Route Origin Authorization
$ rpki-client -vvf cc.rg.net/rpki/RGnet-cc/iL-SKgQFIlRKg7uQTITWh_XGmHQ.roa
File: iL-SKgQFIlRKg7uQTITWh_XGmHQ.roa (raw, json)
Hash identifier: q9xhfLu9XOBBg96XLo0o7DSPBegeA2KwEhQruvs+E9I=
Subject key identifier: 88:BF:92:2A:04:05:22:54:4A:83:BB:90:4C:84:D6:87:F5:C6:98:74
Certificate issuer: /CN=818E5E643C3DA212D2022D669714B087581515C6
Certificate serial: 38B9
Authority key identifier: 81:8E:5E:64:3C:3D:A2:12:D2:02:2D:66:97:14:B0:87:58:15:15:C6
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/gY5eZDw9ohLSAi1mlxSwh1gVFcY.cer
Subject info access: rsync://cc.rg.net/rpki/RGnet-cc/iL-SKgQFIlRKg7uQTITWh_XGmHQ.roa
Signing time: Fri 17 Sep 2021 01:10:32 +0000
ROA not before: Fri 17 Sep 2021 01:10:32 +0000
ROA not after: Fri 01 Jul 2022 01:01:02 +0000
asID: 3130
IP address blocks: 198.180.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14521 (0x38b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=818E5E643C3DA212D2022D669714B087581515C6
Validity
Not Before: Sep 17 01:10:32 2021 GMT
Not After : Jul 1 01:01:02 2022 GMT
Subject: CN=88BF922A040522544A83BB904C84D687F5C69874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:29:ff:b1:f0:0e:d5:4f:e5:70:64:7a:18:17:
0e:c6:5a:96:b7:59:da:0e:9a:a0:dd:f0:f5:92:59:
5f:a8:81:53:f0:ee:80:fc:0e:ba:e1:48:39:2a:a5:
8d:c0:94:86:9b:1d:e4:80:8f:b2:d9:60:eb:85:5d:
71:e0:81:8a:51:4d:c9:6b:18:d6:56:e3:79:f8:ca:
3c:b1:20:9b:98:21:5a:6e:38:71:74:60:6e:36:09:
0c:d5:c9:93:37:52:09:09:56:3a:e9:8c:a0:e9:62:
4e:9d:39:4e:b6:2b:ff:aa:c5:58:ca:0e:d9:df:c3:
fe:5f:1f:dc:c2:0b:39:2e:d3:f0:42:b5:d5:01:25:
c8:de:9b:7c:6d:21:4c:a5:ce:f7:65:a3:2c:81:80:
2a:95:2d:38:5c:69:20:d1:5d:8e:1d:36:19:19:ae:
2b:17:f7:56:76:5d:65:44:30:cb:23:56:eb:a8:34:
d0:eb:1f:36:e7:17:39:6f:23:f0:47:68:4e:cd:89:
09:d8:2b:1d:c1:27:a3:d2:22:dc:1d:ce:b4:d5:b5:
40:69:13:e7:9e:bd:f6:58:47:20:ed:58:62:53:d6:
55:a6:b4:51:20:3e:a4:3a:26:a4:3d:2d:3d:88:ac:
dd:f4:7f:f8:4c:4f:66:f2:30:d9:26:c6:a4:e2:10:
33:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BF:92:2A:04:05:22:54:4A:83:BB:90:4C:84:D6:87:F5:C6:98:74
X509v3 Authority Key Identifier:
keyid:81:8E:5E:64:3C:3D:A2:12:D2:02:2D:66:97:14:B0:87:58:15:15:C6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cc.rg.net/rpki/RGnet-cc/gY5eZDw9ohLSAi1mlxSwh1gVFcY.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/gY5eZDw9ohLSAi1mlxSwh1gVFcY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://cc.rg.net/rpki/RGnet-cc/iL-SKgQFIlRKg7uQTITWh_XGmHQ.roa
RPKI Notify - URI:https://cc.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
198.180.153.0/24
Signature Algorithm: sha256WithRSAEncryption
10:04:0e:cc:66:39:0b:44:8c:a4:0f:ab:02:92:1e:82:10:47:
24:0b:a8:cb:85:83:67:c7:f9:1c:a5:e7:0a:f1:c3:7a:7e:18:
8f:a7:31:6c:45:2d:59:7a:58:b6:18:64:98:93:97:a0:0e:2d:
c6:9e:7a:5d:99:44:d5:69:b9:05:a7:c1:6c:e1:38:4f:5b:71:
dd:e6:aa:be:ca:8c:3a:22:5d:48:32:3f:ca:5e:71:0e:24:bb:
77:1d:91:90:20:eb:85:e9:e1:2b:93:98:ed:1a:79:e9:67:f9:
66:97:15:b3:57:2a:cf:c9:8e:31:a4:b8:4f:07:81:a3:e9:70:
03:8d:fe:15:4f:34:4d:0f:5d:9f:5b:9f:80:e6:75:d6:01:0b:
94:1c:70:bd:94:cd:dc:11:41:c2:66:4c:86:3d:66:e7:64:fa:
66:0d:32:90:f1:0b:61:3d:45:a9:86:6b:ef:78:bb:2f:b6:08:
ed:70:90:ed:e5:69:7f:fd:8e:2f:66:94:03:16:ee:15:83:01:
d0:24:83:8c:8e:6a:14:cc:e6:b0:32:bf:09:34:99:ac:a0:3e:
e9:7f:b1:5b:e1:f6:ce:2e:57:6a:65:fd:86:de:8e:dc:47:8a:
75:17:52:60:e5:92:bc:a1:0b:06:e6:3c:05:83:a6:13:a3:e8:
18:28:bc:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:53 2023 by rpki-client on console-ams.rpki-client.org