Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/Epd4G-AFgojMrR_6G5ly3mkn3_U.roa
File: Epd4G-AFgojMrR_6G5ly3mkn3_U.roa (raw, json)
Hash identifier: TGPNriH5Nhk8mh2o1y3l4/U3JoWLpabEoV3i1S+qaHc=
Subject key identifier: 12:97:78:1B:E0:05:82:88:CC:AD:1F:FA:1B:99:72:DE:69:27:DF:F5
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 47AB
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Epd4G-AFgojMrR_6G5ly3mkn3_U.roa
Signing time: Sun 08 May 2022 00:30:08 +0000
ROA not before: Sun 08 May 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18347 (0x47ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 8 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=1297781BE0058288CCAD1FFA1B9972DE6927DFF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:08:16:29:38:62:9a:e8:8f:3a:3d:fb:f7:9a:
d1:ce:eb:4b:00:50:36:f9:74:1e:77:ec:53:02:50:
da:c3:95:8d:c5:97:74:b5:47:c3:e5:ba:73:0a:57:
ac:6e:6d:15:e4:06:65:d1:2e:6f:51:52:21:f8:fd:
c0:4c:0b:e5:86:6c:85:58:e2:67:5a:e3:28:42:00:
94:74:10:53:be:71:44:cc:85:83:af:2b:fb:45:1d:
9b:4d:19:8d:28:69:dc:3d:32:52:43:e8:22:25:78:
01:24:1d:55:64:f7:23:be:ad:68:ce:bf:88:58:70:
3d:19:2c:8f:01:7e:f9:0a:4c:e8:33:78:47:5f:61:
55:06:a1:a5:65:94:af:09:ff:20:cd:f3:4f:e6:fb:
6c:9f:c8:b8:b0:6e:33:c1:b0:8d:c9:27:59:36:be:
66:1f:65:24:92:1c:f2:f6:86:ef:ea:c6:34:46:d6:
4b:6d:ac:7f:7f:3a:30:69:8b:ec:8f:8d:88:fc:a0:
bf:e9:c2:11:fd:dc:75:c8:35:73:a5:ba:63:5e:8f:
46:e3:dd:29:62:f2:45:4c:2b:cc:b3:c3:92:4b:a2:
9b:60:f1:4f:84:8f:85:88:fc:0c:5a:6a:12:39:d5:
56:b4:78:6c:57:de:4a:49:6a:d2:a3:21:92:d0:bb:
bf:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:97:78:1B:E0:05:82:88:CC:AD:1F:FA:1B:99:72:DE:69:27:DF:F5
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Epd4G-AFgojMrR_6G5ly3mkn3_U.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:c3:b1:c6:bc:26:73:61:c6:a1:89:92:a8:ce:24:fd:6b:14:
2b:53:f9:ad:1f:3a:83:49:52:3c:df:49:01:8e:16:85:dd:8a:
c3:45:a4:98:b1:ae:8d:6e:17:8a:3f:36:43:f7:af:e2:54:fc:
92:3c:38:38:3c:5e:a3:c1:7a:bd:21:f6:fc:3c:d1:9b:5f:f3:
c1:cb:d7:ef:a2:d0:9b:12:44:1c:29:99:07:02:44:37:74:9d:
af:47:a4:42:ac:2b:1a:65:85:90:64:15:7d:e8:73:25:bf:e5:
5e:37:cc:d5:a3:a7:cb:f2:0f:64:73:34:ec:fa:86:fd:54:09:
8e:03:8c:17:ab:b3:d4:e3:0c:70:aa:f4:ed:83:d5:af:1d:80:
ef:a0:d3:41:0e:8d:aa:fa:ba:af:e8:30:9a:56:e5:0e:9f:bf:
1c:f2:17:eb:2f:f8:5f:f3:ca:fc:17:9f:bf:ce:48:9f:f8:cb:
8d:8e:73:9f:75:51:dd:00:d3:12:f7:df:12:b6:7c:9e:d7:d3:
4f:6c:4d:3b:10:35:75:86:70:4d:ba:a1:21:9d:74:7f:3a:29:
ad:e7:53:27:74:f2:b5:e5:8c:af:e2:72:bc:cf:a0:a4:f3:f1:
cc:b9:b1:1a:92:2b:9f:dc:4d:d0:d3:06:0e:3f:49:ac:17:7c:
5c:dc:62:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org