Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/pGb7EYdv1DUC28NH3X2V4WYioEk.roa
File: pGb7EYdv1DUC28NH3X2V4WYioEk.roa (raw, json)
Hash identifier: r32nyi90j1DjkNLNEIVEr0JIQap0pql59VRmKLmSl6s=
Subject key identifier: A4:66:FB:11:87:6F:D4:35:02:DB:C3:47:DD:7D:95:E1:66:22:A0:49
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4273
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/pGb7EYdv1DUC28NH3X2V4WYioEk.roa
Signing time: Tue 01 Feb 2022 00:30:08 +0000
ROA not before: Tue 01 Feb 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17011 (0x4273)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 1 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=A466FB11876FD43502DBC347DD7D95E16622A049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9c:13:cf:89:16:c2:22:62:86:6b:3c:77:09:
f3:5e:39:35:21:12:be:b5:cf:13:4d:dd:c2:fd:6e:
0e:15:c0:ba:a6:7a:63:37:22:0d:7c:f9:5e:ff:d5:
95:b2:e1:27:f8:ef:9e:1d:e1:63:df:66:3f:ad:72:
0c:d3:2f:78:08:14:1c:bf:a1:b4:cf:d5:06:f7:02:
15:cf:3b:4b:7d:dc:13:61:22:51:25:0b:68:6c:3f:
3d:ca:3e:71:ef:6f:c8:61:6c:d7:c2:b8:6f:e5:ff:
77:e1:bd:83:5a:ed:88:f6:e5:ff:35:f6:e1:b3:eb:
47:77:c1:4b:47:7d:65:e3:1a:9d:fa:f4:b2:b4:23:
5a:84:9e:80:9a:17:e9:bf:d7:78:3c:6c:0d:f7:2c:
28:0b:30:57:a2:ec:c1:1f:eb:d9:e2:37:ca:0a:2b:
f2:e1:f5:1b:85:e0:05:9f:3b:c4:40:6d:f7:df:73:
1f:fe:d2:83:76:ce:05:51:0e:2e:0e:4d:e7:5f:05:
50:a4:da:0f:a9:5e:26:5d:b6:28:32:e1:06:21:8f:
46:db:52:35:f0:a5:0b:52:a2:e1:ae:34:63:ee:5a:
1c:7c:57:c4:9e:95:38:fe:3c:a5:d9:71:76:4b:9e:
ac:94:52:1e:7d:91:1c:ec:2e:54:37:bb:90:3b:d8:
3d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:66:FB:11:87:6F:D4:35:02:DB:C3:47:DD:7D:95:E1:66:22:A0:49
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/pGb7EYdv1DUC28NH3X2V4WYioEk.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:f4:7e:81:53:ac:9b:16:37:cf:f0:bd:91:70:ea:6c:ab:bb:
64:9e:65:29:09:19:9f:43:a1:9b:2f:f1:d0:2c:d0:31:83:5c:
17:7a:59:2f:2e:1e:51:1e:a0:e7:f0:46:0b:e9:60:91:69:c3:
13:7b:88:f4:aa:30:5e:bb:a8:3f:b1:51:17:78:93:48:b2:8a:
3e:80:cb:d6:29:5f:92:b1:69:cd:2f:7e:a6:10:45:cf:57:c3:
15:f5:3c:92:83:f0:54:64:bd:a6:d3:6b:10:80:9b:52:8c:46:
a8:39:43:57:5a:fe:40:6f:20:7f:87:4a:e2:96:7d:bb:c4:f0:
94:4d:66:60:44:38:3e:5c:4f:d5:d2:10:31:17:77:e3:3c:66:
35:07:99:0b:22:c6:34:5b:f3:41:a8:2f:c9:a5:61:fd:99:6c:
34:44:10:a6:19:d3:df:da:b8:d4:1c:8c:60:14:e2:58:8f:7d:
97:bf:e0:27:0f:7a:18:59:06:d1:ce:e8:0f:89:9d:94:27:67:
06:02:60:81:6c:16:70:05:9b:da:8a:34:89:84:4c:23:ac:32:
0d:dc:64:5f:d2:8b:5f:a4:58:ee:6c:04:cb:8f:79:2a:87:df:
b6:d3:e0:44:81:d3:84:1a:1e:d3:49:bd:d5:0f:4a:8e:ed:56:
f4:63:38:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org