Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/lN7CAAz3VuSuHohogFeX8Mp2CZ8.roa
File: lN7CAAz3VuSuHohogFeX8Mp2CZ8.roa (raw, json)
Hash identifier: EbwixDGjRJOaH56+AVO3EE5GoegNetKWBr3kmqUUbO8=
Subject key identifier: 94:DE:C2:00:0C:F7:56:E4:AE:1E:88:68:80:57:97:F0:CA:76:09:9F
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 46AF
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/lN7CAAz3VuSuHohogFeX8Mp2CZ8.roa
Signing time: Wed 20 Apr 2022 00:30:07 +0000
ROA not before: Wed 20 Apr 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18095 (0x46af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 20 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=94DEC2000CF756E4AE1E8868805797F0CA76099F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a4:95:e8:16:7c:87:44:54:25:10:87:9b:05:
2b:ca:b7:65:f4:57:95:7c:65:ef:a2:80:20:4e:81:
b1:89:f9:eb:50:e9:17:67:58:06:c9:96:71:e7:4b:
e9:a9:72:68:3f:bf:2b:8a:52:f7:45:b4:93:52:a8:
59:a1:7e:5f:40:88:30:fa:d4:72:5b:ca:d4:ee:28:
5d:8c:48:66:8a:fd:70:d8:d9:76:36:65:1b:d0:1f:
38:c0:2c:2f:9b:cc:55:be:35:4a:f4:d1:dd:da:d6:
65:8f:06:a4:4f:0c:1e:0c:99:4a:43:7d:06:4b:47:
32:2d:0d:19:b7:56:47:3a:bb:f9:7a:ff:8d:3f:2b:
2a:0a:c4:bc:91:99:a7:34:51:88:6e:26:00:66:e2:
cc:e0:2d:ec:88:e0:2e:5b:d2:6a:b1:68:f0:0a:19:
48:10:e2:e1:3b:04:6a:9f:d0:0f:80:c5:7e:b6:2e:
66:0b:28:7a:d3:13:39:21:0a:45:ad:da:c1:a4:8c:
ed:61:54:d9:7d:22:f1:01:69:a7:fa:99:a1:ba:79:
66:f7:a6:61:18:f0:8f:08:80:b3:8b:73:84:65:d0:
49:80:f4:82:0d:f7:e9:d7:28:1a:c5:e9:db:e3:2d:
1f:44:9e:4e:55:10:e0:a8:ae:1c:ea:36:4d:48:15:
50:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:DE:C2:00:0C:F7:56:E4:AE:1E:88:68:80:57:97:F0:CA:76:09:9F
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/lN7CAAz3VuSuHohogFeX8Mp2CZ8.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
45:da:27:18:c3:65:87:6f:98:c3:c9:3f:b9:34:65:98:f5:34:
cf:89:7d:92:be:94:e3:1a:d3:0d:cc:21:30:85:6a:96:cb:2d:
0f:3a:04:90:2c:ad:16:13:07:f8:63:f9:c4:2f:6e:2c:cc:13:
0b:dd:09:40:43:e8:38:e5:bb:56:26:3c:0d:e6:3c:52:bc:52:
fb:63:73:36:97:d5:74:22:cb:33:f4:57:df:88:33:9e:b1:8b:
a8:4e:90:f9:80:ae:a9:9c:d7:df:60:06:25:31:25:06:e5:96:
b8:a7:ad:ac:6d:e9:30:56:ce:cf:db:94:9d:7a:e4:cd:6c:93:
55:bb:02:84:72:4f:5e:52:98:34:3b:48:a2:d5:29:bd:1a:c4:
79:8c:d6:30:7d:c7:61:b5:31:a4:67:df:61:6e:d4:78:34:d2:
23:c8:ca:c4:8b:66:e9:54:7c:ec:47:c8:5a:e4:a6:e1:8e:f4:
7b:2d:dc:af:94:cf:6a:23:a6:82:38:d1:02:89:b4:7c:18:a3:
0b:70:7e:8d:7d:da:a5:59:f9:c4:1a:f4:44:cf:1d:b4:25:48:
f5:72:ca:0c:27:a7:b1:5c:a2:68:7d:6c:73:a6:86:71:d8:7e:
4c:e1:61:f8:09:b3:6f:46:92:a1:ba:b4:69:8a:cd:7a:d0:24:
3b:6f:d7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org