Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/ZwRR3StSf_w-qCgo9S7vigJ7duI.roa
File: ZwRR3StSf_w-qCgo9S7vigJ7duI.roa (raw, json)
Hash identifier: Z9KewbIjvTnXwTT77eL4e3SOVfs6GBHtAwpvl3MIEhM=
Subject key identifier: 67:04:51:DD:2B:52:7F:FC:3E:A8:28:28:F5:2E:EF:8A:02:7B:76:E2
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 47C7
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ZwRR3StSf_w-qCgo9S7vigJ7duI.roa
Signing time: Tue 10 May 2022 00:30:09 +0000
ROA not before: Tue 10 May 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18375 (0x47c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 10 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=670451DD2B527FFC3EA82828F52EEF8A027B76E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:02:74:a9:65:8c:43:88:1d:87:cd:2a:ca:ce:
27:30:48:d2:af:c2:b7:d7:0a:3b:f8:06:69:f7:8b:
91:65:6c:1d:ba:cc:40:d4:c6:39:ef:4c:89:41:9d:
0c:8e:a2:44:d3:95:44:a8:18:19:49:29:23:7f:80:
10:e7:27:e3:a2:b2:67:32:2a:71:83:c4:be:ab:6f:
a2:d4:0b:8e:87:c5:18:80:7c:c5:34:30:6e:86:c4:
14:cd:4f:5a:54:2e:25:5f:b1:f6:4b:98:8c:b8:1f:
bc:50:26:5d:2c:34:a7:aa:a7:8a:de:d0:a8:b4:32:
c5:bf:63:65:05:c0:34:19:75:84:71:ba:3b:85:57:
1d:99:a4:c8:2a:3f:04:27:a4:73:62:58:75:38:b6:
91:d2:63:54:3b:47:fd:43:ae:e8:8d:1f:6f:5b:66:
15:79:7f:bd:d8:c1:15:42:81:bb:87:32:e8:7c:4b:
c0:64:a6:f9:8f:1d:0c:80:32:71:6e:87:d1:cd:e2:
ff:39:a8:64:08:7f:2a:a5:6c:3f:fe:d7:a5:9d:00:
27:7f:6a:19:0b:52:c1:64:58:15:37:3c:ee:51:a8:
1a:df:ed:a5:4e:a1:07:ed:41:95:91:18:24:c0:97:
29:18:7d:8c:29:7f:a7:f7:bd:43:45:78:bb:0d:01:
c0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:04:51:DD:2B:52:7F:FC:3E:A8:28:28:F5:2E:EF:8A:02:7B:76:E2
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ZwRR3StSf_w-qCgo9S7vigJ7duI.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
72:94:4e:20:59:29:84:a1:8d:03:5a:60:b6:b1:7f:fb:56:5b:
60:62:86:f1:0e:3c:e2:1b:f6:7b:1c:2b:83:3c:ca:a4:1a:33:
40:b7:e9:2d:28:55:58:67:60:aa:07:28:2b:90:53:ab:85:13:
7c:18:f2:cd:3f:fd:e8:96:fb:68:09:e2:6f:6d:26:68:49:1b:
b8:ce:4e:06:78:6e:2d:8b:bb:f3:3f:85:5b:a4:8c:18:a6:94:
c7:e7:0a:aa:f0:1e:5d:c2:c4:5c:c2:73:9a:ed:b9:6d:63:8e:
60:48:94:86:59:96:93:98:2d:a9:ca:3c:d1:a5:29:40:40:84:
58:c8:17:0c:5a:01:6f:2d:34:b1:8a:56:b7:06:6f:33:75:42:
19:9e:e3:ac:fd:dd:f2:60:4f:54:03:82:05:24:fa:34:a1:8d:
40:37:44:50:51:02:3b:54:a2:df:5f:86:bd:7a:15:8b:07:a2:
7d:3c:e6:1a:a6:01:0c:1a:a3:cb:a2:ae:80:42:62:e3:72:58:
67:cc:23:a4:97:61:2c:db:84:8a:ed:e3:39:5a:98:93:5b:4d:
f0:11:85:8d:97:5a:a3:a2:e4:bf:32:42:4e:8d:e3:f1:1f:03:
c7:6e:3e:e8:46:59:93:5c:33:4b:2c:90:43:f6:be:dd:d7:8d:
45:6b:29:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org