Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/fCD9f7PeenbsRZKvzLT1pBEQoBc.roa
File: fCD9f7PeenbsRZKvzLT1pBEQoBc.roa (raw, json)
Hash identifier: iNoVD/It0+9LlKmJLxQqQlcgBDBcJ8IHhPnlnjEQrNc=
Subject key identifier: 7C:20:FD:7F:B3:DE:7A:76:EC:45:92:AF:CC:B4:F5:A4:11:10:A0:17
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 428B
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/fCD9f7PeenbsRZKvzLT1pBEQoBc.roa
Signing time: Thu 03 Feb 2022 00:30:07 +0000
ROA not before: Thu 03 Feb 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17035 (0x428b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 3 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=7C20FD7FB3DE7A76EC4592AFCCB4F5A41110A017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:26:9d:1d:8b:f6:60:6f:dd:82:d4:e2:1d:18:
40:b1:21:16:56:7c:4c:fd:7b:51:6e:49:49:90:9f:
c1:85:91:3d:bf:79:b0:6d:a5:1f:9c:68:58:80:d0:
4c:1e:4b:99:f4:6a:22:04:68:16:54:08:bb:2d:b3:
d6:18:1f:78:a6:96:85:b2:da:84:38:ba:8d:72:8e:
92:94:3b:8a:f6:8d:2d:19:10:b0:00:06:e5:46:21:
48:96:32:61:87:ca:3e:78:3e:18:ae:08:37:c2:3a:
24:dc:37:48:be:b5:0a:41:9e:e3:6b:07:ed:ae:ff:
74:14:ac:13:c4:a6:af:f3:cc:8e:bc:31:c1:64:16:
a3:3d:3d:51:19:df:40:12:33:ef:ea:4d:29:7d:31:
ae:e7:76:87:51:4e:e3:48:cd:ba:6d:fa:59:9c:50:
44:cd:ff:6b:4b:b2:56:61:08:95:86:58:ab:4e:7a:
07:36:25:b0:52:44:0f:a2:20:04:8e:2a:45:0c:7e:
bc:30:29:8b:3c:16:de:80:3d:14:74:54:7c:c7:a1:
09:94:be:52:6d:ac:c9:b6:3e:b2:fb:cc:b5:45:55:
e2:a4:76:a9:ad:c0:df:fc:15:56:57:50:ac:08:5d:
66:77:fb:b8:cc:5f:4f:f1:66:d8:7f:4a:14:d1:12:
b2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:20:FD:7F:B3:DE:7A:76:EC:45:92:AF:CC:B4:F5:A4:11:10:A0:17
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/fCD9f7PeenbsRZKvzLT1pBEQoBc.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
65:56:72:d6:fa:73:e8:1e:79:61:fb:80:2f:41:73:4c:02:af:
47:96:15:97:03:ff:04:64:ae:43:8a:ae:29:b8:3a:5e:45:99:
24:a1:da:37:65:4d:a1:36:d9:8c:50:24:ae:30:f8:15:1d:e9:
35:d7:80:6b:03:8e:b0:5c:a9:23:cf:b0:8a:ad:67:f4:46:63:
03:4a:9a:d9:6e:34:c3:bc:41:8f:90:c1:fd:9f:e0:43:a4:09:
22:44:9f:82:1b:4c:07:05:b8:a0:c3:7d:23:18:6a:67:76:8a:
39:72:d7:11:a0:b6:b0:3e:3a:26:cf:af:7a:4e:3a:ad:09:a5:
d3:a0:44:09:43:74:e2:94:11:9f:5f:49:87:d9:89:d3:f5:fa:
20:2c:df:9b:62:92:c5:f4:ad:73:4e:1e:80:42:93:8c:3c:45:
0e:43:4c:72:c4:8c:1d:f6:09:25:30:d4:8f:b0:a4:88:6c:f0:
5c:73:91:25:9b:66:13:ee:5a:48:10:f2:bf:3b:8b:2a:ce:8b:
01:c1:0c:9c:8c:3d:a0:f3:47:ab:c3:af:9c:99:49:84:3f:17:
d3:cf:e5:8d:c1:2e:6d:5d:42:dd:a7:cd:61:54:99:7a:c2:2a:
28:34:21:5c:56:62:50:ec:06:48:e4:7e:83:a0:c7:e2:d2:c1:
c3:26:0a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org