Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/t2BZSwfqAc-sT6bN1ehTf1N2xjg.roa
File: t2BZSwfqAc-sT6bN1ehTf1N2xjg.roa (raw, json)
Hash identifier: MeRVacSSQg+Ra2F9FNZCVkgk1EPZpafq4nZYAprIlGQ=
Subject key identifier: B7:60:59:4B:07:EA:01:CF:AC:4F:A6:CD:D5:E8:53:7F:53:76:C6:38
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4649
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/t2BZSwfqAc-sT6bN1ehTf1N2xjg.roa
Signing time: Wed 13 Apr 2022 00:30:05 +0000
ROA not before: Wed 13 Apr 2022 00:30:05 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17993 (0x4649)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 13 00:30:05 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=B760594B07EA01CFAC4FA6CDD5E8537F5376C638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0e:ee:9e:c4:df:f6:f2:25:80:d7:4d:99:e2:
6f:a9:65:c9:81:9b:1d:c6:b7:26:7f:0f:8a:59:df:
1c:43:8e:97:40:23:ee:f4:8f:0e:0a:c8:b6:1c:5e:
9e:5f:a3:f4:0b:7c:21:f0:68:0c:b9:62:c5:9d:1a:
80:d4:66:e1:a5:1a:23:ca:f5:18:07:22:d1:0b:2d:
78:f0:48:34:4e:dd:0d:a4:4b:89:a2:95:42:65:1e:
1d:8f:c3:63:b2:7e:89:8c:a2:21:f4:d1:e0:12:98:
39:6e:17:c9:aa:01:c7:f6:bb:49:b5:53:80:ea:64:
39:34:09:4f:ad:c7:d9:ee:02:d4:e6:2e:d1:8a:7e:
59:08:1e:d9:8f:b6:eb:45:35:2d:05:a8:1c:fd:c3:
79:f7:bf:27:25:0d:cb:e9:71:53:68:73:74:76:fb:
c7:8f:7b:47:f9:54:d9:7d:95:f9:3d:68:25:0e:53:
dc:0a:a8:61:2a:d6:68:3b:c2:66:e7:2e:44:e4:81:
43:45:54:ab:08:d0:17:18:d4:83:00:df:12:33:3a:
0e:eb:27:51:1d:5d:d1:21:f5:da:14:a6:2e:6d:82:
9a:53:d1:54:af:81:a4:4f:46:c6:4a:c6:d9:c5:0d:
f6:49:36:42:fe:77:f2:32:57:56:c0:10:bf:21:84:
80:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:60:59:4B:07:EA:01:CF:AC:4F:A6:CD:D5:E8:53:7F:53:76:C6:38
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/t2BZSwfqAc-sT6bN1ehTf1N2xjg.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:47:74:f0:80:61:a9:5e:52:15:6d:a8:4c:80:98:27:db:34:
de:17:f8:e7:44:b8:ca:9f:c5:0b:b3:aa:df:39:47:6f:cd:78:
df:02:cf:83:0b:c4:7f:88:be:73:f1:7c:e1:b4:11:70:67:e1:
0c:96:75:2f:bb:9c:f1:99:0e:7f:23:e5:86:ca:86:1b:2f:d8:
ed:cd:03:c6:de:3e:b7:5b:0e:1b:7f:f6:4e:95:17:86:78:ef:
9b:34:82:25:0f:4f:84:4a:d2:b9:09:34:85:6d:5b:f2:1f:49:
1e:54:b8:9e:ec:bc:e4:cb:1b:df:b1:24:9d:2d:06:11:e4:e2:
b4:0f:e8:95:06:7b:fd:1d:d9:a2:58:40:17:29:d6:f3:d1:de:
f8:d0:26:0b:f2:79:a8:96:fd:e0:29:05:da:6a:4f:f8:3c:ee:
e0:19:ad:c1:f8:8b:ca:38:f4:ee:f5:66:a3:c9:c9:83:37:24:
e3:cc:e5:6b:b7:6a:5e:73:96:6b:69:a3:26:eb:96:36:22:43:
0f:85:4c:17:63:d0:48:44:30:65:42:1a:ab:fd:eb:f4:58:49:
69:1e:8a:ef:47:d6:62:16:87:6e:aa:1d:a2:aa:61:68:61:24:
da:18:66:bd:b6:aa:47:6c:c7:1b:df:5c:9a:14:9c:f4:bb:27:
09:8a:1d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org