Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/42Gi1u46rwnhB2gk5Xc9DuoOD_E.roa
File: 42Gi1u46rwnhB2gk5Xc9DuoOD_E.roa (raw, json)
Hash identifier: YucnUsi1ggKBeQ72aWQU7Au4Bb+PFeiu/n9v8AK5Y4c=
Subject key identifier: E3:61:A2:D6:EE:3A:AF:09:E1:07:68:24:E5:77:3D:0E:EA:0E:0F:F1
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4607
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/42Gi1u46rwnhB2gk5Xc9DuoOD_E.roa
Signing time: Fri 08 Apr 2022 00:30:09 +0000
ROA not before: Fri 08 Apr 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17927 (0x4607)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 8 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=E361A2D6EE3AAF09E1076824E5773D0EEA0E0FF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:93:38:fb:a5:c9:95:40:5d:32:c9:87:a6:31:
f4:ee:83:21:b8:17:22:0b:85:42:63:e8:a0:90:40:
ef:02:3c:01:e8:02:65:42:5f:34:3f:00:bc:3e:a7:
02:32:e6:97:11:48:5b:ec:72:82:31:a7:6f:97:6e:
89:51:a6:b3:c5:cd:08:77:4d:38:4f:ac:56:d3:e8:
ca:92:75:6f:b1:cb:45:0e:e7:bd:af:14:16:54:07:
3d:7c:de:2d:38:b8:08:7a:3a:0e:da:32:35:ff:54:
18:e1:0d:4e:97:8a:a1:3d:64:a4:85:60:ed:89:da:
6b:4f:02:01:2f:3f:1b:c8:2f:cf:06:45:e5:12:1e:
73:a4:b6:ca:f0:74:41:97:6c:6f:67:53:20:b2:24:
60:79:df:f8:3b:60:89:e2:1e:d2:4f:a6:5e:52:cf:
a9:85:9d:b9:29:01:e9:ef:c9:a8:5c:5d:dc:de:91:
07:ff:96:2a:dc:07:9d:74:d3:95:57:10:0a:13:5d:
13:9a:3a:5d:f0:e5:39:2f:09:ed:ce:8d:ff:1d:90:
4f:cf:c6:1a:25:0c:74:1e:46:fb:42:24:f6:e9:5d:
ef:e9:44:f0:70:52:40:00:11:24:67:e8:b8:1b:04:
53:d9:a5:2d:37:55:6a:45:02:9d:f7:91:de:4f:e6:
94:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:61:A2:D6:EE:3A:AF:09:E1:07:68:24:E5:77:3D:0E:EA:0E:0F:F1
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/42Gi1u46rwnhB2gk5Xc9DuoOD_E.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
97:f4:10:dc:f9:e5:f4:f3:48:13:93:e5:74:8b:de:6c:e8:99:
ff:71:8b:ab:b9:bf:8d:e0:bc:0e:71:4b:84:65:f2:21:e9:13:
e5:d0:af:58:fd:71:e9:e3:65:01:9a:b4:b2:04:bf:1c:b7:02:
28:8b:8c:e8:b1:5c:72:d2:38:2d:94:c0:13:a4:67:58:76:2f:
f3:18:c7:e2:8d:62:46:25:68:db:cf:1e:95:51:39:9b:f4:40:
1b:80:99:e6:e7:5b:e6:88:99:a9:f2:96:1c:06:b3:cf:b3:ec:
b7:66:b4:c2:16:f7:f8:c5:3c:07:0d:19:a9:18:25:ab:1f:62:
12:39:75:bf:18:b2:b4:27:16:ff:cb:9e:50:a1:88:19:27:b6:
a7:2a:c2:70:33:d1:a7:eb:c5:9b:c3:1d:e5:03:ad:4f:29:eb:
39:f1:f8:7c:05:35:33:8a:d4:c7:b2:d0:79:27:b9:8a:f2:15:
55:de:cb:46:26:6e:26:a4:eb:d4:a2:81:50:00:a8:0c:9b:20:
35:fa:14:cf:28:bc:9c:22:bb:dc:36:57:05:5e:22:88:34:a5:
df:03:11:dc:27:6c:b7:1d:d3:82:5d:00:ba:06:ec:b7:ba:6a:
c5:00:7a:94:37:82:8a:e1:52:2f:b3:7f:64:cb:15:3f:01:41:
ab:9c:a8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:52 2024 by rpki-client on console-fra.rpki-client.org