Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/GuOqJ20P0eHJMVcJhGf3TfeNwDI.roa
File: GuOqJ20P0eHJMVcJhGf3TfeNwDI.roa (raw, json)
Hash identifier: OBtrLzp/SkwCGp5/MMON2WtYuiXXl/W5SH31CO9BLTk=
Subject key identifier: 1A:E3:AA:27:6D:0F:D1:E1:C9:31:57:09:84:67:F7:4D:F7:8D:C0:32
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 47D7
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/GuOqJ20P0eHJMVcJhGf3TfeNwDI.roa
Signing time: Wed 11 May 2022 00:30:13 +0000
ROA not before: Wed 11 May 2022 00:30:13 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18391 (0x47d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 11 00:30:13 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=1AE3AA276D0FD1E1C93157098467F74DF78DC032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e4:5a:46:b0:3a:cb:37:0a:29:d6:29:51:28:
bd:6b:e3:11:c5:8c:79:00:df:e6:4a:47:bf:46:41:
93:e8:9d:df:3b:09:4e:8b:b0:7c:9c:ab:4e:d0:fe:
23:d7:a6:fc:24:0d:a6:dc:38:a8:ca:78:d8:d9:6f:
94:fc:69:f0:4c:23:cc:03:f4:7e:7b:6b:93:e4:ee:
af:d6:c3:12:0a:9e:8c:a0:06:83:b9:88:a5:0e:82:
74:97:75:a7:2d:5d:59:c1:91:41:67:18:a6:34:ba:
cc:b5:60:35:12:d0:6b:9d:3c:7d:59:86:19:ad:bd:
31:c0:e9:9a:0f:9d:2a:2f:11:71:58:bd:95:9f:ce:
44:26:0c:59:c0:10:f1:f3:50:66:f6:73:0a:55:1e:
a9:2e:69:23:13:d5:4f:83:4d:6f:2a:3e:f0:43:60:
d4:aa:bd:62:44:4a:ad:da:4d:19:50:f4:74:f2:3c:
15:f5:f1:ec:7e:30:ab:b3:53:c0:d1:4c:8e:3d:b8:
fd:e0:0d:28:27:a0:11:02:22:fa:27:6c:07:08:c4:
8c:0d:ff:20:2a:0b:ed:8b:80:28:be:83:06:3d:1d:
e4:a7:69:75:6f:4a:5b:55:6e:a9:dc:95:7d:d8:3d:
72:53:8b:58:f6:e6:21:cb:ae:57:46:06:8e:bb:a1:
4a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E3:AA:27:6D:0F:D1:E1:C9:31:57:09:84:67:F7:4D:F7:8D:C0:32
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/GuOqJ20P0eHJMVcJhGf3TfeNwDI.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:9c:d5:e8:df:f2:31:0b:59:67:03:2c:cc:cb:20:15:ec:01:
dd:68:e0:20:92:a8:a8:9c:d0:8a:79:91:53:e7:1d:17:a4:4f:
4d:8b:0a:c7:91:2d:b7:e3:ab:8b:58:17:43:88:69:0d:ca:df:
a0:06:a4:6c:b0:d0:93:32:f2:7a:a8:01:48:73:fb:cd:dc:67:
22:d0:cf:06:dd:45:a9:79:81:f9:e6:9e:cc:0f:f5:1f:54:73:
93:5e:c9:f1:51:f7:ed:34:28:a7:66:6c:af:85:6f:6e:f1:3d:
da:97:f4:1b:57:bf:ad:02:5d:4f:72:cb:0b:f0:66:3a:dd:20:
0d:fe:dd:42:82:88:52:4c:4a:92:aa:a0:ce:be:4e:93:ce:8e:
56:ba:c3:f0:26:2f:76:e4:0e:a9:fb:29:dc:3a:4a:15:e9:92:
4b:d0:6f:e1:dd:2d:48:59:90:05:b6:d0:c2:d4:aa:e5:12:64:
14:33:f7:21:e2:5d:33:01:01:c3:28:90:46:ff:1f:1c:f0:f9:
58:6e:c2:91:b3:6d:d8:ca:5d:f9:c2:04:05:5b:5b:64:61:91:
79:47:88:93:b3:18:14:15:4f:36:95:e9:93:44:7e:aa:a3:f8:
5b:96:7e:04:c7:22:04:e6:b2:6b:96:b8:dd:d5:0e:38:90:44:
84:77:61:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org