Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/o-12ijSTYh5TtiGFkvheK9zblD8.roa
File: o-12ijSTYh5TtiGFkvheK9zblD8.roa (raw, json)
Hash identifier: JSzYYEcPsN0ARblHeSOesG6IgRqluu/Ks91qv25A+pQ=
Subject key identifier: A3:ED:76:8A:34:93:62:1E:53:B6:21:85:92:F8:5E:2B:DC:DB:94:3F
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 493C
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/o-12ijSTYh5TtiGFkvheK9zblD8.roa
Signing time: Fri 03 Jun 2022 00:30:14 +0000
ROA not before: Fri 03 Jun 2022 00:30:14 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18748 (0x493c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 3 00:30:14 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=A3ED768A3493621E53B6218592F85E2BDCDB943F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:66:fd:bc:07:86:fa:3f:d1:a7:0b:1c:33:74:
c9:43:99:fd:fe:0c:e3:85:b1:9f:8c:8b:d0:47:b9:
ea:51:5e:4b:9f:4e:9c:35:32:41:19:b1:c9:44:cc:
50:78:6d:46:f5:12:29:5d:70:57:b0:04:a1:4c:92:
f0:0d:33:c7:f2:f3:3e:18:6b:20:d2:55:3e:6a:a9:
22:83:f5:3d:e2:19:2f:81:48:50:6e:c5:7e:0e:80:
73:dd:16:37:2e:2d:fc:25:72:50:79:b6:ae:39:82:
1d:6f:0e:6e:da:3d:c6:63:4b:00:75:e9:8e:8e:0a:
17:54:5f:4e:ba:09:d0:39:5a:aa:6f:4a:53:45:98:
06:f5:02:79:a3:c8:3b:f6:6d:0f:ae:c4:dc:ac:b4:
5e:8b:a5:1f:19:c0:06:24:4d:88:50:0d:d1:38:ce:
7c:88:30:51:89:5c:b6:f1:fa:01:2f:83:19:6c:88:
7e:6c:f3:34:8e:2e:6c:1d:28:fb:c4:dc:4c:51:b2:
1f:9d:a2:cc:e8:4d:c6:14:22:36:de:dc:f4:81:de:
d7:cc:cc:6a:17:0e:43:a1:93:de:41:f7:21:fe:d5:
7b:bb:76:46:8c:6a:08:eb:80:ab:44:3b:2c:b5:95:
ed:69:8c:89:15:95:38:28:c6:de:13:f5:bc:25:d1:
89:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:ED:76:8A:34:93:62:1E:53:B6:21:85:92:F8:5E:2B:DC:DB:94:3F
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/o-12ijSTYh5TtiGFkvheK9zblD8.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.4.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:60:69:80:7a:15:0d:a5:20:93:54:77:44:40:7b:47:ff:a3:
a3:3c:c1:ab:5c:a7:6f:ab:30:60:b0:8c:da:96:11:dd:1e:5b:
50:ed:3f:35:dc:76:91:e2:e5:ee:38:50:a7:0e:de:c0:3f:91:
18:a4:b0:b8:3a:ff:c0:6d:a3:a5:88:e2:50:12:b5:09:2d:8f:
47:dc:cd:ca:9a:d6:69:ee:06:91:30:cb:63:06:71:e0:6a:d2:
be:a6:ab:23:3a:96:0c:b8:e4:0f:9b:93:8b:7c:52:88:31:44:
0e:22:c0:4c:23:b5:20:61:ec:84:59:d4:10:ed:60:bf:50:45:
a5:db:1c:4e:d6:03:b0:c7:ad:e9:31:9f:65:6f:5e:5a:47:08:
27:04:19:3e:d1:28:58:8a:95:c1:4c:c2:c2:ac:27:56:11:1c:
f4:ac:21:b0:6e:97:12:b8:39:71:91:b5:5b:9c:53:b0:db:a7:
c8:fd:6c:99:3b:f7:af:34:33:f7:09:28:5b:6d:85:9f:3e:11:
eb:a5:33:47:2f:16:f3:1c:ea:23:9a:d7:0f:da:d5:bf:fd:e5:
45:f4:12:f9:43:f5:dd:41:7f:f4:1a:8f:96:37:13:0c:f4:2e:
7a:25:7a:38:bc:2e:3a:b7:08:ca:eb:e7:38:72:78:6a:1b:d6:
db:64:ce:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org