Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/KeOBXrC7NN1kVt01YcUXFsc8vJ4.roa
File: KeOBXrC7NN1kVt01YcUXFsc8vJ4.roa (raw, json)
Hash identifier: IoCuWQr4QA+WfM+C/HVpi6uyDw5hkI/yi3Zf3ZOMDjE=
Subject key identifier: 29:E3:81:5E:B0:BB:34:DD:64:56:DD:35:61:C5:17:16:C7:3C:BC:9E
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 46E9
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/KeOBXrC7NN1kVt01YcUXFsc8vJ4.roa
Signing time: Sun 24 Apr 2022 00:30:10 +0000
ROA not before: Sun 24 Apr 2022 00:30:10 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18153 (0x46e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 24 00:30:10 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=29E3815EB0BB34DD6456DD3561C51716C73CBC9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6b:7c:07:e5:27:17:dd:cc:9b:16:81:a5:f9:
5f:c8:0c:14:41:8a:4d:4c:f6:08:dc:12:07:1a:87:
7f:c0:d6:cf:74:a8:b1:34:4a:14:8f:80:5e:1d:a6:
13:98:af:e7:64:ac:18:64:d8:65:36:eb:2f:f9:02:
b7:a9:64:85:49:1f:77:46:19:f6:a0:b1:dd:e0:f8:
71:1b:58:4e:2d:06:b6:2c:6c:64:67:db:88:f1:12:
47:02:ff:4e:e3:1f:bb:14:a2:13:23:c0:4e:8d:a9:
5f:60:ac:db:be:0d:44:be:9e:a1:eb:4e:59:95:49:
d3:5a:be:2b:83:40:48:13:b0:8d:7d:22:ff:2e:10:
23:a9:88:ed:fe:54:0e:34:15:c3:1b:48:d9:1a:28:
7a:aa:4f:d2:6d:16:84:db:0a:fb:cc:9c:9e:c9:5d:
cd:58:d0:66:39:c2:ba:92:4f:5f:b4:09:88:6b:1a:
d1:3f:92:51:00:36:61:3a:ec:e0:06:68:76:f7:34:
31:6b:7d:4e:e8:07:99:f1:92:20:30:a1:90:28:8a:
d6:42:68:6b:69:c9:4b:10:7e:dc:79:b6:8f:c5:19:
4a:97:ba:2a:9b:13:c7:cf:5f:c5:e7:ba:28:fc:61:
ce:72:61:3f:74:14:4e:cb:14:4d:50:4a:f3:10:d9:
99:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E3:81:5E:B0:BB:34:DD:64:56:DD:35:61:C5:17:16:C7:3C:BC:9E
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/KeOBXrC7NN1kVt01YcUXFsc8vJ4.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:88:fb:83:24:83:82:36:f9:0f:c9:04:ee:17:ae:d4:c0:9a:
ad:96:c7:99:05:36:05:f3:7a:4b:c5:ee:65:75:26:78:42:cd:
d0:b8:a0:75:9a:bb:73:9a:f6:ad:2f:3b:93:54:b1:59:07:c6:
41:e3:27:b0:bf:28:7c:f3:de:33:73:f7:fa:3e:74:79:74:6c:
87:c5:cb:a5:38:78:96:e6:45:c5:03:5c:23:2b:4a:af:95:6e:
de:b1:65:f9:c9:fb:8c:42:0c:a4:5a:b1:c4:54:41:fe:8d:72:
e8:2a:97:6d:a1:30:7a:93:86:34:ce:e9:e7:d9:cd:5a:5b:0c:
a0:fa:18:8c:0f:97:bd:c3:cd:3d:bc:df:95:99:b8:13:43:e3:
1c:c6:7e:41:92:07:cb:8a:ff:36:81:32:5b:6a:f1:15:bd:3f:
22:8d:08:8b:e2:4d:2b:c6:ba:d3:d6:99:e0:6c:6d:ae:71:e7:
5b:6a:eb:28:c1:43:48:82:5f:10:a9:2a:b9:5c:00:80:4d:65:
d6:50:39:a6:7e:70:4d:6f:fc:a5:11:34:71:cb:67:37:d0:d3:
b7:58:69:47:af:8f:4c:03:f1:57:b3:73:6f:f1:e0:39:7c:71:
47:8e:81:fc:8b:44:6d:83:8c:76:0a:23:3f:23:90:e7:eb:45:
b3:6f:45:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org