Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/eg-EMEMr1uI95ERHcNj4UF2H49w.roa
File: eg-EMEMr1uI95ERHcNj4UF2H49w.roa (raw, json)
Hash identifier: 5A9pHHHHmJcb5GRvMjJq0bC0fRS2HtPKEE+BJW7CyWU=
Subject key identifier: 7A:0F:84:30:43:2B:D6:E2:3D:E4:44:47:70:D8:F8:50:5D:87:E3:DC
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4610
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/eg-EMEMr1uI95ERHcNj4UF2H49w.roa
Signing time: Sat 09 Apr 2022 00:30:08 +0000
ROA not before: Sat 09 Apr 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17936 (0x4610)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 9 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=7A0F8430432BD6E23DE4444770D8F8505D87E3DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0f:1b:73:7f:39:0e:1b:d2:4c:84:de:f3:50:
c0:8b:29:dc:1d:23:0e:44:e1:3a:e6:70:6c:ae:e9:
b1:ef:da:2f:cb:3e:61:f8:f1:47:88:b1:60:df:37:
f8:01:de:75:bc:19:a1:a0:af:fc:3f:59:47:33:27:
2a:2f:82:ff:3a:65:bd:97:81:fd:39:21:ca:2e:d3:
af:fc:76:f1:3c:52:a4:d4:23:0e:e2:f9:ba:c1:00:
a5:63:fa:97:c9:5d:0f:7e:b2:0e:56:79:97:1a:57:
d1:73:6b:ff:a4:30:e7:82:a4:9b:06:ef:66:00:2f:
7f:40:28:0a:af:cd:f3:7c:cc:c6:a4:66:17:93:37:
90:a6:6d:c0:1a:8d:e9:16:3c:80:40:83:ea:a4:c6:
45:19:a1:38:02:cd:9b:0c:62:a6:9b:93:97:6e:e4:
e9:fb:8e:08:be:04:1e:d7:89:dc:c8:09:b9:62:ac:
e1:0a:3f:0c:f0:15:f6:21:9a:13:d1:f0:25:75:05:
47:e2:a4:9d:8f:22:4f:f0:4f:42:07:d0:2a:11:0e:
b0:93:b7:44:87:6c:de:e0:84:ab:ef:fe:e5:12:00:
1e:64:48:52:94:36:9b:55:b1:4d:69:9a:91:19:ad:
75:88:f7:bd:2a:ed:63:5a:41:88:a9:ff:b1:35:33:
35:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0F:84:30:43:2B:D6:E2:3D:E4:44:47:70:D8:F8:50:5D:87:E3:DC
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/eg-EMEMr1uI95ERHcNj4UF2H49w.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:ec:b8:14:be:79:c7:1e:1d:bb:98:b7:e3:76:b7:ef:2f:c6:
31:fd:8c:e8:2d:24:59:e2:c8:65:f6:9e:85:d3:2e:fe:76:06:
30:a8:e6:46:cc:b6:d9:9b:cc:bf:cd:a7:6e:0d:a8:b4:d2:20:
be:54:5f:fd:d0:fe:4c:82:92:56:64:dd:40:3b:d7:51:07:73:
b8:ca:53:9c:ab:5c:a9:ed:73:8d:45:0c:54:9c:46:ab:10:23:
f3:82:7b:3b:dd:bb:b8:3b:89:92:e5:ab:4f:c8:29:76:e4:a9:
be:1b:3d:26:7f:0b:65:15:28:19:8d:ee:11:ab:75:c8:b6:dc:
6f:ea:6c:e4:4e:9c:8b:87:ef:8e:7f:d6:1f:f0:cd:d4:db:a2:
af:f1:f5:23:35:79:79:d8:42:d3:6f:d3:3f:e5:99:e3:3f:a1:
f6:56:3a:10:32:3b:92:54:b0:60:43:be:b2:63:6c:94:11:8d:
e4:98:a4:05:62:ee:37:f1:12:5d:0d:6d:44:97:cb:95:b7:bd:
6b:7d:23:ca:b3:92:7b:b8:d4:75:f7:db:60:2b:ca:93:0a:0e:
3f:2c:07:8e:0f:9e:8f:23:2c:e5:77:f4:37:fe:ab:10:07:82:
94:13:d6:1a:c5:ed:9b:98:18:a0:2e:af:39:b3:72:b1:6a:7f:
b3:15:cc:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org