Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/vA8_hQ02NMlX8ZV8wDnKFt_SYQU.roa
File: vA8_hQ02NMlX8ZV8wDnKFt_SYQU.roa (raw, json)
Hash identifier: yG0sez2pkrD4FPwh68tAmPq7a3CYzEWVp/gfeJtXRxQ=
Subject key identifier: BC:0F:3F:85:0D:36:34:C9:57:F1:95:7C:C0:39:CA:16:DF:D2:61:05
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 42E3
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/vA8_hQ02NMlX8ZV8wDnKFt_SYQU.roa
Signing time: Wed 09 Feb 2022 00:30:08 +0000
ROA not before: Wed 09 Feb 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17123 (0x42e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 9 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=BC0F3F850D3634C957F1957CC039CA16DFD26105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:61:97:48:d9:fe:ea:94:4d:c5:5f:73:0a:28:
fe:cf:79:c8:2f:6a:26:f1:12:bc:7b:ce:d5:f0:a3:
28:87:08:d6:77:da:f3:51:21:70:3d:24:47:22:53:
3d:3a:de:98:da:50:77:11:ae:d4:77:41:f6:75:60:
9c:ad:bb:f8:64:18:ef:42:ab:c2:4e:8d:8f:e9:d4:
e2:a0:a3:9e:28:1b:45:a5:6a:50:b1:c3:b6:f4:50:
f0:7b:29:69:ad:92:e6:35:30:96:ef:0f:4c:d9:8c:
e3:5d:b9:d8:26:c5:d2:58:c9:94:9f:38:ee:c6:9c:
7a:8a:2e:c1:f8:59:4e:77:67:03:87:d0:bd:b9:6e:
74:9b:be:ae:fe:49:ec:e6:98:6d:33:62:45:7a:8f:
0e:5f:b4:08:9a:49:12:00:a5:f2:d8:72:c8:8f:53:
4f:06:00:24:25:db:3b:b3:25:92:fd:40:0b:9e:14:
73:cc:6a:5e:ce:83:e3:d1:49:b6:72:a6:35:89:5a:
e3:0d:8e:86:5c:da:11:06:ac:f6:60:b9:bf:98:ac:
0a:09:e4:20:4d:70:50:40:2f:42:12:45:4e:ca:e6:
bc:50:5f:ae:dc:7b:fc:ee:52:c0:f7:a5:7f:0f:49:
11:b1:50:61:8a:9b:08:80:a0:49:dc:59:21:3b:67:
6c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:0F:3F:85:0D:36:34:C9:57:F1:95:7C:C0:39:CA:16:DF:D2:61:05
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/vA8_hQ02NMlX8ZV8wDnKFt_SYQU.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:a3:45:57:d2:81:9d:2e:c2:4a:7e:3e:96:af:da:29:1f:15:
53:30:52:2d:b2:1d:0e:12:10:18:c0:69:1b:24:5c:82:a5:5b:
26:a8:62:7f:5c:1b:d9:c9:65:14:a4:b2:f0:8d:91:fb:6c:ee:
5f:9e:f6:4b:4f:a2:ec:b8:7c:18:df:75:31:b6:93:7a:4d:42:
d1:33:eb:c4:60:ae:91:7a:f5:1e:cd:20:81:f2:fd:f2:1a:df:
43:e4:76:79:e2:f0:7a:e9:a3:03:2e:6a:f4:fe:67:f4:68:23:
fd:31:0d:31:f6:72:60:1d:50:96:e4:d6:38:fe:e1:07:86:d3:
85:ca:03:78:01:8f:7e:44:75:21:26:0b:e7:d7:3c:32:93:bd:
ef:f3:ee:fe:03:80:ff:1e:18:ec:6b:14:bf:c2:2b:14:1d:7d:
68:24:a0:56:33:30:12:8d:ef:d5:9d:79:67:a8:fb:c7:07:34:
da:0b:80:8e:d9:14:7f:ef:cc:45:a1:66:ce:9e:cf:a2:d1:0b:
b3:45:85:ff:62:2c:61:e4:78:09:f6:10:a7:e4:5a:98:3e:a1:
45:e6:76:67:07:b2:38:dc:40:1a:bf:42:09:dc:84:7a:b6:0d:
7d:dd:ab:98:82:8c:40:e8:85:7f:44:a9:20:44:b7:ca:f6:27:
ca:48:cd:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org