Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/L1SYj2AjVC_VozTk7v3PF3yU2GQ.roa
File: L1SYj2AjVC_VozTk7v3PF3yU2GQ.roa (raw, json)
Hash identifier: gqoJeG4pZnrzEnqgNAF5VnMqVcPQXiXhTsZMhM0Ue1A=
Subject key identifier: 2F:54:98:8F:60:23:54:2F:D5:A3:34:E4:EE:FD:CF:17:7C:94:D8:64
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4736
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/L1SYj2AjVC_VozTk7v3PF3yU2GQ.roa
Signing time: Sat 30 Apr 2022 00:30:07 +0000
ROA not before: Sat 30 Apr 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18230 (0x4736)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 30 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=2F54988F6023542FD5A334E4EEFDCF177C94D864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:15:96:d4:ad:82:6b:07:dd:41:1f:be:e8:ac:
74:d3:1e:98:6b:97:6a:17:b4:af:d9:2a:4d:ea:f7:
6e:f9:ee:c6:34:8e:bc:64:6e:26:0d:71:7b:3a:70:
1b:0c:8d:a6:ab:56:fe:ec:6e:4e:4a:66:01:f6:8d:
94:e5:1b:18:6d:c2:6a:f8:67:c9:f0:97:a7:58:a6:
de:46:32:e0:5c:d5:bd:1f:19:b9:f2:73:a2:af:20:
46:32:6b:ce:da:41:33:46:e6:82:06:16:4c:c7:83:
ee:67:78:72:47:d0:c2:77:dd:f7:c0:fb:11:a2:3b:
53:41:5c:a4:65:1d:58:46:e5:a9:7a:75:ff:cd:7b:
4a:a2:01:33:6a:a3:ee:17:b1:fc:bd:34:7c:bb:7f:
40:dc:1f:e1:13:47:99:2d:55:8e:20:71:bc:2b:3c:
da:27:6a:ff:e7:4c:94:fe:78:99:ec:43:2b:3a:a8:
73:cc:9c:a1:81:d5:19:ba:df:72:8f:d2:ab:b3:f3:
90:47:60:fe:a1:e5:70:42:90:99:eb:b8:0f:ae:9a:
16:df:2f:a3:6b:14:71:19:93:ea:51:b6:0f:9a:11:
08:16:56:c5:51:b1:ae:80:83:6c:82:26:4e:de:ff:
0d:5d:db:c1:0a:86:07:dc:a6:bf:2f:13:8c:ff:55:
93:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:54:98:8F:60:23:54:2F:D5:A3:34:E4:EE:FD:CF:17:7C:94:D8:64
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/L1SYj2AjVC_VozTk7v3PF3yU2GQ.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
53:f1:ff:7b:a8:b5:66:eb:42:e7:3a:3b:b8:71:b5:58:95:7d:
69:8f:3d:c5:18:57:1b:12:3f:2c:01:b3:95:1e:ae:20:50:52:
ae:30:37:64:70:63:50:30:c4:c4:c0:89:f1:33:2a:c2:fa:d9:
76:3e:58:a3:27:18:47:fa:72:f0:6e:00:4f:c1:48:48:1c:30:
55:8d:79:f6:12:de:96:3f:13:23:42:8f:91:97:21:0d:b5:c2:
06:eb:fc:1e:9f:52:48:63:e8:82:ce:cc:d5:a4:47:35:6a:05:
20:52:f8:68:8e:72:50:fe:60:01:f4:1e:59:57:3e:74:f4:95:
b7:61:68:8c:90:91:89:72:a6:03:39:a1:8a:c9:8c:5d:2f:71:
8c:8a:c1:43:2c:37:21:16:f5:4a:4d:b0:c1:28:e9:80:d2:83:
0a:36:8b:59:f5:f7:7b:16:cb:cb:d2:04:f8:85:12:90:9c:42:
88:60:dc:01:e8:a7:e8:02:ff:07:a3:7e:0e:1c:9e:40:f3:eb:
91:8d:ab:82:a2:6c:06:18:cf:04:23:b4:4b:48:96:d3:44:3f:
b8:4e:6e:09:0f:75:ee:d5:87:53:0e:fd:6e:e3:8a:89:d5:ac:
92:4d:bf:ec:5c:0f:f9:b6:00:f7:47:b7:33:d3:5b:23:7a:55:
83:38:1d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org