Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/uK9aJGEsrjQQ-Sq0mPzt6DQGE4g.roa
File: uK9aJGEsrjQQ-Sq0mPzt6DQGE4g.roa (raw, json)
Hash identifier: 801ybNM7XSnc/6C9x9g4eRf+IMvSX6YZQ2UDUWZQ3BE=
Subject key identifier: B8:AF:5A:24:61:2C:AE:34:10:F9:2A:B4:98:FC:ED:E8:34:06:13:88
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 490F
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/uK9aJGEsrjQQ-Sq0mPzt6DQGE4g.roa
Signing time: Wed 01 Jun 2022 00:30:14 +0000
ROA not before: Wed 01 Jun 2022 00:30:14 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18703 (0x490f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 1 00:30:14 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=B8AF5A24612CAE3410F92AB498FCEDE834061388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:34:2e:89:3b:24:09:c7:d2:11:80:3c:4d:42:
0b:3c:e2:e2:d7:4b:58:42:24:c2:0d:20:96:5d:70:
21:a6:ad:69:97:b7:2b:74:05:55:76:87:6e:c4:26:
7e:b4:43:e5:6b:0e:58:98:0c:b0:35:a1:86:22:92:
dd:64:6b:9f:c4:57:8c:53:fd:ab:ee:6a:1f:3b:c7:
0a:9e:51:12:de:90:93:f4:d3:1a:ab:2e:ac:46:81:
6e:12:ab:e6:41:49:75:68:8d:95:3a:bc:1e:c8:be:
2e:25:f2:7c:3b:00:29:2f:18:22:1b:74:23:8b:90:
d8:0f:59:fa:20:48:18:39:8e:f6:91:dc:70:27:18:
44:ee:3f:fc:e0:8b:11:f9:6d:fa:8f:93:7d:59:1d:
f2:4e:8f:66:d5:da:04:08:d7:92:fa:ac:3b:1e:af:
07:c0:63:06:4a:80:77:ea:41:e7:ce:20:c9:ed:32:
fe:61:25:76:e5:ee:f6:07:12:74:4e:3b:00:ce:44:
81:34:70:ef:ad:32:63:10:61:93:69:f3:53:c9:32:
62:65:98:41:9f:b3:f0:de:b2:09:1e:3e:4f:06:3d:
a3:c8:c5:e2:39:f9:80:5b:aa:fb:8c:f0:8f:a1:9f:
20:35:2e:c1:3f:c2:58:c2:97:37:3e:9a:75:85:a0:
4f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AF:5A:24:61:2C:AE:34:10:F9:2A:B4:98:FC:ED:E8:34:06:13:88
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/uK9aJGEsrjQQ-Sq0mPzt6DQGE4g.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
56:d1:ac:c3:3d:0d:c4:c9:b6:b9:19:d3:78:e7:05:98:ec:1c:
ed:51:ee:bd:6d:95:ed:e5:cf:45:c0:93:60:7b:57:9a:91:cb:
af:8d:dc:7c:ef:86:58:2a:a6:e4:37:14:7f:57:9a:7a:0e:bf:
82:fb:c2:a1:b7:ef:c9:04:03:6c:5d:20:54:28:c1:8a:2d:77:
a6:35:96:64:50:62:31:2f:a3:3b:10:36:9c:cb:96:1c:a8:2d:
db:2e:87:f5:0d:10:0a:c4:7c:8f:f2:26:7a:e6:8a:b6:9c:d9:
8b:7f:2f:62:d1:98:ab:58:6f:cf:10:c2:48:c9:1e:d9:b5:4f:
a6:67:72:e3:7d:e5:d7:99:8c:c4:37:87:7d:3c:96:35:d1:62:
45:4a:6b:17:17:fd:75:c1:41:e1:17:20:10:63:09:33:2e:8e:
53:e3:2e:44:b6:fa:f3:c7:f0:5d:99:39:4b:9d:fb:4a:02:db:
a1:01:e2:dc:f8:e9:2a:77:92:32:88:53:9d:8d:90:22:e8:f4:
b9:7b:2b:86:6a:db:28:d6:c7:7d:b9:8e:69:35:2e:6e:21:85:
a8:df:99:3c:92:db:14:63:1f:33:5f:6a:93:bd:fb:6d:28:55:
e6:07:2f:0b:2a:30:a5:76:e0:9a:14:2b:39:2b:64:b6:6d:e0:
7d:6d:8b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org