Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/ZOWK_qswz9sKQH-UIE0ThdYrAAY.roa
File: ZOWK_qswz9sKQH-UIE0ThdYrAAY.roa (raw, json)
Hash identifier: 5/mg2CnopUi5fOhqhs5OdrlxKBHSrhoFkZUdc+qexSU=
Subject key identifier: 64:E5:8A:FE:AB:30:CF:DB:0A:40:7F:94:20:4D:13:85:D6:2B:00:06
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 46FE
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ZOWK_qswz9sKQH-UIE0ThdYrAAY.roa
Signing time: Tue 26 Apr 2022 00:30:06 +0000
ROA not before: Tue 26 Apr 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18174 (0x46fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 26 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=64E58AFEAB30CFDB0A407F94204D1385D62B0006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:76:4a:67:c4:3f:f7:05:ce:c5:d5:78:02:dd:
eb:c3:ea:fb:db:8f:8b:4c:ad:a0:32:e5:db:02:81:
63:3d:89:1e:dd:5e:8c:be:d7:83:ee:bc:b7:b9:01:
62:ca:67:c7:17:4a:06:02:61:f3:3e:5a:d2:0b:25:
af:d1:36:b7:83:e4:2d:8d:1a:5d:bd:ba:6b:4a:ac:
12:54:8a:5d:cf:bb:f3:8d:01:bc:1d:de:e2:84:cc:
c6:43:f1:c7:c5:e1:24:cf:d8:fb:f5:9c:6c:ed:ad:
e4:4e:90:58:4b:73:ce:48:55:7a:a2:28:1a:37:70:
f0:06:7a:ba:7a:5b:f6:57:ef:66:cd:49:80:bc:74:
d9:3f:2e:8b:5e:51:96:42:9d:d9:22:b8:ce:af:cc:
5f:6d:46:e5:0c:26:e9:f2:02:4e:17:2d:bd:88:fc:
95:09:0f:6a:d5:a1:72:1d:86:e9:ce:5d:d2:e6:2f:
56:1d:d3:e3:d6:f7:27:78:a3:53:1f:3d:0b:90:52:
5f:dd:46:00:a3:57:09:4e:81:2c:79:bd:06:a5:01:
1a:ac:73:2b:68:82:d2:12:cf:8c:97:14:7e:01:d1:
62:28:61:17:68:db:15:59:55:c7:e9:55:10:f7:8f:
02:3f:f1:0a:10:c2:24:28:ba:28:ca:94:97:b4:e6:
2b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E5:8A:FE:AB:30:CF:DB:0A:40:7F:94:20:4D:13:85:D6:2B:00:06
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ZOWK_qswz9sKQH-UIE0ThdYrAAY.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
64:e8:2d:a2:39:17:30:ea:3b:5e:bb:ad:2f:9e:79:60:fc:ac:
04:59:b4:91:73:58:8a:a9:51:bd:a7:af:c4:5e:49:5a:f4:91:
39:88:11:d4:02:96:d8:2e:fe:88:15:02:2f:31:65:f5:53:95:
16:5a:2a:8f:7c:9f:81:8c:23:54:c5:5b:5c:05:9e:86:bb:16:
4e:2b:ac:63:bc:66:b1:94:92:79:64:b9:0b:e1:44:51:b6:f5:
01:ca:ce:42:34:bd:18:85:b6:bb:48:90:93:ee:69:35:c4:61:
2c:e8:b9:de:f9:3d:cf:ef:df:0a:2b:6e:34:76:37:91:78:98:
23:d4:d8:80:bd:a6:9b:67:b9:4c:5c:3c:da:f4:fc:cc:61:bf:
c3:3e:ad:51:a1:46:d5:a2:f5:82:de:7a:2d:b1:4c:be:bc:8d:
74:ba:90:e1:23:0f:7e:2f:78:3e:99:15:37:34:0a:e4:ec:e3:
50:40:86:5f:cf:02:b8:34:da:59:0e:95:a5:19:3d:35:66:9e:
df:82:cc:0d:4c:0e:c6:5c:6e:d5:cd:e0:1d:78:83:60:b4:6d:
1b:54:7f:76:ed:0d:4f:a8:9b:05:bc:33:19:12:3f:87:86:c4:
bb:e3:c7:b8:b4:f9:c4:7d:7c:b0:0c:07:a1:dc:71:24:97:01:
62:55:8c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org