Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/GcdKbW_THq7gE_Xwl9JnDDaABS8.roa
File: GcdKbW_THq7gE_Xwl9JnDDaABS8.roa (raw, json)
Hash identifier: zhAx/r7MuQbx567GG82RCp45QKZHZrEuRsDtLYnQOnA=
Subject key identifier: 19:C7:4A:6D:6F:D3:1E:AE:E0:13:F5:F0:97:D2:67:0C:36:80:05:2F
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 33E9
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/GcdKbW_THq7gE_Xwl9JnDDaABS8.roa
Signing time: Wed 14 Apr 2021 10:34:48 +0000
ROA not before: Wed 14 Apr 2021 10:34:48 +0000
ROA not after: Fri 01 Apr 2022 01:01:03 +0000
asID: 47065
IP address blocks: 147.28.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13289 (0x33e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 14 10:34:48 2021 GMT
Not After : Apr 1 01:01:03 2022 GMT
Subject: CN=19C74A6D6FD31EAEE013F5F097D2670C3680052F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7d:63:9b:42:78:17:3b:2e:48:a6:2f:1c:69:
b8:22:72:23:af:fa:c2:6b:8d:23:da:88:5e:8d:0c:
5b:e7:53:bb:34:31:d3:d5:c0:ed:dc:dd:c6:03:eb:
dc:ed:9d:e6:75:bc:46:22:a1:4e:69:fa:ce:f9:56:
b5:94:10:c5:7f:64:16:03:42:19:7e:c7:b0:48:aa:
37:af:9f:72:94:ca:28:74:40:7f:95:69:a9:88:be:
e0:e3:cf:b3:77:0d:7b:21:82:55:fa:72:3c:4a:f8:
63:50:41:1a:06:4e:50:39:ec:ba:8c:0b:d6:70:e2:
e0:ae:f1:08:28:a7:01:4d:68:3f:b6:ee:07:55:08:
ec:ff:df:85:84:e4:b6:21:a3:83:b7:3d:4c:86:3a:
09:fb:b4:b7:30:66:19:7b:d2:ff:f3:ed:dc:99:bb:
a1:c1:b4:68:4d:18:28:82:9d:2b:ca:2f:bc:57:63:
af:37:b4:d7:ff:37:42:ba:57:c0:98:e2:0e:df:bf:
21:50:20:9e:01:05:e1:0d:d3:3f:35:c9:03:4f:d5:
9d:f2:f0:e9:d1:3e:16:88:df:7c:8b:a6:b6:9d:37:
5b:c9:0a:0c:b2:c5:41:03:e1:c4:49:88:3e:34:dc:
26:fc:74:e3:e6:50:28:dc:51:f9:be:d4:57:e9:6c:
dd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C7:4A:6D:6F:D3:1E:AE:E0:13:F5:F0:97:D2:67:0C:36:80:05:2F
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/GcdKbW_THq7gE_Xwl9JnDDaABS8.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.12.0/24
Signature Algorithm: sha256WithRSAEncryption
41:df:73:5c:6d:b0:0c:7a:18:f5:69:68:8b:3f:89:c2:8d:10:
e0:fa:f6:49:a8:80:e1:ad:a1:7b:04:0b:02:a9:b6:8d:4b:ef:
48:79:90:95:ad:06:e5:84:ec:14:06:80:95:09:d6:92:25:14:
a6:95:1e:28:a5:f1:40:59:07:f0:e9:56:34:3b:1f:33:bd:a7:
80:32:d0:a5:9c:a2:e6:af:34:5d:fc:bf:b0:21:0c:e3:a0:15:
29:b9:c1:d6:1f:6a:93:a6:a2:2c:c9:2f:53:6d:2a:bb:3b:e9:
a1:a7:de:fd:41:d9:51:54:fc:c5:03:ed:97:6f:4e:09:64:b1:
eb:8d:b5:1f:9c:4e:7c:61:d4:53:47:07:25:78:47:1a:45:f7:
e6:11:4d:c0:7d:fe:02:eb:22:f3:b5:17:f4:64:68:0c:e4:d1:
3e:3e:d6:d3:19:25:1c:6e:ca:33:b1:fd:00:a2:ea:72:6b:d6:
6c:cc:49:d4:2d:de:8f:77:60:b3:0f:d3:d3:fd:b5:17:32:f4:
e2:6a:a1:69:b1:9e:3d:2c:0b:10:c9:04:ca:d0:33:81:09:07:
53:52:3f:b3:7a:91:0a:3c:d1:1b:89:f9:e6:15:18:67:92:1a:
c1:b8:6d:1c:74:23:eb:88:cd:58:cc:27:89:94:77:fa:9d:db:
7c:4f:66:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org