Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/oaBP8_FIK_8K2R5REEjdk6bjwJw.roa
File: oaBP8_FIK_8K2R5REEjdk6bjwJw.roa (raw, json)
Hash identifier: P6fhWP6BpdLYcKC22HBGApxLkY2MNi86TAzGUs10ugg=
Subject key identifier: A1:A0:4F:F3:F1:48:2B:FF:0A:D9:1E:51:10:48:DD:93:A6:E3:C0:9C
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 47AD
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/oaBP8_FIK_8K2R5REEjdk6bjwJw.roa
Signing time: Sun 08 May 2022 00:30:10 +0000
ROA not before: Sun 08 May 2022 00:30:10 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18349 (0x47ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 8 00:30:10 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=A1A04FF3F1482BFF0AD91E511048DD93A6E3C09C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:82:16:2e:35:6e:91:61:4b:22:57:61:00:fc:
21:cb:c4:85:a2:4b:4b:20:a0:c4:30:af:1d:bf:f2:
f6:cd:93:c8:91:ba:83:fb:98:9b:1e:33:78:a7:3f:
7e:61:f2:06:e5:96:66:72:9b:9f:73:64:85:85:5f:
4c:5b:a1:22:dc:5b:53:35:a3:45:aa:2e:6e:2f:54:
c8:fd:fd:1f:06:3d:fe:0f:2a:97:51:e1:74:5a:af:
4e:d1:12:5e:24:d3:84:96:06:c4:31:cb:35:a2:8a:
c5:29:5c:2c:71:da:62:f3:e1:59:cf:33:82:35:5b:
f7:d0:35:5d:aa:2f:33:5a:0e:f2:27:9d:a2:57:42:
0d:e8:75:bc:dc:dc:fc:c9:aa:43:03:23:7e:e7:4f:
ce:b1:b8:98:16:3e:e3:48:77:ab:5a:a6:0e:5b:55:
72:e0:7f:6c:6d:bb:c4:ff:c8:9c:fc:b7:d7:eb:cb:
98:ab:a4:c8:7f:94:6a:0f:b5:e8:7b:86:53:49:71:
5b:55:0a:67:f3:20:fa:cd:4e:9b:49:e3:1d:f8:f8:
bf:83:b0:9c:08:90:3b:65:11:38:7f:54:14:91:b5:
29:86:66:26:0f:ba:9f:75:76:e1:59:a5:8d:b9:83:
e8:ce:c3:cf:a7:12:21:a4:ed:2d:c6:8a:8f:0c:29:
bd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A0:4F:F3:F1:48:2B:FF:0A:D9:1E:51:10:48:DD:93:A6:E3:C0:9C
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/oaBP8_FIK_8K2R5REEjdk6bjwJw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:3e:a3:51:b7:44:80:64:0f:de:89:42:12:5d:aa:aa:a6:05:
9c:bc:f3:6f:1e:6a:f2:34:e7:17:6e:ae:d6:fd:7d:b6:a8:df:
de:2f:db:06:a8:94:d3:a9:15:cc:1f:de:92:2b:75:f9:b9:86:
d8:13:b7:c1:97:fe:0e:f1:5a:e3:22:d2:0b:c3:11:e0:0b:43:
48:d1:6d:b3:cf:cb:21:43:77:b4:08:4d:c4:60:f2:d0:bf:0d:
c7:96:d8:94:72:2b:aa:40:c2:9b:3b:f4:ea:3e:b4:91:13:49:
e3:fc:b5:52:aa:b9:56:2a:d5:f6:25:76:9c:de:e3:38:ea:24:
78:31:cd:a1:21:63:56:5f:b3:6a:7d:16:06:97:2d:0c:01:7f:
fc:ae:6f:88:a7:ce:51:64:04:56:d5:de:f2:cb:da:fd:39:0c:
0c:eb:92:fb:ab:f5:4e:5e:4d:66:d9:5f:5c:0c:2d:bf:5b:70:
60:84:1b:9d:b9:bc:a4:9e:93:0e:be:9e:da:69:6c:42:bb:90:
87:05:e6:31:14:1e:08:41:04:50:e0:32:89:07:63:a3:f5:08:
a2:ae:55:a2:e3:17:79:57:89:62:65:8a:42:98:38:96:7c:4a:
67:fb:c2:2d:76:82:7c:8b:99:77:e7:81:1e:71:da:19:4c:9b:
86:47:45:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org