Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/RAdJu1sLYWBi75nJm2XcQS-K8hg.roa
File: RAdJu1sLYWBi75nJm2XcQS-K8hg.roa (raw, json)
Hash identifier: q6lBlGOJGUQP1lRngA7N/EXzkCq/EJuwbVj8wYz80vg=
Subject key identifier: 44:07:49:BB:5B:0B:61:60:62:EF:99:C9:9B:65:DC:41:2F:8A:F2:18
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4938
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/RAdJu1sLYWBi75nJm2XcQS-K8hg.roa
Signing time: Fri 03 Jun 2022 00:30:12 +0000
ROA not before: Fri 03 Jun 2022 00:30:12 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18744 (0x4938)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 3 00:30:12 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=440749BB5B0B616062EF99C99B65DC412F8AF218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:03:9a:d9:bd:46:16:4d:55:d2:6a:6c:c7:ab:
5b:fe:ad:75:f7:32:36:1a:78:36:fe:6a:6f:4f:94:
68:95:90:a0:af:a8:e1:92:8a:d2:9f:bc:b2:91:8c:
16:63:5c:b4:a3:92:1c:f3:99:35:80:4f:e6:63:d1:
be:4c:2b:0a:ec:72:2f:a5:5a:6e:ef:25:78:04:33:
01:35:a6:23:63:18:fb:17:25:c7:39:84:ee:d7:7e:
14:cc:93:fd:0b:a4:06:19:c9:21:1e:ed:74:6c:e0:
53:47:6f:59:ee:f7:65:49:e1:de:81:43:4b:70:05:
b6:67:cb:ec:a4:a6:15:ef:80:f1:aa:20:ed:e5:a2:
23:04:88:5a:42:a3:40:c9:70:a3:d8:df:50:ed:2a:
86:d6:1d:0f:b3:2e:0c:be:31:6b:0c:fe:c0:62:7c:
f9:63:50:8b:16:14:c0:64:34:c2:7b:47:2a:85:41:
57:4b:af:8a:2b:39:b3:c3:ee:ab:92:40:46:21:4c:
ae:c9:58:ed:0e:39:d5:9d:39:13:d7:26:22:d4:10:
b1:af:98:a6:c9:9a:68:07:e3:5d:46:a9:b0:5a:2a:
a5:67:0a:e5:2f:50:1f:f7:4b:49:92:81:e1:14:fe:
81:06:52:63:54:56:3d:6c:9b:28:6a:d3:d9:61:b7:
29:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:07:49:BB:5B:0B:61:60:62:EF:99:C9:9B:65:DC:41:2F:8A:F2:18
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/RAdJu1sLYWBi75nJm2XcQS-K8hg.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.8.0/24
Signature Algorithm: sha256WithRSAEncryption
14:e0:ad:d4:1b:9b:57:70:3a:0b:e8:b3:c8:7a:e6:02:8f:5a:
e7:99:06:e1:49:5a:5c:20:44:c8:da:65:c2:57:57:9a:ad:c2:
10:46:fb:e6:d0:d4:7d:e0:5f:e8:9e:6a:6e:03:1b:07:21:6d:
0e:3a:90:73:3d:42:a8:6b:f7:ea:7a:cf:6d:5f:05:d4:ba:a0:
1e:6b:17:d5:d6:42:27:8b:08:b5:5a:dc:86:17:6e:06:ec:84:
c2:77:2b:e1:ee:19:08:42:bb:00:00:8e:fd:2d:6a:d0:03:2f:
6f:19:55:78:63:71:47:68:57:53:6c:4d:48:95:e1:92:19:1f:
68:09:10:98:30:e8:c8:15:02:68:7d:ca:f8:c5:26:f8:c1:0a:
5b:6a:be:a4:00:07:a0:49:97:3f:39:4f:7b:c4:a6:49:58:8e:
87:32:c2:9a:ca:2f:d9:76:09:15:3b:53:40:d2:92:1a:4d:85:
8c:3a:3c:dc:95:e1:4e:4d:da:5a:7a:d5:ab:30:52:1b:a2:56:
6d:07:8e:42:1e:91:38:58:bc:0d:7d:1c:52:93:9a:2a:c9:ab:
5b:a9:85:31:e0:32:cd:ed:70:b8:5c:9b:51:b2:b8:62:eb:59:
e7:21:fa:96:cc:9b:5a:55:00:f0:79:c6:9e:32:f5:a8:0a:8e:
b9:3c:46:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org