Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/wC7mBTX_a589qj665kHq-8tqYI0.roa
File: wC7mBTX_a589qj665kHq-8tqYI0.roa (raw, json)
Hash identifier: vlBC2aB9k93jbMj+zVKQN4dQgrCxglPFk9RRapk6/70=
Subject key identifier: C0:2E:E6:05:35:FF:6B:9F:3D:AA:3E:BA:E6:41:EA:FB:CB:6A:60:8D
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4996
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/wC7mBTX_a589qj665kHq-8tqYI0.roa
Signing time: Thu 09 Jun 2022 00:30:08 +0000
ROA not before: Thu 09 Jun 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18838 (0x4996)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 9 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=C02EE60535FF6B9F3DAA3EBAE641EAFBCB6A608D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e3:c1:f2:9b:6c:0b:e6:5b:92:49:d6:84:59:
08:8f:4e:1e:27:08:c2:34:fa:ff:a0:cc:55:78:ee:
c6:7c:3c:6b:bb:c5:9b:d2:b8:aa:bd:39:e6:ac:0b:
90:9c:df:87:25:59:a6:5d:6d:01:62:ad:89:ff:cb:
1a:77:2c:1b:29:d2:dd:06:63:1c:1a:84:00:01:ec:
fc:2e:3e:2d:2e:ab:91:29:6e:d2:5b:23:b1:e7:4c:
ee:47:d2:4f:45:55:65:94:70:c8:ef:4e:dc:e2:d9:
ce:09:90:ef:d1:ce:4b:e2:cc:c8:75:0f:59:11:35:
e2:a8:93:94:a9:ef:47:af:76:f3:8c:3a:d5:2f:6d:
b9:eb:80:3b:9c:9f:fe:db:91:45:4e:da:90:58:5d:
c6:97:7a:fa:33:6a:57:6a:27:39:fa:56:6b:d2:f6:
6a:9c:2b:9d:ed:73:5c:13:0a:71:6d:8c:d2:d8:2d:
32:2a:b2:ac:d3:5b:77:1e:33:f9:b6:24:a2:31:83:
68:35:d8:33:af:49:43:2b:4f:bc:5e:5c:7c:dd:bb:
3d:71:25:ce:93:ef:e4:54:97:55:86:b6:10:d4:37:
f6:53:6a:86:ee:1c:5a:64:3e:da:68:e4:15:a9:71:
e2:08:7c:ed:ac:13:80:64:3e:44:38:b7:98:da:8e:
05:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:2E:E6:05:35:FF:6B:9F:3D:AA:3E:BA:E6:41:EA:FB:CB:6A:60:8D
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/wC7mBTX_a589qj665kHq-8tqYI0.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:77:83:10:08:18:d8:ec:65:fe:ff:0f:01:3c:93:13:a4:87:
6f:a3:6a:f8:5c:16:65:f9:6d:4c:85:12:60:ea:d8:65:ef:99:
76:9c:cc:4b:1b:25:d2:77:f4:51:86:e1:62:74:3e:97:3d:3a:
5c:3b:e2:24:b3:da:ac:64:17:42:36:be:3c:c8:31:74:1e:76:
da:f8:4f:cb:a5:5b:cf:37:e9:4f:c5:12:69:ff:bf:a2:3a:27:
25:7c:cb:66:4c:3b:71:1e:6a:5c:04:0e:3c:52:fe:11:ea:19:
0c:bd:b6:62:f1:5c:c6:4a:d1:dd:83:03:e8:50:f6:9f:b1:a6:
1d:42:e6:5d:cb:2e:8a:d4:30:10:63:bd:8e:f3:a8:ca:66:80:
4f:20:be:a2:0e:5c:71:86:3b:a8:47:cc:82:9b:a3:39:3e:ff:
d5:b3:4b:5e:62:54:d7:34:55:fb:c1:82:07:cc:7f:2e:64:60:
3c:b4:dd:5d:6b:26:6e:8a:7e:c2:32:35:f4:bd:d8:f1:ee:ad:
ec:14:bf:97:ad:9c:d3:eb:87:92:82:ba:07:38:8b:35:81:05:
3e:d8:2d:9f:50:3c:7f:6c:cb:cd:0a:20:94:66:c6:76:4a:a0:
a3:5d:fe:55:69:10:d6:63:c3:0f:12:19:21:dc:15:9c:71:8d:
24:f7:bd:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org