:2b:6d:23:29:b0:54:52:14:8d:f2:f5:60:ea:c4:a2:c5:52:
15:d4:d6:59:39:c7:3f:4b:83:bc:3b:3d:86:b4:4c:1f:f8:0b:
5b:08:0c:93:ea:05:1b:db:e8:0d:39:ba:46:af:8e:7d:7f:ab:
bd:21:c8:00:5f:5a:c2:fb:20:de:4c:cd:83:b4:fa:19:f7:c7:
90:58:8e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org