Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/DEJOegMuZrpIoUFpBJQRz52wsA4.roa
File: DEJOegMuZrpIoUFpBJQRz52wsA4.roa (raw, json)
Hash identifier: lFsRNsH1IAqykpAc3TVF0k6kSyrNun/93wRG7xXVoXc=
Subject key identifier: 0C:42:4E:7A:03:2E:66:BA:48:A1:41:69:04:94:11:CF:9D:B0:B0:0E
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 47B7
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/DEJOegMuZrpIoUFpBJQRz52wsA4.roa
Signing time: Mon 09 May 2022 00:30:10 +0000
ROA not before: Mon 09 May 2022 00:30:10 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18359 (0x47b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 9 00:30:10 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=0C424E7A032E66BA48A14169049411CF9DB0B00E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c5:05:ba:9d:2f:ff:f0:a0:a0:af:22:85:5b:
ee:a4:95:c5:f3:86:8c:cb:61:25:c4:8f:d0:28:65:
af:f0:24:58:d3:c1:17:21:08:47:f3:76:05:84:27:
75:77:e0:57:8c:d8:26:53:7d:7b:a4:ee:ee:a4:7a:
7b:56:c5:99:a4:8b:b8:09:ff:fe:99:d8:b1:e8:20:
7f:2e:64:f1:3a:1c:90:03:c0:99:63:7c:2b:38:95:
a7:13:db:7e:65:2e:d0:6a:ce:50:74:78:cf:9f:7c:
cd:e3:b1:cf:41:00:ed:22:29:e9:35:13:7d:0c:4d:
22:9d:46:25:30:0d:43:cf:70:e0:a6:69:37:79:91:
64:d8:3f:57:a4:d9:01:e8:f0:45:6d:09:50:6d:c9:
10:b8:7d:0f:0b:e7:d0:a8:18:84:73:9f:38:f7:f9:
18:fd:18:b4:74:a1:a3:cc:b0:2e:f4:85:19:58:7e:
d3:05:e7:a5:b5:eb:f3:8b:65:56:b0:a3:d9:35:b3:
95:03:28:a6:8b:91:76:a9:79:a5:25:03:ec:63:7d:
6f:ea:c4:05:bb:21:a6:49:0a:33:90:45:45:c3:fb:
e9:03:30:0d:a9:da:dc:65:a5:aa:63:68:5c:a7:57:
fb:c3:aa:a6:ed:28:ec:e7:67:5c:76:c9:b8:7c:8e:
8d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:42:4E:7A:03:2E:66:BA:48:A1:41:69:04:94:11:CF:9D:B0:B0:0E
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/DEJOegMuZrpIoUFpBJQRz52wsA4.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
39:09:a6:7a:cf:7a:41:8a:89:9a:40:b8:0f:10:d5:e3:db:05:
31:c0:49:b6:9b:3d:60:9a:b9:ae:dd:eb:65:f0:18:49:5e:15:
6c:00:91:d1:1a:b6:e5:87:52:5b:e6:3f:60:23:d2:fd:33:e7:
41:15:f6:e0:19:a6:68:c1:01:16:eb:93:96:89:30:8c:a2:e2:
32:0a:f3:9c:87:d5:15:fb:de:ba:27:0a:9f:93:66:27:ff:17:
9e:dd:2c:4a:96:2d:d7:03:9c:44:eb:aa:14:ab:2d:e7:85:66:
ce:36:c8:95:40:8d:f5:3f:e1:ba:93:71:9d:2f:1f:71:b4:fd:
6c:17:c2:c5:5b:5f:09:90:db:b6:e1:14:ba:fe:e4:9b:6e:26:
8a:e7:98:e1:61:17:f1:e9:e3:42:29:ae:94:b2:fc:e5:2f:02:
a8:03:59:ee:2a:9a:7e:78:df:a8:70:ca:13:76:ce:4f:7a:a4:
fa:7b:02:82:6a:76:9f:ad:d5:d1:90:7a:f5:41:5e:90:9b:43:
82:1c:2d:a0:57:93:f7:46:85:f6:6e:53:13:0f:b9:b3:55:dd:
2c:cf:bd:ec:d9:28:95:cd:e4:a0:d8:a6:05:55:58:2b:b5:51:
24:c1:64:6a:0d:8e:1e:bd:ba:18:d6:9d:6f:4c:2a:01:e8:7b:
01:f3:84:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org