Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/wu4uXt6ptP-QP5O3zi772XMG3Jc.roa
File: wu4uXt6ptP-QP5O3zi772XMG3Jc.roa (raw, json)
Hash identifier: EU1RWuEgR6KwPYhypbCq7UmrnMK1YReF8tsnOukrbWI=
Subject key identifier: C2:EE:2E:5E:DE:A9:B4:FF:90:3F:93:B7:CE:2E:FB:D9:73:06:DC:97
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 462C
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/wu4uXt6ptP-QP5O3zi772XMG3Jc.roa
Signing time: Mon 11 Apr 2022 00:30:06 +0000
ROA not before: Mon 11 Apr 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17964 (0x462c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 11 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=C2EE2E5EDEA9B4FF903F93B7CE2EFBD97306DC97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:86:13:d1:c4:df:89:91:bc:5d:b1:84:2f:b3:
b5:24:64:32:30:19:07:ec:59:2f:aa:17:02:16:be:
33:08:85:e7:e6:c0:d0:74:31:3f:c6:5b:79:3f:41:
7e:d9:03:ce:58:07:b8:ee:5b:2c:51:f9:42:42:a8:
78:e5:fe:41:e3:22:96:04:9f:e8:e0:3f:ae:0c:d4:
85:2b:fe:5b:b9:5f:1f:af:51:a0:f0:ba:97:20:63:
77:ef:e8:e0:a8:87:67:f5:16:28:a3:55:d1:7b:e8:
6b:c0:a9:75:e9:33:be:00:fd:54:0f:d0:07:27:4c:
c7:88:66:71:ca:ea:5d:05:97:f3:6f:9d:fb:06:7a:
a1:6b:3b:61:7b:a0:df:ed:c9:ca:f9:db:df:c3:1f:
b7:8d:40:d8:58:24:0d:ca:d1:df:56:b5:98:3d:0e:
5c:d4:57:36:78:64:a4:f6:d0:7c:b3:2b:90:0a:3f:
aa:7a:98:e2:5f:9a:00:b3:fe:af:ed:6a:a4:19:9e:
45:b6:fc:d1:a7:94:13:d9:85:45:01:f6:46:66:24:
48:bc:fb:d6:b6:15:ba:3d:61:0f:9c:c2:1e:88:96:
ca:67:fb:49:88:49:23:0c:24:c7:1f:8c:ad:fc:02:
ea:df:e8:a4:95:46:fa:79:a0:ae:10:11:81:39:db:
53:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:EE:2E:5E:DE:A9:B4:FF:90:3F:93:B7:CE:2E:FB:D9:73:06:DC:97
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/wu4uXt6ptP-QP5O3zi772XMG3Jc.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
38:32:3b:fc:3e:c6:ff:77:1e:51:77:55:df:a7:6b:42:eb:80:
1b:2a:a0:fb:7a:e1:7b:9e:ee:41:43:79:de:d3:7d:40:6e:30:
f0:bb:38:f1:77:19:94:74:52:3f:df:41:ad:72:ea:d2:4a:2f:
25:9d:df:3a:67:1f:06:07:63:6a:04:9d:a0:ed:84:57:64:e9:
f3:c0:46:25:b9:ee:de:8e:9e:aa:d6:bc:04:67:da:10:f1:ab:
12:50:0c:d8:0a:b4:16:bf:1d:4a:eb:68:7a:16:12:a2:25:27:
fd:a8:ec:9b:ac:e4:d7:81:c6:90:ad:a4:2c:d1:6a:82:ef:b7:
2f:c9:47:40:aa:ed:69:0c:d4:31:29:6b:2f:d2:69:85:6e:2c:
84:1e:6a:49:07:8e:c3:f7:05:00:34:d1:6f:9d:ec:08:d8:e0:
87:24:1b:7a:89:db:c0:83:37:b2:58:23:bf:cb:bf:40:a5:2d:
c1:18:4d:6c:9b:41:79:8b:80:e8:f6:a9:e0:29:17:1f:28:23:
08:bd:74:02:97:b2:05:5e:4e:40:01:f7:84:e6:2f:41:3e:1e:
d1:c9:ce:af:a2:70:9f:f1:5c:51:86:0f:dc:d7:de:58:e6:d8:
85:de:94:5f:1c:98:7c:ee:cc:0f:6b:60:c2:b6:0c:a6:b8:67:
a9:0a:d2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org