Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/aJxRI7KbqdQeUVFhgpf3wp9DUOk.roa
File: aJxRI7KbqdQeUVFhgpf3wp9DUOk.roa (raw, json)
Hash identifier: fF5N8/i1fPp+C3oYgPLe35VA4qZKAUb5vA9bS2ecue4=
Subject key identifier: 68:9C:51:23:B2:9B:A9:D4:1E:51:51:61:82:97:F7:C2:9F:43:50:E9
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4748
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/aJxRI7KbqdQeUVFhgpf3wp9DUOk.roa
Signing time: Sun 01 May 2022 00:30:07 +0000
ROA not before: Sun 01 May 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18248 (0x4748)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 1 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=689C5123B29BA9D41E5151618297F7C29F4350E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0e:67:e8:e6:3d:ae:62:d9:98:12:84:d8:08:
2e:30:b0:85:68:b6:9f:b2:f6:d4:6f:43:29:bb:1b:
71:2a:c1:64:c9:47:28:20:3d:58:51:fa:ee:7d:f4:
c3:78:95:4b:2e:f2:63:cf:42:97:29:35:f4:13:2f:
1e:43:1e:4f:24:41:df:b3:3b:eb:f1:b5:8c:30:55:
61:15:0e:3f:c2:d2:58:4b:e1:ed:b3:42:6f:fd:ba:
b3:fe:10:88:c2:76:df:d6:4c:ad:2d:88:19:40:bf:
8e:f6:86:d5:45:95:de:94:78:27:ea:af:d0:b1:eb:
29:25:66:1b:b3:1e:1c:8e:84:89:58:09:21:b6:7c:
88:92:a7:6f:83:85:e4:de:85:11:2c:2c:d9:78:74:
4e:8c:f5:6d:32:7c:d6:24:98:cd:80:b0:3e:7a:38:
32:4b:6d:c7:e8:2d:b6:88:59:73:eb:c9:ec:ca:3e:
d6:df:b3:81:ba:e8:c7:86:17:d3:ad:77:bc:c3:e9:
d7:90:c9:3e:46:bb:d8:59:89:43:64:ba:25:93:ab:
b9:6e:cd:1d:6c:36:db:bb:c4:28:7b:cb:be:16:7e:
b0:4a:f2:88:ab:c9:ba:0f:61:4b:a9:d3:84:b4:a3:
95:c0:10:fb:79:48:ed:12:3d:e1:8f:c6:f1:9c:00:
1b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9C:51:23:B2:9B:A9:D4:1E:51:51:61:82:97:F7:C2:9F:43:50:E9
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/aJxRI7KbqdQeUVFhgpf3wp9DUOk.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
96:a4:1c:f2:34:27:b0:94:39:c2:2c:8f:ee:79:aa:77:6c:99:
00:bb:c3:03:0b:c6:d0:cf:a6:1c:21:fe:56:49:9b:e4:e1:97:
69:58:1c:af:3f:ee:8e:21:59:e7:1d:66:e8:7d:59:9c:23:be:
6b:78:7c:93:60:8b:84:08:e5:bb:8d:87:cd:eb:c7:6f:58:cc:
26:87:65:43:6b:bb:dc:df:30:1f:a4:70:fa:4e:c9:eb:30:85:
fa:27:e4:b1:b8:08:f8:72:01:c2:42:ed:83:61:fb:69:e5:bd:
8e:f6:51:a5:92:9a:1d:26:e6:f9:81:75:bf:5c:55:d4:72:0a:
a0:b3:97:98:1e:42:7b:ca:3d:76:83:ed:30:83:d1:a2:6e:ed:
a2:cc:06:39:3c:98:ce:35:5b:7b:83:24:05:ab:f8:fc:47:20:
65:55:15:de:bd:ea:5e:fe:45:ab:5f:6a:0e:3f:5c:cb:c1:0f:
64:55:04:61:79:06:c6:49:92:28:96:7c:96:2e:2d:4b:26:14:
26:29:e3:21:9f:f8:bf:c0:20:08:51:69:f8:dd:b1:75:11:dd:
c2:ff:9a:9c:8f:02:99:2e:c5:57:1f:53:af:8b:86:ca:15:e7:
6d:db:0f:ed:1c:97:75:71:ce:7e:c0:d7:b7:d5:a3:c7:44:77:
e5:fc:0e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org