Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/TyqjJ7P5RhjWDqXP5DZRCmGbTCU.roa
File: TyqjJ7P5RhjWDqXP5DZRCmGbTCU.roa (raw, json)
Hash identifier: uBlkAR9EaLuRsJmtYaFOrfB1cXGRC8XFd2pkrSZHwO4=
Subject key identifier: 4F:2A:A3:27:B3:F9:46:18:D6:0E:A5:CF:E4:36:51:0A:61:9B:4C:25
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 33E8
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/TyqjJ7P5RhjWDqXP5DZRCmGbTCU.roa
Signing time: Wed 14 Apr 2021 10:34:48 +0000
ROA not before: Wed 14 Apr 2021 10:34:48 +0000
ROA not after: Fri 01 Apr 2022 01:01:03 +0000
asID: 47065
IP address blocks: 147.28.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13288 (0x33e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 14 10:34:48 2021 GMT
Not After : Apr 1 01:01:03 2022 GMT
Subject: CN=4F2AA327B3F94618D60EA5CFE436510A619B4C25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a3:74:52:32:06:c3:79:da:92:04:6b:4b:0a:
e4:08:24:5e:6b:4e:f8:9c:2a:3c:73:13:f7:ca:ca:
68:91:a3:7e:e4:72:91:68:42:41:3e:b4:18:a0:39:
fd:fe:2f:51:26:c1:00:10:71:c1:c2:fc:1d:a7:d5:
f1:7b:53:af:5f:04:57:eb:1a:c0:73:90:0d:cc:2c:
72:80:2c:55:50:dd:9b:bc:2e:47:db:4a:60:2f:c0:
a9:7d:ac:28:9b:70:28:ea:d9:cd:49:97:99:40:b0:
f5:2a:2e:2e:f6:5f:70:de:40:9e:bf:72:8d:77:47:
a3:c0:49:a9:7e:22:1c:27:a8:ba:0b:01:d8:78:e8:
2e:0d:be:3f:0e:32:91:68:2e:5f:e8:e6:f4:a6:e3:
21:91:35:b6:07:d0:7f:4b:1f:90:cf:00:8c:6b:09:
d7:22:d1:ec:c2:01:c1:e8:c8:a4:22:53:24:a0:91:
da:b3:48:57:f8:de:e9:97:b9:72:80:35:0d:22:3c:
77:d3:36:38:21:57:a0:ab:49:b2:22:6e:21:0f:61:
19:b5:5f:2b:58:b7:f5:39:64:73:e4:e9:c9:da:36:
29:a7:b8:52:9a:b3:24:49:e2:3c:67:70:1d:62:d4:
5b:4e:30:ee:91:e1:1e:87:bc:de:89:fe:54:41:09:
1f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2A:A3:27:B3:F9:46:18:D6:0E:A5:CF:E4:36:51:0A:61:9B:4C:25
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/TyqjJ7P5RhjWDqXP5DZRCmGbTCU.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.10.0/24
Signature Algorithm: sha256WithRSAEncryption
70:1a:76:ec:85:5c:53:de:29:51:31:d8:39:58:34:2c:fb:b7:
13:b3:a5:14:a8:76:e1:67:24:cc:11:fe:43:e2:c3:db:d6:bf:
7c:1b:a8:af:94:ce:70:9e:8f:a5:8b:00:ec:0c:ea:86:f3:c3:
00:8f:88:f0:40:39:2a:1d:57:04:99:f1:70:3b:3f:ad:23:54:
61:4f:cb:19:ff:df:3d:f5:b5:53:1f:dd:d6:98:ef:6c:9f:6e:
e8:89:5a:0d:55:8d:08:41:b0:3d:55:73:99:58:8f:7d:3e:91:
a5:0c:fb:53:27:ac:79:b2:bd:a9:9a:b9:43:21:ac:d6:b3:41:
98:83:ee:82:7c:e7:55:d6:f9:81:24:e4:c1:42:16:21:c3:d7:
5f:31:6c:85:1a:b7:c0:ef:cd:b0:f2:d8:dd:3f:af:1d:38:e0:
9e:f6:de:e8:b2:36:e8:9f:98:a1:d9:3b:b0:e2:56:a4:fd:12:
d1:51:02:dc:d0:0d:5a:e3:a6:4d:64:9a:e7:a0:c4:35:de:74:
fc:fa:89:0e:e6:71:c3:eb:fe:a0:46:db:c4:4a:cd:bd:38:00:
39:51:bd:20:a3:23:8c:fe:4d:6a:6e:c5:a8:11:23:ea:30:ef:
ff:d2:99:c6:44:01:06:a3:3f:d6:c1:57:80:e5:99:f0:37:f4:
c2:c5:bb:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org