Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/Emb9SS58BSopi29Aa1T8QuQ5cAY.roa
File: Emb9SS58BSopi29Aa1T8QuQ5cAY.roa (raw, json)
Hash identifier: 8h558rQptV8qNnakV6ZC/hTuguBur/vjf2Iba/2LkCc=
Subject key identifier: 12:66:FD:49:2E:7C:05:2A:29:8B:6F:40:6B:54:FC:42:E4:39:70:06
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4917
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Emb9SS58BSopi29Aa1T8QuQ5cAY.roa
Signing time: Thu 02 Jun 2022 00:30:07 +0000
ROA not before: Thu 02 Jun 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18711 (0x4917)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 2 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=1266FD492E7C052A298B6F406B54FC42E4397006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2e:6e:64:22:38:81:f5:8e:6a:8d:b0:12:46:
00:fb:6d:f4:b4:dc:9d:65:95:75:47:73:d9:02:f1:
e9:c9:0c:81:fa:af:b8:fe:77:9c:65:86:cf:fd:57:
92:75:10:57:6a:0a:64:41:33:01:41:d5:a9:87:0f:
ff:6e:a9:10:e3:73:c5:5c:26:67:96:c3:3e:fa:fa:
f7:6a:4c:3d:63:9e:56:05:ac:a7:81:6e:e1:1c:49:
1b:36:ae:ba:80:78:0a:e6:f6:3e:d9:aa:ac:bd:28:
8a:e1:74:56:bb:1d:d0:2c:e7:a3:7e:db:08:0e:86:
76:7c:30:1a:06:76:09:ba:83:24:a9:5f:d0:00:ad:
59:c9:1b:d8:a6:0d:c2:d8:ed:b4:6b:40:44:2c:90:
e8:c2:8e:61:46:b4:44:f9:fc:d3:87:8d:a5:31:12:
84:12:f8:1c:b7:28:d9:ae:ad:fb:36:a5:2f:0d:8c:
45:54:5d:73:95:13:d0:9d:73:fc:00:c6:6a:90:15:
6c:26:d9:b5:1a:ac:97:9f:5f:25:31:66:1f:72:44:
37:d0:30:6b:b5:6e:0b:d9:8c:ff:39:2f:38:b6:52:
aa:f3:1f:dc:17:05:f6:79:43:f7:e1:24:4c:52:50:
4f:52:d2:ab:5a:2a:7c:8c:4f:43:44:81:e4:fc:01:
4a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:66:FD:49:2E:7C:05:2A:29:8B:6F:40:6B:54:FC:42:E4:39:70:06
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Emb9SS58BSopi29Aa1T8QuQ5cAY.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:95:3d:3f:46:ef:cb:b4:99:c2:92:6a:b3:8a:2c:2c:6a:01:
08:e5:87:20:fd:66:be:fa:db:65:6b:9c:a6:52:bb:cb:33:20:
34:1d:d5:df:a0:48:78:e7:f9:ee:94:f3:5c:35:33:fb:d2:81:
7e:11:b6:33:97:c8:35:02:51:0b:a2:74:df:73:d4:82:6e:82:
ee:2c:b1:2b:e6:02:85:85:48:02:57:92:e9:20:37:50:ca:88:
31:16:77:45:d9:2a:bc:be:9d:69:9b:f5:91:0e:48:d0:6f:98:
80:16:20:a7:92:46:c1:cf:24:f9:3c:79:12:b7:4f:a9:76:5c:
68:af:69:b0:fa:ae:56:32:4e:08:79:4a:b6:b8:d2:ea:b3:c0:
22:72:94:df:bf:ef:14:db:c3:91:df:2f:70:90:7b:c1:82:12:
bd:a6:61:0e:2d:fb:fb:6f:22:21:e1:8b:07:f9:4e:04:22:b7:
61:b2:2e:cb:03:dc:eb:d6:7c:5f:d7:4c:84:37:72:6b:5a:eb:
a3:63:69:48:ec:f8:ab:0d:79:0d:58:cb:4d:71:c2:35:d3:c0:
b8:ff:e1:d8:79:d7:a2:d6:57:44:04:45:75:9f:74:7d:30:14:
f0:e5:e8:49:91:cd:cc:e6:9f:59:3f:a9:8f:8b:70:98:d4:62:
c4:05:4e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org