Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/uq0RVuUJjxIIjDvwOB2kG5HHi1g.roa
File: uq0RVuUJjxIIjDvwOB2kG5HHi1g.roa (raw, json)
Hash identifier: 6AflmHT0DS89dHJTCWjZZcnrBk/mTGUvf1D4wT1JfsU=
Subject key identifier: BA:AD:11:56:E5:09:8F:12:08:8C:3B:F0:38:1D:A4:1B:91:C7:8B:58
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 455C
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/uq0RVuUJjxIIjDvwOB2kG5HHi1g.roa
Signing time: Sun 27 Mar 2022 00:30:07 +0000
ROA not before: Sun 27 Mar 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17756 (0x455c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 27 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=BAAD1156E5098F12088C3BF0381DA41B91C78B58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:29:7e:08:6c:10:55:03:0e:2b:91:37:c9:41:
89:72:7e:7e:2c:f5:39:c2:fa:be:dd:c7:41:18:bf:
75:99:15:fe:60:b9:a8:13:a4:f3:d7:55:06:3d:d0:
ba:83:77:07:aa:0e:59:62:79:aa:47:16:7e:b4:21:
72:14:87:74:a6:4f:19:82:fe:e0:19:ab:4e:b3:eb:
3c:cb:4d:ba:df:11:fa:ef:ab:8b:e1:52:3a:a4:14:
9f:58:70:8e:c7:7e:cb:10:19:8e:18:39:7a:aa:ca:
d9:bc:a3:bf:d7:1b:1f:a9:6c:2e:1f:bb:37:2a:e4:
16:7e:f0:16:07:65:38:fc:6f:82:9c:cc:58:ce:75:
2f:7c:c1:cd:12:df:24:82:5a:ee:3a:7c:50:d1:b8:
35:ee:5e:ae:f6:f7:53:e4:c3:00:ff:b1:73:31:b3:
03:b6:d0:5b:4e:ae:14:0e:fa:92:89:ef:68:48:b9:
63:b5:f8:96:67:09:c7:8f:57:6e:d3:3e:ca:c8:11:
fc:39:af:62:1e:ca:6e:cb:8f:21:1e:52:c5:0d:5d:
17:2d:4b:ce:85:89:4c:8a:4c:77:6a:f0:c0:16:3e:
57:1c:e5:7d:a9:b7:58:84:3d:36:25:86:3f:30:56:
1e:02:a7:a0:aa:f9:bf:62:c0:62:b2:30:71:e8:2c:
f0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AD:11:56:E5:09:8F:12:08:8C:3B:F0:38:1D:A4:1B:91:C7:8B:58
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/uq0RVuUJjxIIjDvwOB2kG5HHi1g.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:89:c4:f3:bf:4f:ac:04:75:51:75:9a:08:1c:df:e4:4b:2f:
73:d3:42:50:61:17:41:89:06:25:bd:2a:23:fb:2b:db:c4:25:
03:ff:78:ee:87:6e:0c:1c:ab:10:cd:5a:b9:d4:43:36:47:36:
7c:90:ce:6d:27:d8:f2:34:12:69:54:b2:7a:b1:9d:d5:3a:67:
dc:f9:45:61:3c:64:1f:b1:c2:47:4f:57:2a:56:a2:7c:a6:d3:
c5:85:bd:a0:11:bc:52:8f:c7:6d:ea:5c:8e:d0:fb:52:e4:c9:
41:81:9a:2f:2f:61:f4:76:bb:0d:86:d0:85:b5:52:0a:ee:8a:
0b:d4:f1:41:5c:46:1b:31:7e:f0:b2:41:69:2d:e6:19:8e:80:
02:2c:d1:3f:e2:68:c3:e5:e0:55:38:73:15:47:dc:a8:b3:7a:
18:e7:1b:42:78:48:0a:30:a9:41:43:51:05:a9:12:21:42:69:
4b:29:bd:d7:e5:ce:05:80:56:bf:df:b9:53:6c:ea:4d:df:ec:
a8:4d:e7:eb:ef:1e:3a:7a:30:11:e4:8a:63:dd:2c:95:43:39:
02:ff:9c:76:18:36:71:8e:35:8d:d6:4f:01:17:80:58:ce:b3:
4d:76:2c:f1:51:13:0d:c9:c4:1e:0a:89:88:d5:4a:b6:1a:31:
27:ad:5b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org