Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/V0hhqG_oJ9uK8TI7YQr5BXSFm6E.roa
File: V0hhqG_oJ9uK8TI7YQr5BXSFm6E.roa (raw, json)
Hash identifier: 96N/aJWisUoA0y9/mj+E2Z1c9Z+WKp05ugy655bf8t0=
Subject key identifier: 57:48:61:A8:6F:E8:27:DB:8A:F1:32:3B:61:0A:F9:05:74:85:9B:A1
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 44EC
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/V0hhqG_oJ9uK8TI7YQr5BXSFm6E.roa
Signing time: Sat 19 Mar 2022 00:30:07 +0000
ROA not before: Sat 19 Mar 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17644 (0x44ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 19 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=574861A86FE827DB8AF1323B610AF90574859BA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c6:81:6d:79:6f:ad:f1:5f:d0:21:b7:fc:83:
4d:a0:b6:0d:a0:04:b8:f3:2c:7a:52:2c:17:67:89:
bc:65:97:ca:78:72:cb:8b:de:1e:b0:59:5f:e4:4f:
cd:76:17:57:e5:7b:fc:3b:78:b7:95:a1:af:63:7a:
57:54:83:00:a5:c2:4e:4b:1d:cc:a9:c9:c7:95:7a:
f8:a9:2f:b4:11:69:0c:96:e8:28:8f:2d:02:a3:ab:
30:e8:41:ce:d1:ed:b3:9d:8d:e7:17:fa:5d:03:5e:
97:57:bc:df:87:39:dd:c4:51:17:14:64:e2:44:a3:
d6:88:da:32:43:5b:79:71:5f:d1:bd:ca:2a:b7:53:
26:99:57:85:42:15:8f:0b:52:34:91:fc:81:75:50:
0d:86:57:90:b8:4d:1d:45:49:34:77:27:eb:4a:1a:
54:77:e9:11:2c:cf:a4:3b:51:1b:b2:e3:76:77:f8:
30:96:aa:a8:ec:21:ab:a0:18:c3:83:93:6e:6f:4e:
16:15:be:71:3f:67:36:a5:4f:ed:2e:f5:69:4f:9c:
bb:2c:65:f1:30:b0:27:50:47:fb:e8:2a:c7:ad:17:
a4:af:96:9f:48:3e:0f:e7:7e:d6:64:67:5f:f8:b6:
55:af:ab:76:0f:a3:d7:d9:22:ff:39:03:d4:34:b4:
f9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:48:61:A8:6F:E8:27:DB:8A:F1:32:3B:61:0A:F9:05:74:85:9B:A1
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/V0hhqG_oJ9uK8TI7YQr5BXSFm6E.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:2b:75:46:4f:75:cb:2c:c4:7a:ab:79:e2:6e:94:37:d7:c8:
48:1e:ff:66:5d:6b:1f:08:e1:e5:92:ae:29:7a:7d:ae:09:7c:
7c:94:68:42:d1:8a:84:ec:3a:9f:f0:cf:0c:97:46:17:c9:89:
fa:b0:30:7f:99:be:9f:7b:b8:58:05:3d:42:b2:d8:e0:ea:aa:
3a:eb:e9:70:56:ba:99:5e:74:6e:2c:3c:23:f1:44:a7:35:ea:
db:62:dc:08:3a:47:22:8b:ce:4c:c0:56:c9:be:23:c3:c5:32:
7d:a7:ce:87:c0:33:4e:e5:8e:8e:aa:d7:19:9d:16:96:b2:d3:
a2:ef:6a:78:1e:7f:66:81:68:95:63:b1:86:17:7f:25:2f:37:
9a:05:47:15:bb:e2:ed:d8:89:49:7d:b7:0b:8d:eb:09:30:5b:
00:bb:d6:40:ca:59:8b:34:9c:e3:dc:1a:58:68:e1:87:ce:7e:
1a:fb:66:00:56:a4:4c:c7:a0:de:ab:0d:a2:01:95:87:84:fc:
d3:dc:bf:3b:17:3b:c9:f3:a2:3a:22:d6:f3:5e:87:3c:eb:ee:
de:75:d8:4e:b8:19:58:82:4e:fa:ed:c3:3c:ba:5d:81:7e:7a:
68:a8:1f:42:fe:60:91:cf:7c:9b:c8:80:93:3e:ba:cf:6d:16:
b1:25:5a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org