Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/_wrTotRM9RWSvHb-94qx7h2GmUU.roa
File: _wrTotRM9RWSvHb-94qx7h2GmUU.roa (raw, json)
Hash identifier: YY6evqtOu55KUaevJio5hoHhv6VVVkmvhESMvfLzigQ=
Subject key identifier: FF:0A:D3:A2:D4:4C:F5:15:92:BC:76:FE:F7:8A:B1:EE:1D:86:99:45
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 442B
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/_wrTotRM9RWSvHb-94qx7h2GmUU.roa
Signing time: Sat 05 Mar 2022 00:30:08 +0000
ROA not before: Sat 05 Mar 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17451 (0x442b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 5 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=FF0AD3A2D44CF51592BC76FEF78AB1EE1D869945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ea:2b:96:1c:a2:94:f4:5f:a2:3c:d4:71:64:
15:9e:21:ba:db:e8:08:3a:11:36:5a:72:24:b0:62:
15:c5:ee:3c:09:eb:70:59:86:43:7d:1b:15:74:e0:
d7:41:da:d0:ca:19:f8:85:10:cf:13:c8:c5:51:6a:
a3:14:d9:a6:90:95:95:ba:16:86:3c:61:43:e0:d0:
57:9a:39:06:83:82:73:08:ca:c3:e9:6a:31:58:bc:
3d:fb:7d:42:27:14:00:60:11:b4:ea:53:3e:f5:09:
39:1b:1e:71:db:f3:54:aa:d0:d2:b6:5f:e2:c9:73:
2b:06:65:3e:7d:d4:ff:64:b2:9b:d4:e2:5a:66:b4:
bf:a2:0c:9d:a2:f2:21:a3:97:34:ba:e9:27:67:97:
cc:09:2b:f2:fc:bd:50:be:e4:b2:6d:96:d0:ed:49:
5e:3b:f9:f6:fc:01:75:99:68:38:ee:20:92:dc:c5:
f8:bc:9e:7a:64:0e:fe:57:3f:e4:79:6a:b2:6f:8f:
5f:19:2f:02:03:98:55:ba:f6:dc:1d:93:7a:4d:5e:
42:2e:a8:1d:91:e1:35:c8:3b:a9:fa:74:e5:30:bd:
53:ea:54:22:c3:11:dc:b1:ed:ae:b4:aa:e6:49:28:
36:8d:3b:9a:b4:a1:e6:d9:c4:5b:89:73:80:2f:28:
f4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0A:D3:A2:D4:4C:F5:15:92:BC:76:FE:F7:8A:B1:EE:1D:86:99:45
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/_wrTotRM9RWSvHb-94qx7h2GmUU.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:cf:25:22:22:fa:18:8f:9c:7f:d1:b8:d8:1c:bb:52:1c:68:
36:5f:7d:86:f0:26:fa:62:f1:6c:eb:9b:91:3f:aa:6c:db:09:
55:7c:8a:81:97:a2:7f:f4:d8:5b:1d:30:1f:e6:40:8e:fd:e0:
1b:8f:35:8f:ac:92:a6:80:f3:7d:06:1f:ca:f2:ba:e9:bf:64:
13:c3:98:0b:b5:62:7c:4a:c6:a6:24:0e:87:f3:69:00:fd:25:
a3:f9:a4:32:b7:51:e1:b1:47:cd:c0:0f:fb:25:a1:92:52:2b:
0c:79:3c:d9:6d:97:e9:ce:e5:0f:e8:8c:8e:78:75:5b:00:df:
66:23:95:8d:cf:b7:83:4e:e9:02:5f:64:43:c3:a4:77:5b:59:
55:84:0b:cd:6c:bb:18:bc:b2:27:34:3a:f2:b2:ef:27:94:91:
91:b7:a1:38:58:b4:88:6b:2d:52:ce:c9:5f:c1:61:e3:6e:64:
6d:fb:82:0a:54:10:28:3d:4a:06:b7:30:0c:5b:c2:40:bf:a1:
f2:ae:b2:8f:9b:00:73:23:a4:19:76:a4:d2:8a:51:4e:ee:ba:
9a:49:c0:fa:e4:c2:21:e1:06:66:4d:73:a8:d7:a3:4c:be:de:
98:e7:0a:db:b6:e9:a6:b8:39:ad:6e:45:49:ad:eb:0e:78:20:
e7:d5:90:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org