Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/RU_tIE0FS2ycsta23Pd5pjy4R5E.roa
File: RU_tIE0FS2ycsta23Pd5pjy4R5E.roa (raw, json)
Hash identifier: GYxnMptNlNuQXltHPzNuWwmoZXpDAvgg+ahwbLudK9g=
Subject key identifier: 45:4F:ED:20:4D:05:4B:6C:9C:B2:D6:B6:DC:F7:79:A6:3C:B8:47:91
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 471B
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/RU_tIE0FS2ycsta23Pd5pjy4R5E.roa
Signing time: Thu 28 Apr 2022 00:30:08 +0000
ROA not before: Thu 28 Apr 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18203 (0x471b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 28 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=454FED204D054B6C9CB2D6B6DCF779A63CB84791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6e:7c:13:aa:9d:88:45:f7:64:12:37:cd:7a:
8c:18:1b:77:ef:e8:45:21:40:c5:a5:2d:16:e0:dc:
22:23:c7:35:6b:c3:96:23:57:e1:e3:09:6c:34:d1:
99:6d:1b:4c:6a:dc:10:e9:e0:a3:43:69:12:b3:de:
c6:50:b0:97:a3:6f:34:6d:1f:93:51:ea:51:e3:04:
a1:b9:6a:31:a5:70:d8:34:36:54:e0:84:60:8f:51:
36:ae:bf:ac:e6:0e:0d:65:93:37:e9:89:69:25:4b:
f8:6c:66:ec:b1:ca:91:04:2b:76:d1:f7:74:da:f7:
42:68:07:ed:08:74:13:ee:8b:06:d9:01:6e:c3:02:
06:58:67:11:e1:47:42:c2:78:99:65:db:dc:b0:dd:
ff:74:44:d2:08:a6:ea:68:7e:89:92:3f:b5:b9:bb:
e6:cb:49:6d:e5:e7:82:36:65:aa:b0:b3:1f:6e:ab:
cd:74:66:ec:1a:db:2a:be:4a:d3:fd:c4:5c:7f:25:
98:38:c2:93:4c:85:ab:ee:b0:3b:b3:19:18:87:02:
9d:7b:cf:1a:d4:dc:5d:06:98:e8:67:af:de:2c:b6:
a6:ec:94:64:12:f6:f4:b4:f3:78:a8:dd:29:b9:ec:
ec:9f:9a:72:06:3e:81:cd:9a:44:43:40:68:c0:92:
66:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4F:ED:20:4D:05:4B:6C:9C:B2:D6:B6:DC:F7:79:A6:3C:B8:47:91
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/RU_tIE0FS2ycsta23Pd5pjy4R5E.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
02:09:a4:98:bc:f1:58:fe:01:ab:f2:8d:55:24:d4:05:af:b7:
c1:aa:d1:db:f9:93:9b:cd:58:1e:1c:a2:4e:05:83:32:36:04:
34:c6:d0:ce:a5:ba:40:7a:07:8b:a1:e6:56:52:80:a7:97:f7:
20:f5:9f:7c:80:f2:dc:3d:7c:82:17:5c:ba:c4:33:2d:9f:c5:
a1:dc:50:50:bb:34:24:cd:a3:81:a5:40:aa:93:d3:8d:89:0a:
40:e4:f4:56:f4:4e:d7:4e:f4:9d:cd:45:8d:3a:4a:79:85:75:
76:ff:25:a6:3f:41:f3:63:9a:2c:aa:06:ec:8a:72:c2:5d:60:
eb:71:a4:70:0b:6d:1a:82:30:d6:75:fd:b4:83:aa:21:4c:e2:
4a:c7:43:1a:ae:2d:3b:18:a6:20:c2:80:51:4f:97:3c:e2:6d:
96:65:da:84:4d:44:fc:e5:26:8c:ac:b8:eb:da:b4:1a:64:98:
dd:52:83:14:72:89:30:fb:79:35:b4:75:9c:00:b3:e6:d2:de:
41:0d:38:fa:78:64:ff:9b:6c:98:df:48:d6:4d:19:98:5f:2d:
87:75:bd:1a:91:67:35:06:03:61:ec:57:6a:4c:c9:3c:55:91:
41:e2:17:c1:d0:1b:e5:40:db:3c:b1:55:4c:af:74:9f:0c:65:
76:17:bc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org