Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/sMvmm0TjhE_la_ocYxJIDBBctoo.roa
File: sMvmm0TjhE_la_ocYxJIDBBctoo.roa (raw, json)
Hash identifier: no23BlvoSXNlKpRWm2mcj5mxAofB25XtQpmVUfzZs8k=
Subject key identifier: B0:CB:E6:9B:44:E3:84:4F:E5:6B:FA:1C:63:12:48:0C:10:5C:B6:8A
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 497A
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/sMvmm0TjhE_la_ocYxJIDBBctoo.roa
Signing time: Tue 07 Jun 2022 00:30:07 +0000
ROA not before: Tue 07 Jun 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18810 (0x497a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 7 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=B0CBE69B44E3844FE56BFA1C6312480C105CB68A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:06:58:a8:9d:81:0a:e9:1f:ea:f1:d9:4f:fd:
7d:de:45:a8:29:3a:fe:5f:be:e4:c6:c1:1a:0a:1c:
07:95:a4:c5:6d:6b:e1:07:40:41:91:ef:ca:9c:6f:
84:49:a5:a3:9b:38:2a:95:b2:41:97:45:49:d9:d3:
18:bb:6e:39:4f:9b:5f:ff:18:b5:2a:7f:f3:79:b4:
a8:89:21:02:65:ae:c5:1b:ec:1e:70:19:f0:ff:50:
a8:a4:8b:1b:9c:f3:c8:87:16:ac:87:5a:92:16:ff:
82:c0:ae:c1:3f:a5:7a:63:82:dd:2a:1d:e0:8f:1a:
f2:b7:00:9a:93:bc:ad:d0:63:30:64:b2:8b:51:ed:
de:bd:16:94:9c:9b:ab:ac:22:72:ac:a1:40:08:be:
ab:c3:cf:02:00:65:ec:7f:ec:ca:72:d7:e6:bd:ba:
28:da:7c:a0:58:60:97:2c:9e:48:61:59:8f:24:52:
f2:62:7d:5e:ae:97:ce:50:55:14:3d:f8:06:71:bf:
5a:6d:7b:a5:ec:0c:7f:60:17:23:9b:f8:66:ac:7f:
0b:39:10:9e:fd:2f:8d:c6:86:f5:29:72:dc:75:e2:
43:20:9f:f8:25:92:e0:35:a6:b5:82:c5:00:6e:c9:
b7:6a:db:9a:75:3d:51:b4:78:e8:c8:ef:5f:c5:e2:
b6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:CB:E6:9B:44:E3:84:4F:E5:6B:FA:1C:63:12:48:0C:10:5C:B6:8A
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/sMvmm0TjhE_la_ocYxJIDBBctoo.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
af:30:93:1d:8e:27:8e:41:b2:bd:4c:76:41:de:c6:f7:54:bf:
42:45:e9:0f:2f:f9:29:7c:6e:16:59:d6:23:7d:60:b7:71:e1:
d3:2b:64:5d:eb:09:38:7f:b7:cc:26:dd:30:bb:4b:88:d1:4b:
84:59:1a:a5:06:9c:a0:cb:dd:8c:4a:f4:bc:f6:09:a0:9f:cd:
ec:1b:69:a9:4f:78:16:76:9d:f4:d1:69:48:3c:5b:cb:27:95:
1c:1a:5e:ad:5e:be:55:ce:67:19:43:3a:e5:e5:31:f9:e5:b7:
e8:33:b5:a9:67:e5:a4:69:9f:cc:70:f0:a2:21:b1:e3:d8:6f:
c0:44:4a:8d:33:12:29:5a:81:75:32:4f:93:46:b1:77:0d:1d:
41:08:5b:67:4b:a4:b1:7e:42:ee:ad:bf:33:88:6d:4b:4b:86:
2d:28:8f:87:fa:1f:02:49:30:cb:e7:8b:d8:58:39:bc:5e:66:
fd:87:cd:bd:09:62:b3:98:77:de:2a:f9:58:99:fe:fe:a0:c5:
46:af:8d:c6:b1:41:1d:22:3c:c6:9d:3a:1b:be:29:c4:1c:70:
f5:03:1f:10:a8:00:15:eb:d0:eb:74:f9:f0:67:ee:9b:d8:26:
eb:b4:19:5d:d5:26:8a:82:3c:22:09:13:28:18:93:a5:ca:11:
c3:5c:e2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org