Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/zQB6wzGvwLV-Kr_pUDjwX13mhYA.roa
File: zQB6wzGvwLV-Kr_pUDjwX13mhYA.roa (raw, json)
Hash identifier: S5/EuxHgvGZiOWHWuj7Tdhku30DsVIxMQ5UX1gOvRTc=
Subject key identifier: CD:00:7A:C3:31:AF:C0:B5:7E:2A:BF:E9:50:38:F0:5F:5D:E6:85:80
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4584
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/zQB6wzGvwLV-Kr_pUDjwX13mhYA.roa
Signing time: Wed 30 Mar 2022 00:30:07 +0000
ROA not before: Wed 30 Mar 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17796 (0x4584)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 30 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=CD007AC331AFC0B57E2ABFE95038F05F5DE68580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8a:2f:cc:ef:b4:98:62:63:d5:09:bc:3e:f5:
7b:9b:8b:8c:49:09:c3:dd:5f:31:08:3c:b1:ff:92:
10:6c:7d:ae:84:9c:04:18:5f:ad:c0:19:a9:c2:5b:
3c:15:36:f3:db:f6:7e:fd:6f:e3:74:f5:9c:05:f9:
2d:fe:32:52:ba:7c:5a:ac:f6:43:e4:e9:fd:41:d2:
7f:e6:c7:19:26:5b:6f:0a:77:67:33:24:e2:97:26:
85:9a:bf:ec:27:26:21:fd:c2:4f:80:d9:11:c8:c0:
e6:a9:46:1c:2a:2f:3e:e4:40:ac:9d:ff:f3:f7:72:
d8:c3:17:93:3c:2b:75:e7:e3:8c:3f:64:83:36:12:
01:80:f6:15:44:18:e1:3a:c5:06:a6:cf:fc:5c:94:
f3:1d:0e:0b:b1:1d:a2:8e:5a:05:10:01:1a:f4:c9:
4c:c5:3c:d7:1a:3e:71:e6:cf:3d:04:c5:7c:2e:de:
fa:bf:86:54:05:1e:ec:db:b1:94:17:f3:8f:23:2f:
54:4a:74:3d:74:1a:bf:13:14:41:71:de:f9:9c:d7:
1f:f7:16:d6:01:94:ec:28:fb:83:db:03:9f:ce:6d:
fd:c3:65:d5:59:cf:25:3a:d9:7f:6c:84:34:62:f3:
96:c8:d1:ae:ee:fb:c1:55:c2:ec:cf:ae:ad:3f:58:
79:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:00:7A:C3:31:AF:C0:B5:7E:2A:BF:E9:50:38:F0:5F:5D:E6:85:80
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/zQB6wzGvwLV-Kr_pUDjwX13mhYA.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:0b:cd:f9:02:46:cb:01:45:93:ec:31:27:df:15:97:af:85:
90:ae:fe:5c:32:77:f8:6b:b5:c9:7f:ac:7a:22:07:33:87:22:
8d:85:78:0b:04:ba:75:a2:84:95:b8:cf:b5:72:98:d4:93:e3:
32:2f:b5:67:b0:65:7d:ee:3f:9a:1c:af:79:6e:b4:2d:30:6e:
e9:f2:f9:83:89:df:77:32:9b:8f:4d:17:81:5f:ca:d3:a1:0d:
c8:8a:9f:fa:e3:1e:2f:fa:77:c6:07:cf:3a:92:2a:4d:47:77:
fb:e7:d5:a5:7a:29:2d:d4:35:ed:41:dd:f7:35:1d:03:b4:c2:
e8:c4:1b:63:07:0b:41:3a:bf:e3:47:e7:55:28:2f:c3:c7:81:
c8:ee:ff:aa:4c:51:5c:36:ae:ad:91:e2:c9:11:87:0d:ba:5a:
a1:4c:9b:75:db:36:84:55:61:50:87:94:47:e4:96:1d:d3:03:
54:64:5a:c2:d5:b7:a1:9a:a0:25:db:b3:c1:cf:2d:c5:44:e0:
58:f8:8b:15:24:4a:61:42:d7:eb:06:32:ca:b7:ab:e5:cb:54:
97:9d:11:be:c5:d1:e7:31:f5:fe:29:5c:77:cb:e2:93:60:66:
2d:21:08:dc:05:87:db:0a:e7:2e:e3:1f:cd:9c:ca:3d:13:ac:
7d:c0:15:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org