Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/oVAkIsl0-LPUFB8D2FVkQQuxglg.roa
File: oVAkIsl0-LPUFB8D2FVkQQuxglg.roa (raw, json)
Hash identifier: OBqe4563an8zHhUhemTSdTlg1Sgi1a/8qGtutbsqQYo=
Subject key identifier: A1:50:24:22:C9:74:F8:B3:D4:14:1F:03:D8:55:64:41:0B:B1:82:58
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 46C9
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/oVAkIsl0-LPUFB8D2FVkQQuxglg.roa
Signing time: Fri 22 Apr 2022 00:30:07 +0000
ROA not before: Fri 22 Apr 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18121 (0x46c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 22 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=A1502422C974F8B3D4141F03D85564410BB18258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:72:df:5f:d5:ba:88:c7:bd:96:b1:d6:76:6d:
87:81:a3:dd:f4:d7:7f:79:ad:2a:cc:af:f7:45:86:
69:1b:97:7b:1e:68:6c:ac:c0:70:23:e1:9a:c2:1c:
6e:fa:34:11:32:1d:71:a1:89:41:01:c1:29:f3:2f:
c6:6a:f8:d2:f5:00:8e:ad:95:bd:ed:b7:83:76:3b:
46:40:2d:db:29:d0:89:81:10:06:32:f2:43:8d:c0:
d3:c2:a1:45:d5:13:89:e6:e8:c8:ff:19:08:34:8a:
38:e1:07:74:85:10:0c:3e:06:17:77:e8:28:d1:35:
0f:52:89:e4:cd:ec:eb:1a:e1:06:9c:e0:c5:a2:96:
9c:fe:5c:bf:3b:f7:9c:d6:19:5e:e7:d2:c6:75:e6:
1a:ae:0e:25:40:c0:0e:17:b7:18:36:32:57:b0:c9:
41:36:2c:44:dc:ec:24:6b:91:df:e1:b0:95:9d:ae:
b7:50:58:e1:f9:c8:4f:ac:4d:4e:5b:ef:21:06:26:
ce:e6:5d:63:2c:9f:52:60:0a:99:11:0c:3f:26:03:
7f:b3:85:04:4f:a8:bf:6e:ea:99:32:af:42:4b:a1:
a1:33:f0:70:90:ea:a5:c4:3f:06:78:62:77:20:56:
db:ff:cf:db:83:8e:81:11:df:05:26:9a:12:92:c6:
3c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:50:24:22:C9:74:F8:B3:D4:14:1F:03:D8:55:64:41:0B:B1:82:58
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/oVAkIsl0-LPUFB8D2FVkQQuxglg.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
49:08:a0:e4:8b:55:5b:40:28:6d:80:a4:0b:c7:89:d1:8e:72:
e8:bb:cf:fc:4e:23:78:b1:10:06:ea:9d:05:8b:8e:88:09:d3:
69:0e:05:50:f1:46:5c:f5:b2:66:aa:1c:bf:99:0a:ae:4b:e7:
ac:81:65:fe:aa:7d:ec:38:a3:7c:26:ff:97:bf:8b:bf:e8:db:
83:47:68:6c:0b:42:7f:99:84:b9:a8:79:05:ac:76:ef:5a:1e:
ca:65:b4:71:59:42:a3:d7:d5:fc:39:e4:cd:af:da:cd:88:17:
7c:1c:b6:0c:a9:9f:0b:8f:3d:fa:05:bc:f2:2b:55:fa:92:55:
83:4a:e3:94:b9:38:cb:ff:e9:0d:4d:17:61:a8:4b:d8:4a:ff:
c0:97:81:7f:bc:28:81:52:9a:ba:d0:7a:e6:3e:69:c0:ce:b0:
3b:19:e0:14:1e:e9:04:18:2c:ec:5f:91:98:e5:fc:90:fd:54:
86:69:59:ca:56:c3:26:0b:02:1c:af:14:0e:f6:e0:7b:a0:35:
be:53:ac:8b:89:2d:84:42:8a:bd:45:41:15:94:28:20:2e:94:
c4:67:2e:94:21:3b:da:25:8d:f5:4f:f3:8e:94:3d:5b:59:60:
56:f1:2b:75:8f:31:f1:f3:d7:fd:5b:80:4e:96:56:05:26:f8:
c3:c7:41:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org