Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/7g1YPp3z9n8QS8Yf-Wfgv1dPVi0.roa
File: 7g1YPp3z9n8QS8Yf-Wfgv1dPVi0.roa (raw, json)
Hash identifier: Yte5Pv4b64qyws1k0uc2DaIJNQqVI/wFgdwnLGKEbeE=
Subject key identifier: EE:0D:58:3E:9D:F3:F6:7F:10:4B:C6:1F:F9:67:E0:BF:57:4F:56:2D
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 46AE
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/7g1YPp3z9n8QS8Yf-Wfgv1dPVi0.roa
Signing time: Wed 20 Apr 2022 00:30:07 +0000
ROA not before: Wed 20 Apr 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18094 (0x46ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 20 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=EE0D583E9DF3F67F104BC61FF967E0BF574F562D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:86:9a:f7:1c:3e:91:66:d5:92:dd:10:1c:da:
77:c3:37:c9:54:a7:3d:9a:e6:54:3e:ba:56:2f:8e:
30:4b:8b:1b:b6:d4:c1:a0:89:6d:77:97:e8:75:ac:
c8:70:a6:81:bf:51:17:06:db:eb:70:29:4e:2b:7a:
8d:17:50:07:4a:90:0c:bb:c1:f6:19:10:9a:8f:10:
d7:05:06:14:bf:02:51:8d:e9:8f:01:a5:21:b9:59:
0a:a4:26:f4:ba:70:cd:71:2e:01:d6:2c:7d:55:d9:
1b:2d:a0:8f:1b:ee:d0:37:e5:7c:10:65:c4:fb:9c:
9d:6f:a2:10:d9:0c:20:9f:4f:32:23:1a:81:05:c8:
6f:af:b6:aa:e7:d7:8e:bc:e3:ec:ea:87:df:a8:05:
13:61:01:38:13:72:27:72:5e:1c:23:f3:4d:29:74:
ad:b9:0b:05:c3:bc:aa:a2:aa:ca:ef:e0:fe:e3:25:
49:18:8d:21:a7:b8:0b:1e:9d:b0:64:df:64:8a:c2:
c8:a2:4e:6e:45:26:82:34:8b:74:44:9f:55:ec:fb:
11:3d:19:8b:45:d1:40:7e:b6:7e:2a:ee:8d:5e:a4:
86:30:2a:68:a7:c4:aa:9f:53:97:28:2e:31:52:05:
be:be:d7:56:4d:55:07:c1:5e:d7:6f:3c:10:89:ca:
1f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0D:58:3E:9D:F3:F6:7F:10:4B:C6:1F:F9:67:E0:BF:57:4F:56:2D
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/7g1YPp3z9n8QS8Yf-Wfgv1dPVi0.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:26:f6:ea:99:c6:06:77:00:a4:87:e9:5a:24:cf:86:a2:e8:
85:d1:c4:0c:9b:d1:b5:7c:06:46:d0:d8:ec:cc:b6:d6:10:69:
02:42:a5:75:80:bc:22:b1:dd:ef:0c:96:6d:bb:47:41:e8:fd:
03:8b:bb:c8:5a:ff:ac:be:ba:5c:66:21:a7:93:ef:27:c3:9c:
c8:b7:e7:3b:0a:28:b0:8d:bd:ab:49:b0:8b:bf:81:88:52:3d:
da:ef:5f:35:93:b1:d3:3d:49:4b:7f:99:31:7d:e0:98:37:14:
89:93:c9:f7:52:e9:50:24:ec:62:6d:0e:2d:c5:61:a2:24:46:
7b:17:c9:45:ec:0d:f1:c4:2d:9d:65:23:bc:47:5d:07:2f:b0:
79:43:cb:f7:f1:f9:8b:76:82:ef:4b:83:6e:39:94:e2:dd:97:
f1:3b:74:19:54:72:46:be:66:ac:08:59:55:7e:54:7f:e6:94:
fa:32:ed:12:f1:1f:d4:c4:51:ed:8b:76:c7:3c:b5:28:18:89:
7e:4b:75:77:16:e8:a5:cf:20:09:b8:ae:c2:67:31:8f:43:be:
e5:82:ae:4f:2a:d1:81:d1:e4:7e:0d:79:59:86:c9:73:1b:0e:
43:62:e9:ba:21:2a:cd:aa:35:ab:8d:6c:e4:72:8c:9a:b3:e8:
5e:ea:a4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org