Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/VWa_hxJGHDOvgxSmBnNfaaLSXf0.roa
File: VWa_hxJGHDOvgxSmBnNfaaLSXf0.roa (raw, json)
Hash identifier: PYFsI/MoyMzkl5aMyY5PbIpmctxfcToY2wlYukRfung=
Subject key identifier: 55:66:BF:87:12:46:1C:33:AF:83:14:A6:06:73:5F:69:A2:D2:5D:FD
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 441D
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/VWa_hxJGHDOvgxSmBnNfaaLSXf0.roa
Signing time: Fri 04 Mar 2022 00:30:08 +0000
ROA not before: Fri 04 Mar 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17437 (0x441d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 4 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=5566BF8712461C33AF8314A606735F69A2D25DFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:47:c1:a6:c0:07:a6:76:ac:ee:75:d1:a1:68:
33:5f:ed:80:bd:5c:84:f4:b4:32:ac:ac:a0:73:d5:
92:b6:38:e1:f4:b1:29:de:1e:1a:bb:79:df:7f:0a:
2a:8e:07:10:09:c8:15:d3:08:c3:7d:f2:15:ef:1a:
7d:36:2b:83:16:e4:4f:6b:9e:1d:18:a7:00:7f:4a:
57:43:e6:9d:ff:92:c4:e9:9f:9c:ee:83:df:82:67:
8a:9b:b9:f6:24:a1:d3:a8:0c:3f:3e:4e:8e:ab:7e:
75:a6:1b:87:68:59:00:05:1e:5e:ef:8f:f6:90:1e:
d0:31:e5:3c:d6:d4:fc:84:76:e6:ca:8e:bd:a9:92:
5f:aa:91:5f:e9:9a:4b:fc:63:62:be:cd:fd:44:32:
39:0a:23:31:5a:36:b4:47:57:58:53:ef:ca:89:b9:
6d:7f:c3:d7:cf:b3:e9:ca:d0:5f:20:04:3c:f6:1a:
cf:3a:7c:80:0b:83:1f:b1:34:1d:84:e1:41:29:96:
e6:c7:67:62:1e:33:0d:d0:ff:08:fd:c2:cc:71:8c:
04:07:19:20:93:42:b3:a5:25:73:95:39:b3:0b:54:
e1:4c:39:32:aa:99:98:ca:23:9f:db:45:0e:78:65:
4f:61:f4:fe:9b:f8:10:21:3d:3e:ea:b2:79:06:42:
13:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:66:BF:87:12:46:1C:33:AF:83:14:A6:06:73:5F:69:A2:D2:5D:FD
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/VWa_hxJGHDOvgxSmBnNfaaLSXf0.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
50:59:d9:ed:82:2a:e2:7e:7c:86:2e:ca:e0:c8:35:b5:78:b0:
88:1c:06:1e:f0:25:0d:cc:c3:d1:cc:67:65:f5:0f:ec:67:24:
0f:e3:0d:6c:40:58:53:aa:23:88:22:0a:bf:53:c4:02:1c:74:
7f:d8:2f:9d:5e:33:6e:be:4c:f0:b3:da:c1:e9:1b:52:17:22:
35:6f:85:8c:02:d3:d0:51:a8:ae:d3:3f:96:06:ef:ee:31:7a:
42:fe:f8:06:dd:b8:71:d0:0c:fc:90:be:87:69:9e:81:e4:7b:
5d:cc:91:44:94:5a:38:56:e1:1b:70:75:67:eb:1b:fe:1e:77:
ee:61:3a:77:5e:87:e4:60:97:d0:2f:f3:1f:51:43:f7:2c:3d:
25:93:57:aa:60:cf:72:92:92:b7:de:7d:ef:23:8e:39:25:fa:
47:34:6b:53:6f:f7:65:4c:77:bb:06:41:fd:10:73:6b:2d:6d:
e5:9b:db:d6:ce:e7:32:16:28:9a:0c:e6:74:1a:04:4e:fe:3f:
c7:c7:85:e7:8e:84:f2:e8:0d:f7:27:84:e9:e1:c4:a2:a0:30:
2e:5b:0e:0d:1d:99:e9:b2:30:04:ac:57:f2:35:b1:8b:a5:14:
1d:e6:c7:e3:6b:46:f7:f6:e3:5c:26:a4:ab:dc:59:32:f1:86:
25:76:31:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org