Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/rogc2NqRIlBvg1Ht_HLCC29EHu8.roa
File: rogc2NqRIlBvg1Ht_HLCC29EHu8.roa (raw, json)
Hash identifier: eWXBlKKbOKLH5UMGwcKJSE6OEU8os39UUrVqWQGDiKk=
Subject key identifier: AE:88:1C:D8:DA:91:22:50:6F:83:51:ED:FC:72:C2:0B:6F:44:1E:EF
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 43E9
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/rogc2NqRIlBvg1Ht_HLCC29EHu8.roa
Signing time: Mon 28 Feb 2022 00:30:12 +0000
ROA not before: Mon 28 Feb 2022 00:30:12 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17385 (0x43e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 28 00:30:12 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=AE881CD8DA9122506F8351EDFC72C20B6F441EEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:84:94:24:d3:73:d2:a2:eb:d0:d7:6d:1c:92:
40:35:69:4d:9f:4b:56:46:7c:2f:1f:49:a5:01:36:
f2:94:95:4f:1a:5f:46:82:9f:cc:e0:a8:86:c0:66:
bb:5d:17:c3:1a:c1:c7:b5:dd:e3:39:8a:ba:79:af:
2f:d5:0d:3b:94:24:52:3e:ff:12:83:1d:c8:d2:b0:
f6:d0:72:0e:07:4e:48:17:fc:fa:9d:ec:c8:06:ef:
c5:d9:0d:5d:5d:18:b7:49:f6:e5:0e:61:02:0c:9e:
49:2f:fc:e2:91:6e:49:14:69:01:c7:02:97:c8:5a:
f0:d2:22:22:d1:89:ee:ac:52:bc:54:31:4b:d3:d5:
b6:3b:7f:16:88:a9:84:6f:6c:d9:2a:29:02:42:aa:
f9:df:e1:b1:50:2f:a3:08:3b:22:77:93:6f:4c:50:
e9:7c:93:21:8c:f2:9b:c0:b1:cd:f5:2d:15:25:6f:
39:2a:3f:fb:48:52:3c:49:ac:de:e6:6f:04:02:7a:
fc:3c:50:00:28:dd:81:4a:78:74:3c:4c:09:be:8d:
78:2f:18:ee:86:3e:08:41:95:63:f1:ca:f9:74:18:
cb:84:b8:8b:d3:d9:d0:bf:61:8e:21:b6:9c:fe:84:
ac:79:93:a1:b5:18:f4:f7:29:c9:8c:3e:2c:b4:ec:
09:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:88:1C:D8:DA:91:22:50:6F:83:51:ED:FC:72:C2:0B:6F:44:1E:EF
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/rogc2NqRIlBvg1Ht_HLCC29EHu8.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:ec:60:32:d6:d4:dc:6b:9c:de:93:ec:d7:ea:04:ca:1f:4a:
47:2d:29:86:88:8d:d0:3a:01:b4:c5:47:22:40:1a:84:67:64:
3f:f9:25:00:ec:52:43:70:ee:e1:62:30:68:07:68:e0:30:26:
a9:ba:4e:f5:fb:36:67:83:28:a4:0d:7a:59:d7:dd:96:44:2d:
1c:1c:56:be:e3:3a:92:b5:40:03:8d:56:47:db:d0:42:37:1a:
62:29:e4:9c:ab:79:3f:e7:e3:0d:a4:f2:68:f2:6f:b9:45:e6:
cc:67:99:81:c5:e1:8e:d7:bc:ee:8c:d7:d5:0e:0b:2d:22:31:
bc:51:e1:7b:e7:3c:d0:3b:56:51:14:84:82:8e:dc:68:a4:91:
44:ec:99:17:1d:c8:a8:aa:a8:91:ed:fb:c3:16:d1:23:0c:b5:
bc:ce:ef:97:48:ae:dc:66:16:0b:e2:79:a9:62:01:2f:60:2e:
48:2b:b8:42:ed:08:6b:b2:e3:f2:12:15:b4:5f:f3:c2:ca:9e:
2d:cd:d5:6e:45:50:b5:79:58:30:2f:5c:8a:8a:52:cd:7e:4b:
61:ae:1b:4d:86:24:7c:76:dd:62:5b:f9:7d:6d:37:18:d9:67:
af:16:07:b3:29:8a:5d:c0:e6:ba:c8:dc:11:0f:2a:34:68:a8:
7f:4c:45:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:27:22 2025 by rpki-client