Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/LIxnfJj0d25Y7lN5Tlgx5byAFqU.roa
File: LIxnfJj0d25Y7lN5Tlgx5byAFqU.roa (raw, json)
Hash identifier: sr/eet23ouNGBbPcgC8vvYzYbjE+9j4DCilsgjP4Yaw=
Subject key identifier: 2C:8C:67:7C:98:F4:77:6E:58:EE:53:79:4E:58:31:E5:BC:80:16:A5
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 45DF
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/LIxnfJj0d25Y7lN5Tlgx5byAFqU.roa
Signing time: Tue 05 Apr 2022 00:30:08 +0000
ROA not before: Tue 05 Apr 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17887 (0x45df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 5 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=2C8C677C98F4776E58EE53794E5831E5BC8016A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ec:a7:4d:c4:27:eb:1c:cc:fd:a2:64:c0:d3:
9b:2a:bf:b2:e9:8e:50:be:a0:9a:9d:c8:e9:66:ae:
94:d5:16:74:ff:c4:29:d8:25:4c:8a:24:db:99:61:
24:1f:6a:27:82:51:66:bc:a2:89:6d:8f:2c:98:2d:
65:79:cf:d6:7d:8f:c9:57:6f:02:a3:70:43:f5:7f:
aa:65:9c:f3:0b:a5:47:e2:3e:27:a3:ff:4e:ae:ad:
51:c6:b3:17:da:95:66:32:5b:d8:4d:98:92:06:c3:
0e:3f:59:df:d8:ca:58:0e:6b:d9:1a:7c:38:c3:84:
f3:f6:4f:ff:70:9d:d9:d2:52:9a:77:98:8b:97:13:
de:05:5f:ec:3f:78:f0:2d:b5:a4:9f:0f:84:55:c6:
a1:83:3b:6e:11:60:9b:95:01:c6:c0:b1:c4:1e:9d:
5d:b6:52:61:52:5d:ea:e7:b9:68:71:60:dd:1c:43:
92:dc:c0:10:a5:16:88:ac:22:7b:9f:b6:52:8c:25:
28:cc:8f:38:7d:df:d1:3e:fe:d2:32:a4:95:26:86:
c6:d6:ad:08:1b:50:24:76:ee:10:2f:db:1d:13:6d:
3c:fa:65:43:3e:cd:b2:df:54:4d:2b:95:9b:16:52:
30:f1:b2:31:3e:5d:12:a6:cb:de:05:b9:2b:70:dd:
66:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:8C:67:7C:98:F4:77:6E:58:EE:53:79:4E:58:31:E5:BC:80:16:A5
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/LIxnfJj0d25Y7lN5Tlgx5byAFqU.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:51:ee:65:2f:14:e5:42:bb:e5:2e:8d:de:ff:32:7e:b3:b8:
34:78:3f:3e:c2:13:1c:4f:d8:9f:db:b9:78:b4:d7:f9:2e:ae:
64:1f:af:db:ba:d1:61:ff:8e:4b:1d:d9:e4:ab:79:3b:72:d1:
5d:73:0b:26:ff:42:8e:df:ba:f3:24:4e:e5:84:75:f5:b0:a3:
9c:cd:61:39:50:14:24:fe:56:3e:6e:a9:02:c1:3d:73:97:1e:
df:3d:ca:80:3e:3f:3e:d4:8e:7d:ae:df:ea:f6:ea:bd:fa:a2:
97:cd:60:65:e9:a0:14:bd:e5:5d:c2:ff:58:47:b6:86:ef:44:
5b:cc:5c:66:e3:38:af:ea:14:b9:bb:3b:73:79:15:b1:89:59:
e7:54:be:48:3a:27:ba:67:a5:36:39:38:0a:0c:06:42:c4:a4:
f3:8f:93:0d:6c:4d:2b:71:58:ec:36:72:f3:3b:ca:29:a9:75:
48:83:c1:d6:37:16:d7:c6:2a:da:92:d0:dd:47:aa:82:59:1f:
34:11:d6:e4:0a:1b:ad:bf:06:9a:2c:8d:89:b6:97:d5:a7:b0:
50:86:08:c7:4f:b9:80:d6:32:f0:e5:9c:47:5f:af:fa:51:80:
a8:75:c3:20:0a:80:2b:49:e1:42:f6:a8:8b:ea:84:db:ef:1a:
72:05:24:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org