Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/kBhk-V57kY9Bxz75DmPvker4CAg.roa
File: kBhk-V57kY9Bxz75DmPvker4CAg.roa (raw, json)
Hash identifier: xJlcf65s4yn7+Z/3n8M4astYvNQifEULYE9YsOqaHn8=
Subject key identifier: 90:18:64:F9:5E:7B:91:8F:41:C7:3E:F9:0E:63:EF:91:EA:F8:08:08
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4757
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/kBhk-V57kY9Bxz75DmPvker4CAg.roa
Signing time: Mon 02 May 2022 00:30:09 +0000
ROA not before: Mon 02 May 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18263 (0x4757)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 2 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=901864F95E7B918F41C73EF90E63EF91EAF80808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e9:1e:f8:f2:09:f8:ab:d8:28:40:d7:32:b5:
f5:90:e8:2d:d8:a0:39:cd:22:a3:11:10:33:f9:1b:
7b:5c:ff:91:bb:94:1a:16:ac:c3:e3:5a:55:2c:f8:
d4:0a:13:54:53:c0:08:b1:ef:8c:b1:f9:ec:66:58:
43:2c:d4:6d:19:22:f4:81:81:38:04:8b:2c:c8:4c:
cb:68:31:31:d3:30:f9:b9:b9:18:b3:77:52:03:33:
fb:7e:d7:c2:77:0f:c9:e2:ce:ee:7e:21:65:c7:04:
12:1b:07:f7:6a:e5:21:b0:f7:7e:88:67:cb:1d:46:
1b:c1:9d:ee:7b:3e:43:8f:58:6f:53:6e:fd:fe:4d:
de:fb:fa:d2:54:91:7b:56:26:30:72:d3:0b:c8:b3:
52:3a:c4:df:c8:2f:a8:9d:64:4f:5d:74:c7:4e:3d:
0f:e5:7a:ad:91:ea:dd:e1:6c:b4:77:2b:ad:48:19:
4b:c5:16:a1:1c:c8:66:a1:10:7c:af:d3:bc:c0:09:
c6:95:f0:14:0b:ac:f4:72:b8:73:09:fb:e0:17:9b:
3b:52:7a:c9:fa:ab:44:f5:e1:70:9a:9d:99:52:1c:
6b:b4:0a:fe:8e:9d:a7:a0:cb:71:3f:01:76:de:db:
c7:d5:ce:b1:15:e2:77:8a:22:69:a0:17:79:ce:e7:
bf:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:18:64:F9:5E:7B:91:8F:41:C7:3E:F9:0E:63:EF:91:EA:F8:08:08
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/kBhk-V57kY9Bxz75DmPvker4CAg.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
51:ac:2a:f7:34:f7:3d:44:64:e0:68:f7:74:22:7b:da:c9:cf:
31:45:a3:a2:ac:41:f8:84:f3:ba:a4:c4:f4:95:d5:6f:ac:d2:
6e:32:5a:3b:f7:ee:42:81:8b:b2:da:38:0a:13:62:42:97:cb:
53:13:4d:13:e4:cf:39:c9:fd:0d:62:46:2b:41:b9:4b:4d:5c:
3c:f1:14:03:80:18:91:23:7c:98:3b:01:ab:74:c1:c6:4a:00:
08:ab:7b:e1:d8:5a:4e:f8:59:24:39:ed:b0:61:f1:1c:30:61:
da:42:05:46:a9:17:3d:de:69:7d:76:89:38:dc:11:a1:36:2b:
7e:de:a8:4e:af:2f:1c:c8:6f:f1:03:ac:67:e7:d8:f2:fb:40:
cc:22:ff:f9:47:63:05:85:bc:b5:92:07:34:29:0d:b6:54:06:
51:dc:06:e5:15:69:72:af:62:a7:a3:cd:06:d7:35:b3:e2:1b:
3f:0a:2a:d3:ca:d9:69:f3:68:5c:98:2a:ec:43:fe:a6:61:01:
28:a5:36:d7:27:19:55:43:36:1f:5d:9e:07:5b:9d:ff:12:32:
f3:1d:d1:1b:cb:de:af:41:71:f6:12:dd:bd:45:d7:a8:b0:39:
b4:86:7e:90:db:3c:91:ba:44:7d:3e:b7:d0:fc:ee:57:0a:dc:
8e:a8:79:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org