Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/S6TIka3AcMxTdQOef1_bJjLTSws.roa
File: S6TIka3AcMxTdQOef1_bJjLTSws.roa (raw, json)
Hash identifier: 37RgwcBBQs7TuMHss1F1P5mhuRCRnoLfXKEQHq8jVaE=
Subject key identifier: 4B:A4:C8:91:AD:C0:70:CC:53:75:03:9E:7F:5F:DB:26:32:D3:4B:0B
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 471D
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/S6TIka3AcMxTdQOef1_bJjLTSws.roa
Signing time: Thu 28 Apr 2022 00:30:09 +0000
ROA not before: Thu 28 Apr 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18205 (0x471d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 28 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=4BA4C891ADC070CC5375039E7F5FDB2632D34B0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d7:d8:f1:9a:eb:5e:03:b2:cb:77:50:c3:87:
6a:b3:1f:cf:d1:91:f6:6e:d5:0f:c9:24:fd:3e:1f:
b8:ea:8d:aa:8a:45:5f:89:d5:73:84:b7:f0:ce:f5:
61:4e:0d:80:ef:70:65:33:95:20:91:b7:01:de:ef:
d1:f7:ea:b4:44:7f:fe:63:33:84:c6:e0:46:21:87:
11:da:71:2d:bf:ab:d4:ce:91:a3:b2:d5:4c:c7:38:
67:61:15:74:48:cd:bc:b0:59:61:91:0a:1a:13:89:
36:a9:55:d4:32:91:9b:ce:7c:78:a2:6f:05:8f:df:
98:ae:63:77:c5:bf:f3:20:9e:bc:5a:65:80:13:e4:
d0:e0:e2:92:8c:4e:75:15:e9:5a:3a:ef:9c:c8:a6:
3e:9c:5e:50:d1:3c:d9:dc:90:4b:97:f0:50:ed:b9:
48:35:6f:37:ae:94:27:63:86:82:29:c6:00:9b:bd:
1c:15:69:90:d3:74:ee:66:63:f8:6e:f7:91:fd:92:
63:3f:85:4d:00:83:d0:56:61:c8:f7:96:a1:74:91:
2d:dd:f7:a4:54:d3:c2:03:15:cf:2c:1a:f0:02:a4:
c4:39:b9:90:ff:9b:0a:32:28:eb:e2:ab:8c:ac:b2:
66:54:86:8a:bf:78:c1:f2:b5:a6:21:b0:f4:a4:71:
8f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A4:C8:91:AD:C0:70:CC:53:75:03:9E:7F:5F:DB:26:32:D3:4B:0B
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/S6TIka3AcMxTdQOef1_bJjLTSws.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:29:df:05:86:ab:7e:ff:60:69:07:05:c6:4d:df:cd:6d:d5:
4f:52:29:57:b4:ca:ef:3e:dc:a7:9e:8f:ca:03:cb:8f:fa:2b:
43:db:5f:b2:fa:82:7b:0f:0d:6b:28:ac:a3:1d:ad:bd:42:e8:
0b:c4:61:79:58:1a:a6:75:ed:e1:dd:5c:86:bb:f9:98:be:24:
25:15:de:c2:23:ba:11:2b:80:da:3e:c5:9c:90:3a:23:97:a4:
ee:83:62:ca:df:eb:06:0b:ee:db:50:78:83:a9:70:15:34:53:
ab:28:61:d6:52:b2:e2:f1:d0:a3:36:c4:1e:47:82:51:14:89:
87:16:57:b0:85:5c:65:9d:aa:17:8b:a8:5c:9d:5a:c5:17:1a:
e1:b7:83:04:a2:47:4a:5c:80:6e:6c:42:19:ac:2e:4b:2e:6b:
57:27:99:6a:05:92:2d:ed:71:fd:51:dd:70:9e:45:3e:17:f7:
75:c5:5e:b8:ef:0d:59:c3:a6:3e:04:8e:a8:fc:e4:04:3b:a1:
70:21:e5:58:b9:37:00:84:62:5b:87:d8:f5:f0:37:b4:1a:55:
53:1c:d5:d6:10:65:89:a4:34:2c:9d:50:b2:01:7c:99:e2:75:
17:ed:9e:f5:45:c7:e1:ee:91:64:32:fd:ee:ee:c3:46:00:55:
05:43:b0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org