Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/yafNVH0_FrSWg67mcBLlGXIxuKo.roa
File: yafNVH0_FrSWg67mcBLlGXIxuKo.roa (raw, json)
Hash identifier: ZEFIxzsFMK2H0TJEer3WlACtGSTaTrRadKGRfTLd/5k=
Subject key identifier: C9:A7:CD:54:7D:3F:16:B4:96:83:AE:E6:70:12:E5:19:72:31:B8:AA
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 43BC
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/yafNVH0_FrSWg67mcBLlGXIxuKo.roa
Signing time: Fri 25 Feb 2022 00:30:09 +0000
ROA not before: Fri 25 Feb 2022 00:30:09 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17340 (0x43bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 25 00:30:09 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=C9A7CD547D3F16B49683AEE67012E5197231B8AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:18:24:42:30:53:03:91:e3:61:a1:14:e8:1b:
c1:62:a0:d6:a3:2f:13:68:e5:ea:34:72:42:1b:4f:
e3:a7:46:04:2c:36:67:9b:87:83:f6:cf:a8:81:5d:
53:c0:48:91:2f:59:eb:b0:9d:03:ea:df:e7:9b:15:
3d:2b:24:f8:44:cb:74:bf:26:aa:be:51:ee:a8:33:
ac:42:f3:d3:77:70:e9:7e:60:f6:f5:95:45:a8:08:
4b:7d:d2:55:9a:49:06:f8:14:3d:ef:fd:84:09:63:
0d:96:25:cb:73:a7:5d:69:84:2f:81:d4:76:dd:8d:
d0:01:c3:82:89:06:46:e9:ff:7b:dc:d2:df:f8:b0:
44:f6:c3:3d:6a:56:ea:fe:6f:69:af:fc:b8:4c:be:
64:34:b2:81:2c:a1:61:60:45:36:e2:ec:f4:26:cc:
11:4c:c4:ee:6c:31:dc:c7:19:15:36:66:66:76:a5:
9e:29:78:9c:11:3a:54:e9:e8:59:92:f0:b2:d1:ec:
86:32:2f:19:00:6d:6f:08:44:b0:d6:30:76:38:f4:
45:e2:66:3e:f8:e1:7b:f8:8b:00:68:e4:3d:64:7c:
b8:a6:fe:5b:40:c4:39:fa:1c:7d:79:26:81:95:42:
88:53:2e:26:b4:26:57:0b:be:89:11:1d:4d:4d:2c:
e5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A7:CD:54:7D:3F:16:B4:96:83:AE:E6:70:12:E5:19:72:31:B8:AA
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/yafNVH0_FrSWg67mcBLlGXIxuKo.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
62:47:e3:c4:62:70:c6:56:bb:06:0e:1f:e7:96:ff:50:35:21:
42:cf:40:e7:0c:fe:31:e2:ae:f1:fd:2a:d3:b0:41:a4:10:f3:
00:c6:ad:39:4e:35:5d:2d:cd:56:52:23:73:6e:89:6b:40:65:
71:18:88:0f:59:8e:c8:d0:33:93:60:f6:09:1a:e4:b5:4a:b1:
9e:d9:29:bd:d2:f5:1f:98:33:ee:ab:84:1c:8a:b1:4f:3e:92:
6e:89:60:40:5d:dd:88:c4:f8:c8:e8:7b:82:af:ee:ae:a5:6f:
2d:95:2a:f5:3f:a2:bc:67:a8:4a:4c:5d:a5:d7:aa:1c:63:af:
19:40:39:01:0f:91:25:1d:a1:a5:56:a4:31:c7:66:39:8a:dc:
9e:4b:e2:65:df:7c:59:29:72:a1:ad:0d:5a:23:c4:6d:94:2c:
26:59:2e:13:ea:fb:ca:fa:a2:2c:24:ab:86:b3:12:94:b5:2f:
0f:7b:87:34:4a:22:f9:94:ec:44:07:19:02:5d:39:63:8d:98:
3f:64:14:97:01:c2:09:97:77:d1:8b:0d:1d:e4:d6:50:b2:2a:
5c:47:f3:ff:b5:80:6c:27:c7:51:a2:56:8e:40:be:9b:cd:1e:
da:ee:75:92:e4:99:a5:db:35:18:7d:1d:00:5f:ab:0c:08:24:
a4:bc:9c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org