Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/nANoOkgQyzZXw5mRd1u10RG1Y7M.roa
File: nANoOkgQyzZXw5mRd1u10RG1Y7M.roa (raw, json)
Hash identifier: KeWUOBsy3MqKnatiY5vaxeJrFCiJs8qjK+4jjI5nfpI=
Subject key identifier: 9C:03:68:3A:48:10:CB:36:57:C3:99:91:77:5B:B5:D1:11:B5:63:B3
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4952
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/nANoOkgQyzZXw5mRd1u10RG1Y7M.roa
Signing time: Sat 04 Jun 2022 00:30:11 +0000
ROA not before: Sat 04 Jun 2022 00:30:11 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18770 (0x4952)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 4 00:30:11 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=9C03683A4810CB3657C39991775BB5D111B563B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:04:3a:8f:ad:a3:8e:c3:59:17:4d:4b:2a:83:
ed:8a:09:d3:45:1f:86:bf:f4:a5:f8:ff:ee:9c:bf:
09:2f:24:3b:e1:a6:62:ec:5a:03:db:e2:2e:f7:3a:
54:2d:13:5c:38:dc:3c:d8:83:ec:3a:41:05:58:7e:
0a:4b:90:fe:4b:3b:a7:71:fe:e3:62:a9:c5:e8:f3:
b8:76:49:34:ff:22:62:b6:44:db:aa:f3:5b:bf:77:
d0:55:e2:d2:48:32:93:83:d3:34:b1:21:44:d0:26:
0b:66:78:31:a0:3a:89:24:1b:40:8a:90:21:18:04:
75:bc:59:24:56:bc:5a:6c:ab:6d:f8:1b:61:43:4b:
38:75:89:8b:e3:e8:c9:3b:c1:0a:61:01:50:31:7d:
65:be:8b:59:3a:11:7c:45:52:5c:74:05:34:22:ba:
83:f8:cc:b8:a0:3f:19:ad:0e:e8:c3:3a:44:1f:5f:
62:0d:24:51:fa:ff:7e:f4:5e:24:f6:73:5a:3a:9a:
82:4b:8e:6a:5a:0b:6e:b8:26:c6:07:76:38:4a:2d:
a5:dd:99:17:2b:bd:9c:d5:8a:13:4b:e2:4e:2e:f8:
22:ee:79:12:ad:9f:47:fe:b1:bf:17:7d:fe:73:7c:
ca:7f:40:27:63:bf:f2:2b:73:d7:12:0a:9d:9a:63:
22:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:03:68:3A:48:10:CB:36:57:C3:99:91:77:5B:B5:D1:11:B5:63:B3
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/nANoOkgQyzZXw5mRd1u10RG1Y7M.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.12.0/24
Signature Algorithm: sha256WithRSAEncryption
05:35:80:fb:3f:87:3f:ae:bc:72:e3:07:e2:bb:7b:ce:de:c5:
74:e7:36:10:81:c5:40:13:f9:41:5c:4f:01:6a:e0:b6:c2:12:
61:3b:2d:82:1a:59:27:57:23:58:a3:02:ba:7b:30:cd:cd:c9:
3c:ee:fb:7e:83:c7:b9:3b:60:a3:63:8b:c8:bb:80:22:63:d7:
c6:2a:b0:4f:d1:de:99:d1:61:51:3a:87:db:e1:36:27:88:78:
16:4e:22:28:23:b2:a3:26:14:e3:85:44:e0:a2:fe:6d:a9:07:
83:d5:4d:fe:7b:d6:76:06:15:3f:86:de:fc:e7:b6:72:36:6f:
28:33:cf:ec:ff:61:5d:22:49:40:2f:41:d7:47:8e:70:89:1a:
dc:60:f1:30:22:19:9e:15:bd:78:3c:94:22:3b:6b:90:b6:be:
14:e1:9c:da:9b:fb:90:57:58:2c:f8:16:5b:6f:76:6e:f2:1a:
d9:57:53:fc:ea:fd:6c:ce:01:87:2c:bb:b1:e0:a6:fb:88:d4:
3b:77:9f:3a:e4:1c:d9:bc:11:b6:fe:4a:56:7e:d7:69:29:7e:
0a:ba:13:3b:83:dc:5b:0d:83:a7:29:2d:06:71:0b:25:d2:ed:
7a:00:52:12:44:f9:ab:5c:47:69:61:7d:32:a5:3e:72:ee:7e:
0a:ef:6a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org