Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/fEC7zTG1BDdvz1kpmEmbqpGLl1w.roa
File: fEC7zTG1BDdvz1kpmEmbqpGLl1w.roa (raw, json)
Hash identifier: cik7cVeaDU6rkFG8hb3bNAwrUDEStDtIW4pvhYcdUZM=
Subject key identifier: 7C:40:BB:CD:31:B5:04:37:6F:CF:59:29:98:49:9B:AA:91:8B:97:5C
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4461
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/fEC7zTG1BDdvz1kpmEmbqpGLl1w.roa
Signing time: Wed 09 Mar 2022 00:36:47 +0000
ROA not before: Wed 09 Mar 2022 00:36:47 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17505 (0x4461)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 9 00:36:47 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=7C40BBCD31B504376FCF592998499BAA918B975C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:65:00:cc:e8:90:5a:a1:de:ea:d4:d4:d8:74:
56:ac:db:d6:c5:a1:75:6a:8c:0c:d1:ec:a5:20:77:
c3:17:27:8e:e4:38:9b:05:91:96:5d:60:9a:0e:8f:
cc:74:48:fd:51:ef:02:eb:74:55:7e:62:bb:16:ea:
d6:08:b5:da:45:2b:8f:c6:a0:14:bd:fb:03:60:e9:
20:39:ce:5f:92:1b:66:ae:00:4c:5c:a6:9d:6e:9a:
0a:5a:7c:6a:f9:81:5c:ef:23:ef:f9:f4:aa:1b:f5:
f8:14:8b:5e:12:3a:cb:11:32:64:de:2a:a6:cd:41:
92:96:2f:0e:49:df:e5:52:e7:7a:40:e1:3a:05:d7:
06:21:d2:3b:44:18:51:4b:df:51:17:6a:09:55:55:
c5:5a:21:4b:b5:a0:0b:de:e0:a1:d9:eb:c5:a4:b2:
d8:c5:16:eb:01:92:e4:32:e6:b4:c0:15:02:24:74:
5e:f0:bc:cc:8f:79:e1:4f:6f:c0:ff:d6:42:a6:db:
8d:4b:df:61:ca:b0:ed:9d:22:cd:fd:6d:40:f2:c4:
f4:b7:dc:aa:3f:b1:b1:87:3c:9a:a4:fb:ef:93:18:
97:94:e3:69:34:b2:03:75:ca:7b:af:c2:78:95:89:
b3:65:de:6c:97:3e:50:e4:d5:24:66:fb:34:5b:59:
4d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:40:BB:CD:31:B5:04:37:6F:CF:59:29:98:49:9B:AA:91:8B:97:5C
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/fEC7zTG1BDdvz1kpmEmbqpGLl1w.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
15:dc:4f:8f:99:9f:8a:a7:c8:10:c3:7a:7a:d1:0e:e3:a2:bb:
df:81:2f:5e:81:22:79:05:f0:1f:52:7c:26:f8:aa:32:c0:fe:
dd:a7:4e:7e:ae:4a:37:ee:e1:ac:36:78:13:83:cd:ea:5f:d2:
9b:55:34:0c:77:85:28:e2:33:c6:e1:27:b4:2a:df:e1:c7:81:
8f:ea:15:ec:06:50:17:67:e5:f5:d4:93:58:5e:47:25:99:b0:
fa:2a:11:72:b2:2e:d4:44:0d:f3:9d:df:ec:7e:7e:e2:5d:6f:
23:15:a6:d2:b6:88:29:ee:f9:98:18:18:26:d6:68:71:c3:71:
87:94:8a:0f:7f:2c:22:b0:77:66:59:cb:0c:13:79:b2:43:95:
eb:72:65:08:e9:fd:db:30:f6:78:a1:3f:cd:75:16:53:a3:58:
2f:91:82:fe:36:59:a5:32:c9:b6:3b:68:8a:71:f6:15:68:35:
3c:03:ec:ce:83:af:a8:db:8a:4b:29:24:be:2e:99:61:79:56:
63:07:76:33:30:4c:81:98:bf:bf:79:70:34:d1:dd:21:c8:32:
a1:d2:fd:b5:66:6b:6b:45:d1:fb:ad:e1:0a:cd:e6:b8:1a:58:
f8:0d:fd:12:00:5d:f7:46:ac:46:75:fa:92:b8:66:27:d1:fb:
a3:50:aa:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org