Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/wr9_ni2dwmHOIMGCdIGlUNXUhOE.roa
File: wr9_ni2dwmHOIMGCdIGlUNXUhOE.roa (raw, json)
Hash identifier: N9afTYZ6OWLEWVx2rMskBKP7QbliIXjjPGSasZuI3RE=
Subject key identifier: C2:BF:7F:9E:2D:9D:C2:61:CE:20:C1:82:74:81:A5:50:D5:D4:84:E1
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4281
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/wr9_ni2dwmHOIMGCdIGlUNXUhOE.roa
Signing time: Wed 02 Feb 2022 00:30:08 +0000
ROA not before: Wed 02 Feb 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17025 (0x4281)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 2 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=C2BF7F9E2D9DC261CE20C1827481A550D5D484E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:97:b6:2a:3e:30:ef:09:6d:d9:6d:f0:72:d2:
74:fc:9b:7d:f1:77:07:e0:4d:6a:92:73:a7:50:9e:
fa:bc:53:03:66:27:b7:47:c8:bc:ba:17:e7:a2:e4:
08:3e:1d:5a:5b:91:51:13:61:0e:07:97:5b:2f:e5:
a2:b3:d9:c1:4e:3a:43:0c:5b:10:4c:a8:de:64:95:
34:39:ae:95:a7:a7:5d:4a:fc:d1:e3:46:db:0b:9e:
b8:e3:20:a9:26:85:1c:02:20:7e:cd:f6:96:1d:76:
a8:e5:dc:52:77:ee:07:62:3a:56:7c:c9:7b:71:f6:
b4:be:50:e0:4d:2a:ad:12:a4:78:fc:b4:c8:59:0b:
6e:e5:28:cf:d7:36:ba:1c:f0:8f:df:ee:4f:ae:f6:
5d:10:74:d3:ae:7a:98:50:f3:c5:23:64:5a:ad:4d:
f9:99:66:ce:5d:a9:e7:b3:37:23:4c:9c:51:1a:b9:
33:95:5d:da:c4:5d:62:9e:20:74:e3:e4:dc:05:9d:
65:42:42:c7:8f:da:6a:c4:0d:65:5e:6b:e8:fb:ae:
5a:b8:05:fc:ea:70:fb:37:a2:e8:10:0a:0e:32:13:
fb:e8:a9:d0:16:7e:66:f4:cc:d2:cb:d9:c0:e2:d0:
68:43:83:70:d5:4f:61:e3:ca:ae:f0:0c:6b:6d:37:
03:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BF:7F:9E:2D:9D:C2:61:CE:20:C1:82:74:81:A5:50:D5:D4:84:E1
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/wr9_ni2dwmHOIMGCdIGlUNXUhOE.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:d7:5c:ff:90:eb:3d:50:45:a0:a5:6c:7a:59:94:bb:c5:70:
e9:46:ae:e6:19:4f:6d:4f:48:cd:34:21:08:b6:ad:97:b2:42:
9e:74:72:b8:5b:c5:30:e5:6e:5d:86:dc:38:57:9f:ea:75:ae:
8e:0d:60:50:ac:fa:9c:ba:d9:21:9c:dc:b7:d0:9c:a4:72:c3:
72:28:f8:3c:16:42:bf:bc:a9:12:72:be:c6:aa:4f:27:fc:41:
62:af:23:05:73:cc:be:5f:75:b3:00:f2:57:ba:62:03:da:b0:
4d:a5:cf:48:7d:1e:15:8d:2a:27:3a:a1:a6:a7:04:ad:b0:ef:
20:e0:5e:6e:28:a0:a5:51:b3:e5:e4:f1:ee:4a:40:6c:a0:12:
8c:1c:b2:de:b8:51:29:06:17:31:5f:37:e7:8d:f2:f1:f0:8b:
8a:f7:52:9e:eb:c0:e7:8f:26:32:b6:35:aa:23:7d:1c:69:a2:
e1:b2:5c:e6:85:13:e9:b6:71:26:f7:85:55:54:56:cf:fb:6e:
29:c4:e0:8f:a4:50:f2:22:1a:cb:73:99:f1:7d:45:ec:c5:2c:
38:24:eb:c2:2b:ad:17:c1:2b:0a:47:23:6b:e8:91:b1:dc:d6:
ff:40:bf:0a:9e:a3:78:a7:d2:ba:10:70:73:6d:85:d2:08:71:
1a:23:f7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org