Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/839eEe8NicsNgS6Us5UiINi1YWw.roa
File: 839eEe8NicsNgS6Us5UiINi1YWw.roa (raw, json)
Hash identifier: ZBMm240r63Q9xo5BKDNIIy8M8JfPg7XNBQOvJc7VQkA=
Subject key identifier: F3:7F:5E:11:EF:0D:89:CB:0D:81:2E:94:B3:95:22:20:D8:B5:61:6C
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 440E
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/839eEe8NicsNgS6Us5UiINi1YWw.roa
Signing time: Thu 03 Mar 2022 00:30:09 +0000
ROA not before: Thu 03 Mar 2022 00:30:09 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17422 (0x440e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 3 00:30:09 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=F37F5E11EF0D89CB0D812E94B3952220D8B5616C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:84:15:08:6d:a1:37:ab:94:29:f1:e7:73:dc:
34:59:79:6b:de:7d:fb:24:bb:d8:3f:cb:09:34:33:
c4:0c:23:14:27:7f:f6:ea:64:51:ec:4d:c0:4e:be:
90:1e:f8:ad:68:15:c5:d4:0a:16:7a:e5:f6:9f:d6:
4e:f8:28:6d:46:d8:8f:8a:d7:62:ad:8d:3f:ce:38:
4e:b2:0a:9a:f3:dc:57:83:da:f1:80:4b:bb:03:44:
6b:16:0c:6a:fe:16:46:4b:86:6e:16:0f:89:6a:81:
01:f7:11:aa:97:61:92:5d:c3:3f:bc:af:cf:e9:3e:
5a:f6:c8:2a:b7:1f:e8:78:c3:56:00:d0:07:bb:77:
70:9c:05:b1:f2:a3:77:64:41:8c:e9:53:61:e1:25:
af:ec:09:10:d7:e3:dd:b6:df:70:7b:6a:ee:c0:7e:
ea:0f:e5:c0:e1:67:30:99:97:e5:91:c4:bd:ae:eb:
a0:0c:e7:08:70:f5:ff:93:75:e8:02:5e:1e:87:c7:
94:cf:b9:26:48:d1:0e:d7:b6:f5:df:4e:0b:07:0c:
b4:c8:d9:46:84:19:1c:fa:bb:9f:eb:a0:5d:4c:52:
a0:2f:b2:39:b1:78:fc:7f:8a:ed:41:23:29:3f:b6:
46:55:93:99:c3:cb:32:57:78:f1:cc:e0:d6:85:fb:
c1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7F:5E:11:EF:0D:89:CB:0D:81:2E:94:B3:95:22:20:D8:B5:61:6C
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/839eEe8NicsNgS6Us5UiINi1YWw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
43:ff:73:2c:0d:55:c2:81:9a:e6:20:ca:3a:a0:ce:f4:0d:03:
92:dd:79:3e:b9:93:4e:ef:19:7a:67:59:3c:47:85:95:13:a1:
fd:2e:67:2d:84:7a:88:94:9e:28:61:57:1f:50:ba:ea:f5:af:
0b:e3:b6:ca:32:a8:4a:7e:a5:7a:ac:46:0b:04:28:9d:b6:a4:
4f:38:39:aa:d7:ac:fa:97:c1:1d:99:7b:ed:f8:53:d8:3a:af:
ce:7f:c5:f1:a3:2f:a9:99:95:5f:5f:5d:aa:71:17:08:af:2e:
81:e1:ce:a9:7b:b2:7f:82:20:75:b1:d5:92:3c:20:a7:54:b6:
75:8a:48:c7:d4:4c:6f:72:f0:dc:d8:d7:bc:6c:58:fb:92:62:
c4:1f:77:ba:c8:d2:fb:e6:6c:f6:35:25:e5:f3:62:30:28:81:
e5:12:f3:a9:43:ca:14:86:51:be:e2:f4:01:7a:75:05:96:07:
68:f5:6e:44:b7:de:68:f9:2c:9b:d7:00:13:54:76:15:ca:01:
f4:d5:1c:e9:e5:a0:18:b1:67:ae:73:66:ef:3d:8c:cf:7a:73:
bd:2a:a1:9d:8a:d3:fa:4b:bb:31:f6:79:f0:3a:ba:d7:c6:99:
30:2b:39:ff:3a:99:70:b3:8d:ef:fd:ea:8b:32:0f:8a:c9:9b:
1d:02:fe:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org