Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/bGKaXw6Ur2_Dxj4iq-exPkSMiWw.roa
File: bGKaXw6Ur2_Dxj4iq-exPkSMiWw.roa (raw, json)
Hash identifier: +Q9lvEHOIzVvYAoXfjvGOzqUFgbd8advwQJ7pHGCVZ8=
Subject key identifier: 6C:62:9A:5F:0E:94:AF:6F:C3:C6:3E:22:AB:E7:B1:3E:44:8C:89:6C
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 47FF
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/bGKaXw6Ur2_Dxj4iq-exPkSMiWw.roa
Signing time: Sat 14 May 2022 00:30:07 +0000
ROA not before: Sat 14 May 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18431 (0x47ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 14 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=6C629A5F0E94AF6FC3C63E22ABE7B13E448C896C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f6:50:6d:c8:29:f4:8f:2f:41:74:71:30:78:
22:1d:0c:44:59:39:16:2a:eb:13:5e:0b:b3:91:d3:
d6:c0:6e:65:38:08:1d:f8:45:79:5f:cd:4d:5d:b3:
c6:d5:a5:03:cc:ab:37:bb:7f:b2:e6:61:53:eb:bb:
95:a4:30:3f:ab:4d:d0:29:7c:82:4d:52:fd:37:d9:
05:70:d2:c8:a3:fd:b6:a1:97:6a:1c:05:c9:d2:bd:
bb:ba:f0:92:e4:c1:23:c3:e9:61:5b:f8:a9:a9:91:
a3:81:65:ad:a9:df:24:9d:40:ba:5c:ad:0f:62:52:
c1:35:cd:a3:79:00:86:2d:d8:45:f7:63:4f:4a:00:
bf:51:78:fb:dc:3b:f9:be:05:7c:7b:47:0e:03:83:
38:ee:cb:24:c4:2d:eb:33:96:70:45:e8:a4:72:36:
26:89:fb:c2:d1:52:f5:17:d4:68:36:7a:7a:e5:49:
d6:e0:49:a6:d1:02:0b:f2:20:0b:85:f4:3e:44:e9:
1a:1a:dc:87:a8:aa:80:77:53:0c:04:10:47:14:60:
b1:bb:49:b2:84:d4:d6:fe:00:db:be:fc:e3:5c:81:
67:64:29:46:9a:72:b2:06:f4:ca:68:92:4d:92:24:
03:54:bc:c7:d0:70:d7:b3:7e:12:cc:9e:ad:ae:01:
26:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:62:9A:5F:0E:94:AF:6F:C3:C6:3E:22:AB:E7:B1:3E:44:8C:89:6C
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/bGKaXw6Ur2_Dxj4iq-exPkSMiWw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:17:ca:47:4e:23:e2:43:d1:b9:d7:7d:a3:55:48:0f:48:8c:
70:14:8a:70:53:27:09:df:a0:11:98:2e:39:4d:67:61:af:52:
3d:d7:ae:fd:6c:83:16:f0:b8:93:f5:64:d0:cb:11:9e:25:5a:
7f:16:08:5f:c9:cb:13:f4:12:27:00:d9:1a:64:60:47:fc:4c:
50:65:47:81:a7:ea:01:e3:66:f0:7d:85:6b:f1:91:5b:28:64:
b9:f0:6d:83:46:4d:6b:61:b2:66:dc:ff:a0:32:a6:ab:3a:cd:
57:d7:32:b8:d3:f2:7c:de:8e:27:6f:2d:0b:d6:fe:c8:88:58:
ef:dd:c6:0d:4c:fb:0c:4b:90:72:a2:7e:e6:ab:f3:37:b5:40:
44:78:4b:17:d9:8a:c4:1f:99:d0:ba:33:ab:c9:af:2e:1c:ef:
57:d3:e9:75:b9:d8:39:de:fb:aa:1a:5f:b1:09:c6:47:b5:4c:
17:ef:6c:56:09:55:21:eb:3a:ef:54:82:bb:e7:ea:90:7e:dd:
67:89:ba:ed:61:cd:93:9d:40:89:87:f4:04:44:85:08:90:b6:
0a:6a:09:32:a6:01:05:68:45:7b:2e:5c:86:41:7e:ed:fa:65:
ee:57:96:04:98:84:4a:b1:4b:18:17:14:4a:06:3d:55:48:44:
cf:0e:6e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org