Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/olI4u4uFEemqRfVqK4AqMIFeRU8.roa
File: olI4u4uFEemqRfVqK4AqMIFeRU8.roa (raw, json)
Hash identifier: GkRx3snVex5e9eN0VIf7UPZCg5mkInlEiNdbBYd10Xg=
Subject key identifier: A2:52:38:BB:8B:85:11:E9:AA:45:F5:6A:2B:80:2A:30:81:5E:45:4F
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 472C
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/olI4u4uFEemqRfVqK4AqMIFeRU8.roa
Signing time: Fri 29 Apr 2022 00:30:09 +0000
ROA not before: Fri 29 Apr 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18220 (0x472c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 29 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=A25238BB8B8511E9AA45F56A2B802A30815E454F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ca:6b:86:af:8c:78:b9:c3:f7:f2:30:58:7a:
95:0b:64:35:b8:c0:ce:6a:c1:9d:b4:80:89:12:33:
e9:13:1e:7d:9b:11:1e:1f:61:4f:db:43:78:b9:99:
3c:ae:ed:8a:9c:56:c8:9b:79:4e:03:c2:57:8e:39:
55:99:9f:ba:23:ca:74:da:97:0e:e3:ce:5c:6c:4c:
9b:33:18:b2:0a:30:82:94:53:d5:a4:8f:36:27:0e:
ef:d5:a5:d0:93:ab:05:85:26:b4:b3:da:0b:e2:b5:
90:36:54:b7:d7:3e:ca:c7:2a:da:d2:6e:1d:a9:b9:
fd:4a:23:f1:33:3d:62:fe:df:53:4b:17:0a:03:c0:
f3:5e:d9:24:58:16:c2:e8:9a:9f:d6:5c:58:07:89:
72:31:ff:cf:80:9e:4b:e4:a8:38:8d:9a:32:38:10:
63:08:2d:85:fc:e5:6d:59:bc:82:fd:21:00:5c:24:
0c:0b:11:08:cc:63:84:66:43:fa:cd:f7:e7:13:50:
6b:e2:04:b1:e8:38:96:cd:63:d0:ff:d1:f9:5f:ab:
3b:64:16:0a:30:8e:48:c1:43:0a:f0:70:97:81:97:
3b:61:95:57:be:a6:a6:b2:71:27:f6:81:a4:b5:35:
2e:07:0e:4d:08:52:bc:a9:b0:93:e3:a5:22:28:f9:
e3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:52:38:BB:8B:85:11:E9:AA:45:F5:6A:2B:80:2A:30:81:5E:45:4F
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/olI4u4uFEemqRfVqK4AqMIFeRU8.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
54:ac:fc:9c:7b:f8:3c:28:cd:8a:22:16:1f:6e:21:24:8f:6a:
62:cc:e3:96:01:5a:df:a5:ac:18:16:45:53:90:0b:68:47:f5:
4b:18:f4:5d:f2:40:dd:47:19:d7:00:d8:b5:b3:81:b8:d3:4c:
3b:24:1a:4f:b0:83:bc:19:57:11:e2:dd:1a:f7:0e:e5:2e:75:
da:ac:da:a4:42:62:67:49:06:ae:5e:ec:6b:a3:a5:ca:c4:96:
b4:c3:05:10:fa:e7:bd:a9:5e:7a:62:1a:38:79:07:38:b6:d6:
0a:5f:71:87:68:e6:c5:86:22:99:0f:f0:5d:fa:d5:62:c9:79:
d9:b4:fd:9c:df:34:a2:e2:d7:d4:84:dd:a7:ee:3e:cb:06:72:
c1:c7:94:9c:df:71:df:1b:20:48:03:00:99:ee:b4:91:47:4c:
5e:70:47:e7:b7:8e:0c:c1:da:76:57:ab:e7:b7:96:ff:9f:25:
86:4e:a6:24:c3:f0:62:5c:fa:d0:64:31:ef:e7:cf:76:8d:f3:
d7:a4:34:43:b5:a0:b1:30:89:7e:42:22:78:be:94:f3:f5:70:
9b:a5:3b:75:c7:b0:fa:c5:5d:87:c7:07:03:d8:dc:f0:6e:ad:
f7:f7:86:30:93:ce:ee:7b:72:09:a4:79:94:13:3d:3e:71:1d:
b7:cd:80:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org