Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/M39X0S2G3hojOv6c4fdgH6-SChg.roa
File: M39X0S2G3hojOv6c4fdgH6-SChg.roa (raw, json)
Hash identifier: +sreTsXP1BKEs/Z7PFqTTuWWHwH3DztNrESvpGZ0f2I=
Subject key identifier: 33:7F:57:D1:2D:86:DE:1A:23:3A:FE:9C:E1:F7:60:1F:AF:92:0A:18
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 46B1
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/M39X0S2G3hojOv6c4fdgH6-SChg.roa
Signing time: Wed 20 Apr 2022 00:30:08 +0000
ROA not before: Wed 20 Apr 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18097 (0x46b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 20 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=337F57D12D86DE1A233AFE9CE1F7601FAF920A18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:30:11:b8:f0:79:d9:56:ce:53:5f:80:49:b7:
7c:67:37:09:be:4f:c5:cb:af:9e:fe:d7:33:a2:1e:
4d:63:33:db:3e:80:b7:be:51:d9:eb:26:8e:20:bf:
27:25:4f:9f:a4:c3:7b:4e:48:a4:8d:40:07:e0:f6:
4b:28:a0:47:2c:b0:99:6b:64:16:cd:b8:9e:2c:d4:
53:cd:2a:5c:bb:64:fc:8f:a0:33:78:15:fa:af:a9:
62:e7:70:59:c0:e8:24:67:97:37:e8:89:09:6d:09:
9c:3e:19:e3:21:79:ae:fc:3c:ca:44:51:01:c1:1e:
2f:99:79:ea:73:9b:e3:53:68:25:3b:67:55:57:0d:
48:41:25:92:47:f9:3c:88:dd:e0:07:7a:02:e2:5a:
19:3b:7f:0e:08:5c:bb:0d:25:d9:76:2c:9d:c4:1a:
70:e2:f2:bd:c8:cd:15:38:b0:04:2b:ac:2b:c1:e5:
6a:1d:7e:bc:03:6c:53:2d:8a:9e:b8:76:c0:ec:0a:
ba:34:59:5f:49:4b:90:02:ee:c6:5e:1b:21:4f:7d:
3a:a0:2a:dc:ea:cd:f5:91:ff:30:89:68:c9:24:1f:
5d:1e:82:f1:50:65:ab:41:59:64:ce:9d:24:1c:c0:
85:d4:1e:83:b0:a3:40:a9:3c:f4:57:6f:e9:3a:83:
97:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7F:57:D1:2D:86:DE:1A:23:3A:FE:9C:E1:F7:60:1F:AF:92:0A:18
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/M39X0S2G3hojOv6c4fdgH6-SChg.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:6a:0b:59:98:eb:6a:c7:49:a5:eb:f8:05:ea:d0:f4:d7:5c:
96:86:7a:ea:f9:b1:c1:e3:27:ae:3b:7d:4b:f0:b2:b4:3b:a8:
e5:25:a1:17:72:78:fd:0f:86:36:37:62:67:88:2d:ac:7a:6e:
a5:20:fe:18:15:25:6c:6a:c7:3a:8f:6f:ee:d7:31:18:74:52:
48:6f:50:94:f4:9d:97:4e:19:48:59:55:4f:22:33:08:8b:fc:
14:0c:2b:19:bf:f2:d2:b7:65:53:15:a3:96:f9:5f:c6:87:a2:
9b:1a:93:4a:19:26:c4:e1:74:84:fb:4b:f1:48:f7:3a:15:3d:
03:40:68:02:7a:a2:5a:63:37:08:93:4a:70:e5:8f:49:52:52:
cb:46:9d:e1:00:1a:ce:fe:9f:b7:14:37:83:c7:4a:3e:a0:54:
62:06:84:8d:15:aa:dd:70:40:2b:20:2f:c7:b1:f4:90:d3:30:
ff:13:c9:16:ba:b0:d8:92:90:1f:79:e0:5f:4b:da:c0:34:f5:
d1:fe:68:3f:1f:89:ef:58:3b:50:ae:6f:fc:6d:75:80:46:8c:
6c:71:64:d2:45:36:df:50:2c:f9:b7:01:fb:80:fb:8d:a2:39:
b0:ce:1c:44:c0:f0:07:17:81:e8:bb:c8:8d:ca:27:bc:61:d1:
c9:c4:7c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org