Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/etYKX-5MKFUpQtF6ra-TTntr0tg.roa
File: etYKX-5MKFUpQtF6ra-TTntr0tg.roa (raw, json)
Hash identifier: pslSAWkWLcsesaIvrKAuqVAsGzg4jhdnoGN6IlXyZzo=
Subject key identifier: 7A:D6:0A:5F:EE:4C:28:55:29:42:D1:7A:AD:AF:93:4E:7B:6B:D2:D8
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 441A
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/etYKX-5MKFUpQtF6ra-TTntr0tg.roa
Signing time: Fri 04 Mar 2022 00:30:07 +0000
ROA not before: Fri 04 Mar 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17434 (0x441a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 4 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=7AD60A5FEE4C28552942D17AADAF934E7B6BD2D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e6:66:24:ad:5c:ad:59:df:5b:e1:01:fb:2d:
57:3c:9a:74:71:14:a6:0f:43:eb:a4:e1:05:4a:a2:
cf:12:a2:f9:24:21:91:34:3f:53:cd:e5:cb:b0:36:
a9:f2:a4:66:a4:89:04:62:49:3b:40:81:29:be:25:
ad:4c:09:98:13:91:81:99:96:b8:51:d4:17:6d:62:
71:6d:18:e3:e9:e4:03:0f:bf:f9:cb:27:d5:ff:4d:
b6:95:2b:16:1e:69:5a:f5:ec:c6:d1:27:2a:79:0f:
76:30:46:91:46:d2:0c:63:2a:44:ba:ab:4f:dc:04:
5e:08:fb:bb:12:0e:19:cc:a9:da:40:10:dd:4e:d1:
fe:49:ea:90:99:03:7f:9a:41:72:3b:bb:01:4a:22:
b0:ac:79:08:1a:97:be:78:53:d2:27:8a:96:16:2c:
e0:7f:16:ad:9e:68:07:97:0f:15:bd:0f:d7:03:a3:
85:96:60:28:1d:20:ea:f1:ea:ea:ff:68:04:2b:e6:
0c:ca:3c:ac:19:8c:33:9e:f5:d1:51:9e:6d:db:d9:
85:93:84:67:14:95:98:83:99:5c:1c:75:1b:31:40:
6f:54:78:d5:2c:2c:cd:c7:91:41:f7:ca:69:0b:1d:
57:28:68:9d:96:d3:41:7e:b0:9d:ed:e3:c9:d3:2d:
4a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D6:0A:5F:EE:4C:28:55:29:42:D1:7A:AD:AF:93:4E:7B:6B:D2:D8
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/etYKX-5MKFUpQtF6ra-TTntr0tg.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:fb:47:02:77:dd:66:3e:f6:5e:af:f9:71:8f:d0:dd:12:29:
7a:94:9f:2d:8d:ff:89:7a:d6:b9:39:11:aa:ea:99:51:41:84:
68:34:83:4c:04:8f:c2:95:41:15:8c:ef:58:04:69:39:78:18:
7d:db:fb:b1:76:5b:f8:9d:08:c1:e8:dd:0b:44:6a:f9:fe:ef:
f7:e2:38:56:a0:c7:41:56:0a:04:85:59:dc:31:b9:ac:10:28:
89:f7:5a:c4:ae:cd:d3:7d:69:40:2c:0e:b3:ec:12:cb:ea:9b:
a6:c5:f6:29:df:64:8e:d3:7c:ca:1d:be:ef:3c:b3:79:d1:67:
88:50:72:98:76:1a:4d:56:37:91:c2:41:a2:dd:6a:c9:c0:11:
75:1b:94:2b:9b:b7:b1:9f:d9:e7:6b:4e:1b:d1:84:48:d1:2c:
f6:ca:de:3c:13:c6:41:96:fe:70:a7:09:c5:b3:b9:4f:48:74:
4c:6e:28:3d:a1:36:fa:06:14:ea:f0:af:86:bd:f4:45:e5:8c:
63:b3:07:90:d0:4f:8e:95:89:f5:d2:c4:33:1c:18:95:8e:ec:
0a:6f:83:f0:e4:94:5d:34:6e:3a:c2:d4:cf:82:81:a9:34:a0:
c9:05:bd:a5:ef:98:72:03:37:fb:dd:65:de:50:e3:c5:15:0d:
4a:21:a4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org