Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/AMhbrg-1kIjVpVHwxlFEXiQFh50.roa
File: AMhbrg-1kIjVpVHwxlFEXiQFh50.roa (raw, json)
Hash identifier: +nDSNlUZrCIZMZzNZnAKY/luFSnIBOJNyQ0+VPNmVro=
Subject key identifier: 00:C8:5B:AE:0F:B5:90:88:D5:A5:51:F0:C6:51:44:5E:24:05:87:9D
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 49C2
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/AMhbrg-1kIjVpVHwxlFEXiQFh50.roa
Signing time: Sun 12 Jun 2022 00:30:07 +0000
ROA not before: Sun 12 Jun 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18882 (0x49c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 12 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=00C85BAE0FB59088D5A551F0C651445E2405879D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7e:cc:80:32:19:74:9f:45:4f:94:49:d6:8b:
2e:27:e2:bf:f0:ed:d6:31:29:76:ce:9d:1d:24:18:
f8:f8:0b:a2:ad:de:8b:54:03:54:e1:1f:4a:bd:e4:
73:d7:a6:88:0d:49:7a:4f:5c:37:29:0c:ae:4d:b4:
bf:bf:c0:22:70:75:34:c5:e5:fc:de:e1:d4:f4:9d:
21:5c:22:c0:f8:e4:72:44:5b:b1:d1:a7:28:9c:72:
7c:a2:ae:64:a0:05:49:73:0b:e0:b6:75:8d:d4:40:
32:40:77:ec:4e:bd:a3:84:10:66:61:05:a4:a1:0c:
b4:85:3a:1a:f4:1e:02:28:72:16:af:89:16:e8:ff:
d4:ac:54:db:7e:b5:b0:31:58:59:c6:0a:3c:0e:eb:
b3:d2:7b:d0:4f:5d:3d:29:ec:3e:6b:fe:bd:28:05:
2d:8d:39:6e:c6:5e:89:63:e0:d7:10:02:72:05:28:
4c:17:c8:8b:38:fe:ef:13:d0:45:4d:5d:75:54:08:
23:d8:7e:dc:6c:39:0e:45:17:89:92:39:75:d7:ce:
b9:0a:93:c5:2b:38:d3:25:b1:01:0f:5e:1b:ee:83:
8f:79:c7:c1:3f:61:84:91:28:9d:f2:b5:00:f2:d7:
76:87:60:f4:0f:85:35:31:3f:39:98:86:6f:35:ec:
d8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C8:5B:AE:0F:B5:90:88:D5:A5:51:F0:C6:51:44:5E:24:05:87:9D
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/AMhbrg-1kIjVpVHwxlFEXiQFh50.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:27:5d:e5:d0:ae:69:5b:e9:1b:3b:b3:ab:f2:59:87:6c:55:
0a:9d:4c:85:10:f3:18:9f:e4:4b:09:55:9f:f8:fe:6c:b8:d8:
08:98:f8:bd:d6:5e:44:60:dc:cc:02:af:1c:b3:48:6f:ec:7d:
b9:6e:5d:7e:f1:cc:68:0b:e3:25:54:ba:84:32:9d:9f:3f:ac:
6e:7a:11:79:29:6b:25:8e:9a:b6:42:b6:99:34:81:9a:22:a8:
22:84:ab:c6:59:95:7b:d6:b7:1e:18:7c:b8:d8:6f:e8:52:fe:
81:97:e3:23:20:4b:1e:bb:f8:e9:d0:d0:7c:72:c8:72:c0:20:
22:ed:30:1e:36:07:1b:32:b9:55:e9:75:15:a0:1a:31:77:8f:
93:76:4a:d1:94:19:b5:32:bf:b5:7b:02:e7:10:20:48:22:60:
8b:8e:20:be:8a:76:7e:e5:f3:18:03:3d:4e:38:ef:c5:3a:6c:
33:79:d9:78:d2:b2:21:97:39:ef:5d:7f:5d:47:52:44:4a:4b:
c3:d4:8f:e3:00:af:0d:95:db:1a:d7:8f:47:fa:5c:ea:d9:43:
46:a1:13:65:1f:4a:1a:6c:36:21:35:50:dc:be:5f:4a:e5:47:
44:c6:bf:5d:6c:09:eb:05:70:b8:6d:9a:27:00:ad:62:1d:22:
87:fb:14:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org