Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/k7slS6gMZC8Y9nlMhSYBr6uj1hA.roa
File: k7slS6gMZC8Y9nlMhSYBr6uj1hA.roa (raw, json)
Hash identifier: AmPMv9gcHm7WB9W4rJjHaOtpJ0PoXJkVIsUwoLs+hSQ=
Subject key identifier: 93:BB:25:4B:A8:0C:64:2F:18:F6:79:4C:85:26:01:AF:AB:A3:D6:10
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4767
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/k7slS6gMZC8Y9nlMhSYBr6uj1hA.roa
Signing time: Tue 03 May 2022 00:30:09 +0000
ROA not before: Tue 03 May 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18279 (0x4767)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 3 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=93BB254BA80C642F18F6794C852601AFABA3D610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8f:f1:10:41:f4:8f:98:4f:e2:e5:07:dd:e8:
56:cb:60:01:75:ce:62:e8:3c:8f:ac:08:91:66:2e:
24:fa:19:fe:ab:c1:ab:7f:86:0f:a2:d2:dc:f2:da:
da:b1:ed:f2:48:6b:0a:19:5d:a6:bf:12:5a:dd:f6:
9c:9b:de:7e:ec:fb:13:63:36:dd:2f:8d:39:a9:70:
86:8b:41:58:0e:ba:8d:4d:c2:d6:b0:c1:ce:31:ba:
7f:a5:94:ad:86:01:07:ea:f5:1f:3b:a5:51:ee:70:
0a:ff:be:dc:98:56:7d:ea:d8:74:8a:87:77:d1:49:
5c:32:16:94:34:e5:a9:f8:f2:c1:58:8c:b5:45:49:
b7:7d:05:7f:27:07:24:3f:56:1f:55:b2:67:a1:9b:
05:2b:0f:e0:73:5c:9e:7c:b6:3d:b9:da:ca:8d:7a:
14:dc:cf:ad:4d:87:9b:ef:1a:ba:a1:17:a0:b2:d5:
34:c0:57:ea:0c:f2:74:e9:8f:88:d4:f5:ed:75:f8:
a5:b2:56:d2:cb:6a:90:ee:87:cc:93:d2:f8:85:ae:
10:15:0b:78:14:6c:7e:21:34:77:e7:44:d9:e8:80:
44:92:99:78:b4:dc:5f:c9:b6:a1:77:52:3d:a0:a4:
74:0d:b3:88:e9:5a:78:3b:a2:a5:a0:e8:92:a4:f2:
1e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BB:25:4B:A8:0C:64:2F:18:F6:79:4C:85:26:01:AF:AB:A3:D6:10
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/k7slS6gMZC8Y9nlMhSYBr6uj1hA.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:9a:7f:53:85:1a:4c:c8:90:fe:42:07:6e:b1:85:7f:27:b8:
6d:c1:4c:77:b6:7b:e2:b7:61:6d:9f:1c:76:4d:c5:c1:98:15:
90:6a:9d:2b:57:9a:0e:de:e1:0a:3e:b3:7e:7a:da:af:8f:2d:
c4:af:62:dc:b2:70:1e:16:28:89:71:0b:54:50:06:84:b8:6a:
df:56:ea:ee:60:35:16:07:17:60:b5:db:4c:2d:dd:6f:ab:23:
d0:00:7c:a7:17:05:84:d4:4b:f4:25:10:fd:8f:4f:a2:f8:a0:
4f:9b:26:f2:4b:53:7c:c2:b8:b9:89:a6:c6:2f:4a:15:04:d3:
a5:1c:74:93:17:03:27:2a:43:0d:96:d2:49:9e:be:d2:c1:d3:
c1:f8:cf:e9:d3:e9:fe:7f:19:ef:01:17:21:d4:b1:50:04:84:
ea:e8:91:d0:90:bc:75:5d:0d:70:21:a8:57:32:8a:2a:60:29:
91:7e:4b:03:3e:23:c3:fc:88:5d:00:e1:63:5a:10:d1:dd:ee:
57:ff:0d:1d:8e:17:d3:bd:25:78:c3:e4:f9:30:a2:98:c1:cf:
f6:b4:d2:95:d0:99:63:12:37:6f:55:1b:96:76:b7:d3:06:d7:
4f:13:79:be:5c:65:10:52:20:5d:9b:de:6f:9f:75:0d:26:a0:
8f:ac:7b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org