Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/nqm66t1J7z3esULQVF91NnW680A.roa
File: nqm66t1J7z3esULQVF91NnW680A.roa (raw, json)
Hash identifier: KYNgPUH/Q6W6irIU5IvuQdgn1iBlcBssUM8JulNl824=
Subject key identifier: 9E:A9:BA:EA:DD:49:EF:3D:DE:B1:42:D0:54:5F:75:36:75:BA:F3:40
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 42C1
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/nqm66t1J7z3esULQVF91NnW680A.roa
Signing time: Mon 07 Feb 2022 00:30:06 +0000
ROA not before: Mon 07 Feb 2022 00:30:06 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17089 (0x42c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 7 00:30:06 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=9EA9BAEADD49EF3DDEB142D0545F753675BAF340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9a:d1:1b:74:f5:98:2c:2e:23:85:e4:1c:2e:
84:dc:9b:2e:d2:72:ad:2b:fe:7a:dd:6f:39:90:c5:
b9:ff:20:57:59:f1:bb:5e:6b:10:e3:ca:c8:b6:15:
37:f8:a9:5e:74:77:d0:c2:a4:01:a8:02:8c:23:0c:
57:fb:18:0b:1f:c0:43:bd:3c:36:3b:ff:a2:a3:75:
03:f9:b5:bd:ca:fd:d2:2d:5c:bd:da:f7:2a:66:52:
a3:dc:94:05:66:cf:5b:97:97:6a:25:a7:29:f6:4c:
9c:37:97:ad:c6:46:c0:fc:e9:ee:f5:d3:27:4e:63:
a3:01:b1:f4:17:eb:8f:0e:3b:9d:5d:44:2e:bb:f5:
fa:a1:ed:30:80:c6:44:bc:70:88:d6:17:3e:86:68:
ab:c6:3c:8d:99:3c:c5:53:56:ed:c3:76:b5:b2:c4:
77:9e:d7:37:20:03:7f:1c:8d:9a:71:39:82:a8:f4:
49:a4:77:46:1f:83:2d:88:c3:31:de:98:fb:c1:3c:
15:b4:9b:c4:7d:3d:6a:59:d4:e5:16:c2:62:bb:b3:
42:01:e8:87:ca:a6:1f:44:3e:98:de:d6:24:23:1e:
16:ac:fc:0b:f1:71:35:20:04:a9:f1:e9:d7:63:ea:
a1:54:1a:9d:26:58:bf:2a:14:31:b7:a1:f8:5b:9a:
b9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A9:BA:EA:DD:49:EF:3D:DE:B1:42:D0:54:5F:75:36:75:BA:F3:40
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/nqm66t1J7z3esULQVF91NnW680A.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:0e:2a:5b:03:a3:df:5d:1d:cc:55:09:54:77:8b:96:0c:3b:
9a:7f:de:75:11:ab:8a:1b:c0:bc:8b:1a:b4:ad:e0:47:46:35:
a2:93:02:cc:b9:6d:d5:79:e9:9f:e9:83:29:11:99:7c:a8:a0:
0f:87:38:fe:fe:12:9b:c7:87:50:e4:d3:6f:0c:ac:92:11:8a:
8b:3d:e7:19:e2:ac:76:f0:6b:82:de:12:43:83:0d:1d:8d:9e:
b3:77:11:f5:5d:35:27:93:6f:1f:b3:ad:82:9c:8b:e1:cd:da:
e3:fa:04:9f:73:06:11:06:f0:f5:95:4e:5c:60:61:72:f9:dc:
ba:99:df:0a:b6:92:03:74:49:62:aa:50:6e:6f:74:12:39:30:
b8:f5:18:fc:bd:f2:5d:7a:95:28:12:b7:82:7e:d2:20:35:8f:
1a:a1:81:c1:cb:f2:48:5f:d9:54:6a:1c:ca:25:37:1a:5c:4c:
79:6b:77:d8:63:57:10:fc:66:ce:4a:46:6f:63:3f:aa:ec:ce:
90:52:61:45:2d:02:b7:b3:c9:4e:72:39:d0:04:db:81:c7:78:
a2:2d:24:38:db:6e:a5:b7:8d:2c:c7:60:63:a7:1e:98:8b:5e:
d2:8f:e4:82:d5:03:3b:d9:56:d4:db:8b:d0:0d:59:e3:34:ce:
66:b1:61:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org