Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/b-JMobYS0x4p_d6q7EQkuqNPFPs.roa
File: b-JMobYS0x4p_d6q7EQkuqNPFPs.roa (raw, json)
Hash identifier: qh4oaxoE8LrxfpaoZLoowT27MP5akSnXY26OsGPjkU4=
Subject key identifier: 6F:E2:4C:A1:B6:12:D3:1E:29:FD:DE:AA:EC:44:24:BA:A3:4F:14:FB
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4713
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/b-JMobYS0x4p_d6q7EQkuqNPFPs.roa
Signing time: Wed 27 Apr 2022 00:30:11 +0000
ROA not before: Wed 27 Apr 2022 00:30:11 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18195 (0x4713)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 27 00:30:11 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=6FE24CA1B612D31E29FDDEAAEC4424BAA34F14FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e6:90:ae:4f:cd:99:f7:ac:aa:7f:74:fa:3c:
d9:77:32:25:2c:4e:ce:fd:bf:07:15:bc:a6:38:64:
cb:35:b8:b8:a3:9c:aa:f7:b1:2f:e0:89:c4:cf:96:
0a:dd:f7:b2:a2:0e:39:bb:e3:09:5d:fa:ed:b1:cb:
d8:f1:8d:82:1f:75:c4:82:76:60:47:ab:30:36:29:
75:6f:06:12:c6:81:71:cd:88:a8:55:21:19:f6:55:
e1:29:ea:88:ff:f4:05:39:f3:74:21:b9:b8:f1:d4:
4b:11:47:e5:1f:37:d1:3e:5b:2f:3e:12:d0:d3:f0:
64:77:c4:6b:52:9a:d1:87:ff:2e:2e:4b:be:f3:63:
f2:4c:68:91:6b:32:9c:6b:7a:03:5c:c3:e3:41:df:
90:0e:1f:8a:59:f1:37:fe:68:0f:b4:68:60:77:9e:
83:cb:5a:55:c0:4f:a5:3e:3a:05:99:42:53:4f:23:
01:3b:f9:aa:71:ab:e5:74:32:b0:26:b7:33:88:70:
17:4b:5e:31:35:bf:e1:5e:94:57:37:03:52:05:a3:
7e:6e:d0:59:ba:54:02:b9:86:ee:f5:b1:5d:c7:4a:
03:2e:b8:4e:5b:f1:26:d1:fe:73:e1:50:7c:d4:a9:
d6:ed:0b:c5:98:a6:a2:32:27:92:3b:8d:00:03:57:
40:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E2:4C:A1:B6:12:D3:1E:29:FD:DE:AA:EC:44:24:BA:A3:4F:14:FB
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/b-JMobYS0x4p_d6q7EQkuqNPFPs.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
90:79:7e:05:d8:20:9b:f2:03:ff:a8:88:bb:3f:97:81:3c:17:
db:07:ce:cc:7d:1f:fb:64:a1:16:12:b7:e4:61:b0:52:c5:2d:
71:d1:d0:d6:2e:2a:6d:a0:67:ea:9a:8b:33:ab:06:76:d6:9d:
af:78:70:ce:b6:08:c1:0a:63:88:8f:77:2b:d8:3a:ae:a7:bd:
5e:e2:ba:f5:05:2d:ad:18:a0:2e:ec:7c:bf:4d:25:bb:bf:27:
ea:43:0a:c1:37:55:0a:a3:cc:70:33:1d:ee:be:80:f4:24:6b:
32:3c:7a:07:a3:ec:23:51:33:9e:b8:79:39:08:7e:c7:43:d7:
94:8d:0e:06:99:0f:0c:22:73:ab:fb:62:cf:03:c3:ec:f7:8a:
a3:a2:f6:df:16:c5:ec:bc:62:15:94:9d:b1:e0:5d:50:02:d3:
e7:07:ac:f0:17:86:6e:bb:2e:39:3f:d7:a0:1d:d8:06:95:4c:
27:88:73:85:c5:b1:73:a9:a6:02:01:20:0e:10:7f:a4:7b:04:
15:e5:f2:a1:91:44:e6:c1:77:fe:95:4c:37:e5:9d:93:26:b8:
ec:7d:80:3d:50:53:a3:27:84:68:0f:45:6d:f1:cd:24:3c:2d:
74:62:de:be:1f:9f:59:17:94:69:b6:c6:b5:e6:d2:03:1d:bc:
ff:0a:32:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org