Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/ryR9IbZ4P692-zt_7QB-jcfiLGA.roa
File: ryR9IbZ4P692-zt_7QB-jcfiLGA.roa (raw, json)
Hash identifier: gzNE28j1WqYE+hn93MPcmaYL0vdzLHMzVbYjsbZiilY=
Subject key identifier: AF:24:7D:21:B6:78:3F:AF:76:FB:3B:7F:ED:00:7E:8D:C7:E2:2C:60
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 45F9
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ryR9IbZ4P692-zt_7QB-jcfiLGA.roa
Signing time: Thu 07 Apr 2022 00:30:09 +0000
ROA not before: Thu 07 Apr 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17913 (0x45f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 7 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=AF247D21B6783FAF76FB3B7FED007E8DC7E22C60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d4:fc:b4:ce:6c:c7:1d:9a:c9:10:7c:09:79:
f0:c4:47:bc:8c:ac:2f:15:63:c2:61:23:f8:98:53:
04:ec:b7:35:e6:15:06:c7:ad:42:65:e3:ac:eb:77:
15:a2:b7:76:5b:7d:b8:cf:29:11:72:9e:d9:63:a8:
2a:3b:48:b3:0c:e5:21:78:c1:ed:49:b0:03:34:fa:
28:28:cb:fc:e5:f9:69:3e:d4:85:b0:fd:f9:02:01:
fb:42:1a:c0:3b:3b:c9:81:b3:24:f6:93:5a:f8:3a:
a1:f2:7b:06:60:ee:cf:ac:87:46:f9:d1:e7:eb:87:
ac:2c:cb:4e:27:b9:81:c7:f9:5c:64:44:13:ae:30:
11:6b:81:76:a9:3a:8b:79:b0:22:c5:70:94:d2:c2:
08:f7:de:8d:78:71:3e:39:d3:f4:3d:b1:83:44:18:
81:f1:c8:1f:45:71:31:26:95:60:3b:6f:7c:45:ea:
fc:f0:91:b7:2a:59:f6:63:ca:be:9f:e8:01:26:da:
f0:49:b9:56:7a:8f:d6:17:2f:c8:b8:f1:b9:18:21:
78:b9:85:26:9a:62:65:8b:39:96:74:7e:af:60:57:
4a:b4:11:ea:60:b3:d9:32:32:60:6f:db:ce:e2:fd:
cf:de:ab:58:c5:e0:3e:f4:b2:46:49:da:a1:5a:34:
bf:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:24:7D:21:B6:78:3F:AF:76:FB:3B:7F:ED:00:7E:8D:C7:E2:2C:60
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ryR9IbZ4P692-zt_7QB-jcfiLGA.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
83:9f:ec:95:88:85:34:1a:5d:0c:7f:fb:0b:46:26:ee:90:e7:
74:23:43:93:00:d4:d6:da:c3:80:1f:b9:23:ce:c4:b4:4a:05:
a3:34:02:58:1d:91:24:e6:3c:fb:62:5c:a8:7a:ca:42:c8:72:
01:30:70:c2:e7:f2:ba:93:d9:06:0e:38:65:0d:81:ef:24:86:
66:cd:37:9e:99:c1:61:e1:c7:17:5f:0e:67:ce:14:73:cf:0c:
18:2f:cf:41:50:01:4d:a4:4e:59:1d:89:24:dd:87:cd:64:8d:
72:b3:e5:87:26:82:8a:88:06:07:0a:d3:28:98:5f:3e:14:a2:
86:57:9c:ab:d9:a3:f4:e6:3b:ce:c2:36:a7:26:aa:1e:c6:18:
07:fa:a7:a1:8b:de:d8:6b:f2:7d:d3:e7:e1:0d:a3:99:6c:24:
a1:2e:82:dd:9e:e5:39:13:c2:7d:8f:fd:e2:2b:af:0a:52:dc:
d7:62:6b:38:19:53:bd:1c:c4:66:08:90:35:2d:23:80:2d:9f:
fc:c0:7f:9e:4c:c5:8f:14:38:91:fa:74:b8:77:be:6e:e6:ac:
11:0b:5d:0d:05:26:d8:bb:f9:af:33:d5:17:54:9e:c1:29:63:
30:50:0b:b9:db:af:53:eb:f9:6b:02:c0:39:85:60:b3:54:d2:
3b:f1:76:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org