Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/GUlv06BEnhXnPDV7Qmf8j0giTL0.roa
File: GUlv06BEnhXnPDV7Qmf8j0giTL0.roa (raw, json)
Hash identifier: uBLdVDpXW+GWAm01JFnxYg6He/TwCEvzrvJLyQkGHhc=
Subject key identifier: 19:49:6F:D3:A0:44:9E:15:E7:3C:35:7B:42:67:FC:8F:48:22:4C:BD
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 44B3
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/GUlv06BEnhXnPDV7Qmf8j0giTL0.roa
Signing time: Tue 15 Mar 2022 00:30:08 +0000
ROA not before: Tue 15 Mar 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17587 (0x44b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 15 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=19496FD3A0449E15E73C357B4267FC8F48224CBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:4c:f7:5a:65:22:18:6f:43:cf:8b:95:5a:d7:
80:62:d7:c0:dc:1c:45:6f:c0:3e:56:aa:8e:d6:87:
c5:66:0f:7b:ef:83:5d:a8:88:ec:7a:93:87:7e:53:
d5:9c:01:11:ce:5d:cd:94:4f:68:c6:3e:19:14:8c:
a2:e5:d3:df:25:f9:97:62:0e:e4:ce:9f:b4:ed:81:
00:5e:37:e9:ff:c2:81:2b:b9:0e:95:66:7d:c3:2f:
65:fa:5a:44:37:ca:88:f1:c0:9a:45:77:c4:fc:08:
f4:78:0f:6d:bb:96:c9:e3:6b:88:3c:7e:e7:14:2f:
48:64:1b:96:c3:d0:bd:f7:be:61:bf:d5:b0:05:04:
6d:64:80:f7:c4:20:9e:a8:bd:fa:f2:a8:d1:76:02:
b0:9e:c5:b0:f9:cb:a4:01:02:8c:c4:aa:ec:4a:5e:
a8:32:85:37:fb:51:f1:13:3e:fc:54:33:bb:b4:b9:
e3:e9:23:e7:e7:de:16:d8:dd:88:e3:5e:79:e9:99:
15:43:bb:f0:06:00:0d:80:04:75:38:6d:f4:45:9d:
ab:f5:b7:d1:23:df:07:3a:30:80:f9:0d:90:3c:b1:
61:28:fa:a2:b6:43:18:cb:3c:bb:cc:4a:4d:88:28:
05:70:83:a3:64:2e:66:8b:67:ff:bd:5e:f2:34:52:
83:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:49:6F:D3:A0:44:9E:15:E7:3C:35:7B:42:67:FC:8F:48:22:4C:BD
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/GUlv06BEnhXnPDV7Qmf8j0giTL0.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
25:f2:07:58:ec:66:b4:61:7b:71:62:76:18:74:cb:33:fd:7a:
4a:7b:57:2a:28:50:a5:5c:b2:de:2b:8f:ba:f1:22:54:41:9a:
8e:e4:9b:36:8e:fe:f8:f7:90:12:e3:aa:7f:df:5f:29:3b:a7:
42:b1:92:25:d7:0b:5a:32:3b:94:76:14:09:0c:f9:44:05:cb:
d9:23:2e:3d:5c:85:c2:7b:1b:04:72:30:94:ff:89:bb:bc:59:
cf:3e:31:a7:45:e6:8f:08:2f:ab:bf:4c:d4:35:3a:f8:e3:50:
bd:6b:61:42:7e:51:b2:3e:fc:88:ce:b5:39:dc:fa:a9:61:81:
ab:35:ad:47:ee:2b:32:7c:d3:ac:76:7d:c4:13:a9:22:a3:7a:
5a:20:25:64:5e:e7:10:b1:e8:c6:bc:62:41:86:11:13:c1:7d:
60:87:5d:ac:14:ba:a5:87:0a:47:c2:7a:76:8c:de:5b:c1:c5:
6b:78:75:eb:1b:54:58:1f:48:2a:0b:02:42:07:10:7b:2a:3e:
8c:77:59:23:50:91:fc:dc:30:98:70:8c:75:61:41:0c:e8:aa:
f8:ba:19:39:b6:09:db:d1:59:66:2e:c5:d8:a6:f9:37:e7:61:
2e:93:bc:2b:17:fe:83:8e:81:cd:bd:41:46:d2:8b:d5:59:ae:
f5:27:a4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org