Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/bxkronqO1TRxMmVFJRKYaev0s_4.roa
File: bxkronqO1TRxMmVFJRKYaev0s_4.roa (raw, json)
Hash identifier: otFkOH8xQfBXbG6iabAFco3OYTHkcXid+ECGnRgzeIc=
Subject key identifier: 6F:19:2B:A2:7A:8E:D5:34:71:32:65:45:25:12:98:69:EB:F4:B3:FE
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 42D3
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/bxkronqO1TRxMmVFJRKYaev0s_4.roa
Signing time: Tue 08 Feb 2022 00:30:06 +0000
ROA not before: Tue 08 Feb 2022 00:30:06 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17107 (0x42d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 8 00:30:06 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=6F192BA27A8ED5347132654525129869EBF4B3FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1e:82:29:69:4a:2a:29:b5:ca:a1:b8:dd:80:
2a:9a:de:69:3d:b2:e0:39:88:1a:2f:4e:17:d8:24:
4b:c2:f5:ef:fb:2f:4e:bc:70:57:67:c0:9f:67:c9:
08:fb:7a:20:71:0a:8b:26:90:fc:6e:44:70:e4:57:
9d:40:e9:1d:7b:0f:18:ef:48:96:0d:7f:e7:11:87:
a8:61:e9:a3:03:a9:f9:4a:e0:d1:33:6f:31:1c:ec:
f7:0d:31:a7:70:39:7a:4e:7e:3f:64:ac:ef:bb:a0:
81:c4:96:25:80:27:09:db:9c:06:ba:d3:d5:de:35:
e7:61:d9:05:8c:dd:2b:89:f3:15:b7:12:92:12:54:
11:f3:ab:02:b6:39:88:63:20:e0:99:2e:8c:34:b4:
e2:a6:7c:a1:84:03:fc:74:34:09:d5:2a:c4:3e:90:
92:c3:ea:b2:ae:ae:b6:a8:44:d4:2b:97:c8:2c:c5:
68:3e:75:5a:d2:20:62:62:0f:14:5a:9f:55:ba:e5:
b1:29:65:16:6a:43:77:fc:98:56:1c:e3:fb:4c:45:
65:f0:59:77:ab:fc:90:3d:10:7e:55:a6:dc:fb:46:
4d:81:86:22:1f:b7:95:e1:4b:d2:d4:af:23:ab:38:
e3:d8:78:65:67:d7:fd:2b:15:0b:19:fa:7c:9d:74:
72:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:19:2B:A2:7A:8E:D5:34:71:32:65:45:25:12:98:69:EB:F4:B3:FE
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/bxkronqO1TRxMmVFJRKYaev0s_4.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
10:74:98:e5:15:76:fb:38:a8:6b:23:d4:7d:a5:54:8e:99:1a:
e4:a3:91:b4:85:f1:36:42:25:1b:9d:af:ee:d1:1d:e3:e6:9e:
51:87:75:49:26:7b:b2:28:fa:e6:88:d7:ab:6a:36:e6:a7:e5:
0f:9d:2b:a0:c3:73:31:fe:a7:0f:0d:ee:cb:c8:11:bb:f5:95:
7c:68:48:68:cb:a1:2f:d3:11:5c:ec:9e:a5:2f:73:2e:84:11:
97:51:9e:6a:da:aa:56:4a:25:15:fe:d4:b5:19:50:98:08:19:
67:0f:d8:4b:30:22:ef:cc:10:50:57:47:a6:63:78:dc:a5:2b:
c5:e5:ef:33:bd:f6:86:e9:c2:57:d7:a9:d6:95:a2:f8:97:29:
ff:85:4c:e8:cc:08:f8:43:29:18:f2:a1:ef:2b:5c:b9:19:3f:
ad:8f:b3:dc:59:f1:e8:52:e9:47:5d:ec:bb:e6:90:ac:07:68:
b0:5e:04:f7:df:55:3d:21:8c:bc:21:ce:23:10:36:76:de:0d:
a9:6b:76:ed:c4:54:ed:5d:ca:11:57:f0:4b:6b:23:58:c8:af:
cf:75:a6:37:80:b3:4e:d3:30:fb:5d:b1:2d:63:58:8c:7f:41:
38:1f:ee:03:cc:93:60:00:2f:67:6a:0e:58:02:25:7a:91:a4:
f5:d8:3f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org