Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/t9sSRWyfE1rezRHK_LtgiA5l4g0.roa
File: t9sSRWyfE1rezRHK_LtgiA5l4g0.roa (raw, json)
Hash identifier: wwsRKgLFSyOtNBan9tV7BHqFWqO7nHhWg3nIkvO4xWc=
Subject key identifier: B7:DB:12:45:6C:9F:13:5A:DE:CD:11:CA:FC:BB:60:88:0E:65:E2:0D
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 44DD
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/t9sSRWyfE1rezRHK_LtgiA5l4g0.roa
Signing time: Fri 18 Mar 2022 00:30:09 +0000
ROA not before: Fri 18 Mar 2022 00:30:09 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17629 (0x44dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 18 00:30:09 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=B7DB12456C9F135ADECD11CAFCBB60880E65E20D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e4:47:70:ea:17:57:a8:b2:06:16:ae:e0:19:
be:44:7c:5e:cd:97:f3:62:be:2c:d5:a0:a3:28:20:
ae:bd:ee:8e:b1:e4:3d:0e:54:42:96:25:63:a9:eb:
60:cd:fd:05:9e:17:b2:87:84:85:d1:cb:88:a2:b0:
7f:9d:3d:32:75:60:99:e5:92:3d:49:14:38:77:c1:
af:0d:63:c4:14:37:b5:d9:de:1b:e9:c5:65:47:07:
25:cf:1a:66:0b:74:11:4d:9c:2b:94:50:3e:7b:0d:
97:04:b4:3c:36:f0:f9:bb:8a:6a:5f:8c:9a:16:b3:
32:dc:56:93:42:48:54:65:84:65:7c:c6:10:2a:d1:
ba:94:02:73:db:6d:98:80:6a:d7:5e:ea:8d:ad:c1:
1f:fa:2c:02:25:4f:60:72:2f:03:b0:dc:cb:00:90:
60:e8:7b:12:9a:eb:14:29:02:43:8b:24:81:62:69:
9c:a2:2f:61:39:07:5c:a8:58:9b:c1:07:01:c5:33:
9f:2c:35:48:17:51:0e:15:18:38:37:fc:19:50:e0:
1f:8b:7f:2b:1f:90:19:a4:53:e8:5b:6f:ed:93:26:
40:89:bc:5c:c9:4f:51:4c:f1:8d:1d:ab:22:55:6f:
32:7c:33:08:0c:5f:aa:01:76:ca:f2:42:40:98:84:
52:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:DB:12:45:6C:9F:13:5A:DE:CD:11:CA:FC:BB:60:88:0E:65:E2:0D
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/t9sSRWyfE1rezRHK_LtgiA5l4g0.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
51:7c:93:72:5c:df:5d:19:c3:41:36:1c:74:17:ca:91:3e:65:
f6:cc:8e:4f:74:98:57:67:ee:ba:95:e6:48:36:0c:86:a3:e5:
6d:51:dd:d4:24:e4:36:33:39:25:0f:7d:5a:3c:54:f7:39:1f:
a7:55:69:c7:1c:ec:11:fa:c2:7e:76:ee:87:57:6e:a7:d5:13:
c2:ca:16:8a:21:8c:79:42:7f:77:ba:51:f2:19:71:82:71:65:
0c:e7:ca:3e:08:65:19:3b:50:2b:f2:b2:10:16:a9:49:b8:74:
b4:2e:06:2e:ab:ed:41:86:ee:cd:57:1c:c5:54:1d:d4:42:d7:
d7:0b:f1:82:1f:18:36:f9:0b:27:a1:23:43:b7:c5:ae:4d:63:
6a:dd:01:1f:54:80:d1:6f:e5:28:ef:a5:dd:50:79:2b:bf:eb:
78:23:9d:19:22:c9:57:aa:2d:63:ee:18:51:01:ce:75:36:d7:
aa:ec:bc:a1:af:50:a5:2c:5d:19:73:19:e2:b9:11:12:6c:12:
1e:f4:9f:c9:ea:23:44:a3:7b:a7:12:56:43:77:59:6a:5c:7c:
a5:80:44:4a:ec:6f:bf:7d:3b:1f:8d:00:7a:11:f0:ca:54:32:
8c:95:a6:5b:47:b7:2c:bf:1c:8c:db:b6:ac:95:a7:08:9f:13:
20:a1:d0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org