Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/vNhEjVCefeM3Ec9ZD2htwsP40TA.roa
File: vNhEjVCefeM3Ec9ZD2htwsP40TA.roa (raw, json)
Hash identifier: hAtnfESDWABCYErqcI6t3EHaA25TyvNIUgUGWInpkqk=
Subject key identifier: BC:D8:44:8D:50:9E:7D:E3:37:11:CF:59:0F:68:6D:C2:C3:F8:D1:30
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4263
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/vNhEjVCefeM3Ec9ZD2htwsP40TA.roa
Signing time: Mon 31 Jan 2022 00:45:08 +0000
ROA not before: Mon 31 Jan 2022 00:45:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16995 (0x4263)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jan 31 00:45:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=BCD8448D509E7DE33711CF590F686DC2C3F8D130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d7:72:89:e2:8f:27:ec:85:e9:92:aa:73:49:
74:f9:ce:aa:b0:00:4e:74:a2:81:52:f8:f9:6b:18:
d6:9e:6c:d8:ab:4a:4e:8a:c5:c2:33:92:c0:c9:48:
23:20:e2:c7:5d:77:e1:82:e5:c3:2d:d3:c2:58:e4:
04:46:32:9e:b1:d5:b4:83:0e:e0:72:a8:38:7e:d2:
b4:85:30:5d:a3:86:31:ce:b4:17:5e:fa:8f:10:69:
2e:14:08:e7:10:e9:5e:f0:e4:9b:0c:26:fd:75:98:
f8:ee:d1:21:0f:3d:72:24:85:5f:da:72:15:68:e9:
3b:63:b0:e3:ff:02:1f:e8:48:b5:c0:68:9b:c0:d0:
3c:7a:35:86:2c:53:3f:8b:00:82:86:62:4d:a9:c3:
76:03:9c:4b:0d:c5:77:c4:b1:37:e0:46:b7:8f:b7:
9d:b8:8c:8d:5a:64:a4:91:13:e1:a1:a9:37:ff:c5:
e9:87:60:09:fd:e1:60:9b:14:6d:61:ef:79:fb:0d:
df:50:ef:ff:b0:6b:1b:b9:39:ff:47:c7:37:d4:1a:
f1:2c:5e:43:3d:c1:ad:27:e7:91:8a:cd:22:de:6b:
b8:cb:5e:6a:19:2c:34:dd:7a:5e:bc:55:ab:58:1a:
3f:fd:0c:db:d5:af:c3:2c:b9:fe:90:6f:c5:fd:c3:
75:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D8:44:8D:50:9E:7D:E3:37:11:CF:59:0F:68:6D:C2:C3:F8:D1:30
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/vNhEjVCefeM3Ec9ZD2htwsP40TA.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:7f:24:d0:9e:3a:fc:b4:6f:ed:d4:d7:89:3a:66:7d:ab:de:
41:22:2b:16:5f:32:5b:95:a6:ac:ee:64:6b:06:06:83:04:4a:
bb:b9:43:d7:8a:55:6d:24:ea:5c:b2:1e:1b:54:fa:dd:8b:f4:
b7:7a:79:78:40:ad:22:ea:0a:ab:d1:03:3b:61:c8:63:9d:00:
0f:f0:b6:45:58:dd:28:b4:af:6e:1e:0c:bc:a7:ba:25:93:41:
4f:63:6f:26:54:25:1f:6c:30:14:96:6e:a5:64:ea:2c:fa:3f:
78:13:a7:78:13:a1:6b:ce:35:d0:2c:61:8d:3f:22:e8:45:96:
e2:d8:f4:08:a0:6d:20:03:71:5a:db:71:a8:b3:2a:5e:58:56:
32:c1:8e:92:1f:5b:72:a5:e6:81:4a:1d:63:07:d8:9b:45:79:
08:a1:45:2d:ac:d0:54:0b:cb:2a:3f:6f:e6:b8:43:ba:b9:aa:
e1:33:7d:ff:ef:1e:64:25:38:51:66:7f:f8:09:79:74:2e:7a:
aa:70:6b:19:64:34:9c:80:1f:b4:3e:7d:58:f8:bc:f0:0d:d6:
fa:f1:ba:d3:74:9c:50:12:2b:54:df:06:23:0e:30:37:77:7b:
a7:25:5d:22:4a:a6:75:78:a5:14:ae:74:0e:32:ce:56:68:d9:
ba:87:dd:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org