Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/h_P5NTVeUZtFhTHBsjySdbUBqFo.roa
File: h_P5NTVeUZtFhTHBsjySdbUBqFo.roa (raw, json)
Hash identifier: Wl4xxtSvOiGKH2JhKb8I9jdYSX9skqIZegl5o7R2ZkI=
Subject key identifier: 87:F3:F9:35:35:5E:51:9B:45:85:31:C1:B2:3C:92:75:B5:01:A8:5A
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 44E3
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/h_P5NTVeUZtFhTHBsjySdbUBqFo.roa
Signing time: Fri 18 Mar 2022 01:07:28 +0000
ROA not before: Fri 18 Mar 2022 01:07:28 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17635 (0x44e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 18 01:07:28 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=87F3F935355E519B458531C1B23C9275B501A85A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:74:f4:89:dc:58:30:ab:50:b3:4e:bd:5d:d0:
05:77:cb:54:99:56:1f:83:85:8b:29:1a:d3:28:09:
90:51:ea:ef:4a:e1:53:f7:8f:66:4a:b0:09:5a:ed:
95:d4:fa:81:8b:e4:d9:c4:38:e7:d3:89:67:92:58:
47:81:04:6c:cd:e4:25:8b:de:2d:36:ab:da:f2:34:
e3:26:21:c0:0b:2f:69:ea:83:29:17:ec:87:bc:33:
3b:06:ed:f6:8e:a8:f1:47:34:c3:83:a8:a2:52:24:
6b:8a:c4:db:97:12:b7:e3:09:8f:12:36:28:54:00:
e1:fd:0e:29:8e:0a:6c:22:68:1b:fb:35:33:80:dd:
98:0d:52:bd:4b:29:7a:24:70:49:bb:58:81:32:86:
f5:2b:31:0f:76:ed:15:55:4d:b9:c4:04:b4:f1:13:
88:ab:5e:c0:ce:00:75:11:c3:76:c4:ce:13:80:0d:
8e:bb:e5:12:73:33:f3:ca:c5:86:a8:4d:46:7d:46:
0e:e7:67:18:0b:21:83:f7:d2:e8:79:9d:ef:77:67:
bf:c6:f7:54:44:95:fa:8d:7b:a1:c7:3c:52:8a:43:
df:a6:d4:a8:7a:ce:6c:50:80:60:3e:aa:4c:d6:8b:
c0:21:17:53:86:4d:a1:cb:e1:4f:93:43:45:9f:04:
91:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F3:F9:35:35:5E:51:9B:45:85:31:C1:B2:3C:92:75:B5:01:A8:5A
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/h_P5NTVeUZtFhTHBsjySdbUBqFo.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.12.0/24
Signature Algorithm: sha256WithRSAEncryption
85:ab:9b:44:dc:39:5e:8d:d1:6d:18:06:aa:f1:96:72:30:6e:
1a:26:4c:47:3a:1d:cb:b3:a9:ea:16:98:27:7a:9e:23:a2:74:
5a:ab:4f:6e:c5:90:83:e0:f8:ca:8f:73:09:76:d0:0a:92:ba:
c7:9d:77:6e:bd:8a:51:3b:77:a8:b7:97:48:cc:51:1c:34:b0:
6c:fb:db:ad:93:cd:cf:6e:ec:3d:3c:e6:e6:a5:fd:4c:6d:54:
d4:81:9c:49:0d:16:2f:66:67:99:72:ab:37:b9:a3:29:27:e6:
89:99:4f:99:e9:8b:26:c5:aa:b6:80:b7:a8:b9:62:9c:d7:ae:
0c:87:02:40:d4:1f:e3:65:34:a7:01:f5:57:80:1b:6e:f8:8c:
cc:78:bb:a6:9a:3e:fe:e0:ac:5d:ec:38:af:ed:8b:20:8f:a9:
c3:10:a8:9a:c3:f4:c5:16:a1:23:c3:a2:cb:a6:ca:f7:0d:4a:
ba:01:e7:37:ce:aa:a3:64:53:d6:03:e2:ee:37:89:da:89:88:
65:17:bf:a8:81:b1:81:50:60:7f:3e:30:87:94:88:1c:02:e4:
ff:20:52:b7:35:3c:15:af:b1:61:c5:de:df:63:eb:d3:d7:3b:
c2:e9:8b:6a:b7:8a:9d:fb:38:c7:e0:0c:bc:c0:ff:c4:7a:aa:
d3:de:be:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org