Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/WmEgEfkHxuQ12lljojKMlwZNUMM.roa
File: WmEgEfkHxuQ12lljojKMlwZNUMM.roa (raw, json)
Hash identifier: U9E9MAn7qqeV2r4BtOUuYhjlCCUiRuy1qAnbpzVP1D4=
Subject key identifier: 5A:61:20:11:F9:07:C6:E4:35:DA:59:63:A2:32:8C:97:06:4D:50:C3
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 47C3
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WmEgEfkHxuQ12lljojKMlwZNUMM.roa
Signing time: Tue 10 May 2022 00:30:07 +0000
ROA not before: Tue 10 May 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18371 (0x47c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 10 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=5A612011F907C6E435DA5963A2328C97064D50C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8f:93:2d:c4:68:c9:8c:8e:47:db:61:d9:d0:
dd:c2:67:3b:a7:84:94:1b:0c:fc:39:43:0a:9b:94:
2e:8c:00:0c:eb:0e:fb:2a:1a:ce:cb:22:96:b2:83:
9a:b9:18:1f:68:7f:2b:d0:a7:a8:a3:c2:2e:ef:b2:
15:c3:5a:60:89:ad:f1:18:66:d3:06:b7:88:58:ee:
52:c3:f2:00:0b:a8:7f:c2:50:fc:d8:3a:8f:f0:25:
ff:1d:dc:e3:be:39:af:4c:91:a7:ad:d5:3a:cc:a4:
31:ec:7e:42:68:64:5e:41:64:18:42:61:40:e1:c0:
27:a5:ad:d1:68:41:ee:db:d9:fb:45:02:5e:38:4d:
7c:83:4a:65:fa:74:96:8f:22:ca:a9:29:9d:ed:69:
d9:5a:82:a6:94:c8:8b:a3:f2:c0:e8:38:1b:df:bd:
71:d2:cf:a9:c4:75:36:dc:91:55:f1:43:7d:75:7b:
48:b8:ed:1a:09:01:c5:c2:f9:7d:53:c0:52:3f:dc:
4c:1d:d9:a7:60:4f:fd:c1:88:a0:65:1e:87:02:41:
d7:f0:f3:34:02:13:c3:50:ce:52:a8:e7:38:1f:a7:
86:42:58:f5:b4:61:92:51:8c:d6:d0:90:b9:07:ff:
6e:61:a3:80:7a:9b:29:1b:3d:aa:40:b8:dd:a6:6a:
75:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:61:20:11:F9:07:C6:E4:35:DA:59:63:A2:32:8C:97:06:4D:50:C3
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WmEgEfkHxuQ12lljojKMlwZNUMM.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
54:b7:da:16:20:c0:d1:46:72:7f:6b:a0:f9:88:e5:0e:fc:62:
10:24:56:23:3e:cd:91:cc:c6:f3:3b:f2:5a:c2:e2:88:34:38:
a7:00:7b:8d:ae:8a:bf:d5:d8:b6:55:8f:00:2c:3a:d6:ee:55:
54:08:12:b3:79:13:2e:7f:ec:10:79:a9:af:fe:9a:cf:9f:a9:
04:17:b5:fc:6e:c0:c8:b5:d3:62:e9:e3:0f:be:5a:70:18:c5:
83:20:0e:ed:56:33:2e:92:54:63:d1:2e:37:92:f5:73:6f:f8:
9b:89:71:34:92:fb:90:7b:4b:12:19:af:af:27:af:37:46:4b:
f6:4f:fc:ba:1a:4c:b4:00:6f:f5:07:bc:b4:48:6b:e9:6a:bc:
67:52:6a:0a:27:2f:03:3b:10:89:a9:25:1a:05:85:96:35:fa:
d3:35:fd:1c:a5:29:78:53:80:3a:1f:5f:3e:fc:a8:46:46:03:
9d:9d:64:bc:df:16:e8:e1:f8:25:18:54:21:4a:3c:3a:68:63:
d0:c9:0c:77:74:0f:39:81:a2:8f:3d:1d:49:81:79:2c:51:c3:
38:a7:64:24:5b:9a:df:f1:39:d0:fd:ad:da:e9:17:68:1c:29:
6d:1b:86:62:17:1c:61:ac:02:71:1b:88:2d:6c:52:32:cd:30:
22:a8:40:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org