Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/GUaPU51iaQ7PN6VPt8GEZzwzEWY.roa
File: GUaPU51iaQ7PN6VPt8GEZzwzEWY.roa (raw, json)
Hash identifier: qOI1NfYOMxL+461sOuxNYe4bdA8Zqtk7AZ0fDw6bcFI=
Subject key identifier: 19:46:8F:53:9D:62:69:0E:CF:37:A5:4F:B7:C1:84:67:3C:33:11:66
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 42E1
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/GUaPU51iaQ7PN6VPt8GEZzwzEWY.roa
Signing time: Wed 09 Feb 2022 00:30:07 +0000
ROA not before: Wed 09 Feb 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17121 (0x42e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 9 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=19468F539D62690ECF37A54FB7C184673C331166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ba:5d:77:6e:51:83:0d:c2:14:5a:ca:30:17:
01:13:24:31:3a:23:49:d5:94:a8:dd:ef:4d:bb:75:
2d:2a:36:29:81:6d:28:fe:24:9d:32:19:56:6a:43:
ed:57:a6:fd:33:1e:5a:cb:68:ad:ba:f5:15:d7:46:
28:23:de:bd:e5:40:b8:e3:02:55:df:ec:53:9b:28:
c5:c5:86:9e:27:93:25:8e:7f:a6:3b:da:54:3d:3a:
f7:0f:b3:2a:63:20:f2:08:53:a9:fe:fc:05:54:47:
e3:29:c8:19:9c:10:cb:cd:77:c4:1b:da:7e:f7:82:
27:1c:1f:22:94:5d:84:55:83:d5:0a:04:90:30:51:
29:53:47:ed:fc:b8:d3:86:b1:5a:af:cb:fc:04:52:
e2:9f:4f:c6:90:22:c4:17:b3:2a:46:56:67:a3:c4:
99:8c:59:02:da:22:91:f9:70:b2:f4:9b:f2:af:b4:
cb:4b:e8:20:7d:9a:b9:81:6e:32:2a:70:86:f7:e1:
69:e4:2d:e5:fe:05:10:a7:db:3c:cb:3e:58:b6:1a:
f0:f5:24:93:9a:52:5a:e1:7c:00:09:81:3b:83:73:
75:cc:c0:41:99:47:00:de:16:9d:a1:3e:c3:7a:61:
c7:25:d2:80:82:4e:ed:a3:7c:17:49:6e:8a:cd:93:
67:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:46:8F:53:9D:62:69:0E:CF:37:A5:4F:B7:C1:84:67:3C:33:11:66
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/GUaPU51iaQ7PN6VPt8GEZzwzEWY.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:1b:f7:18:78:63:82:9a:d9:40:a5:43:a8:70:e9:85:38:f5:
be:23:f0:fa:f2:9b:95:bf:1c:94:1d:31:4b:58:9b:02:dd:76:
47:55:30:fa:ae:40:2a:39:a0:96:ca:11:da:8b:08:4b:0c:32:
00:3a:f3:1e:13:be:63:09:06:c5:e8:c3:66:8a:fe:92:59:34:
6c:ac:8e:85:dd:2f:fd:0a:d4:df:46:71:42:80:fa:ea:ad:ca:
88:86:f6:0b:c0:a8:6d:a9:1c:0f:1b:81:41:d0:ba:50:44:39:
03:5c:8a:eb:72:f4:2b:f5:25:f8:d6:fa:d4:aa:55:13:39:aa:
ce:99:0f:9f:50:35:7b:59:c5:6a:30:6b:6e:65:f1:dd:bc:5a:
38:96:2c:5d:9e:23:23:e8:1a:04:0f:be:a5:4a:03:cc:96:13:
97:a1:05:4b:f7:58:bf:70:9d:1e:71:3a:fe:f6:90:78:d9:a9:
55:6c:80:39:95:18:24:26:30:38:df:13:bf:05:8a:3d:cc:12:
e5:2b:e3:cf:fa:37:86:61:e1:52:91:32:a6:ab:ec:39:74:d4:
58:f0:e1:1f:c7:c6:8d:b3:cc:b9:b7:34:08:3f:da:28:6d:bb:
48:cc:74:40:f3:e0:98:d6:d7:14:b2:96:60:69:20:44:7a:a0:
06:ea:4c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org