Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/wKg3-Fw4DEkZ0q811ehYbMlb1Ec.roa
File: wKg3-Fw4DEkZ0q811ehYbMlb1Ec.roa (raw, json)
Hash identifier: HbRohdNUbexGxB3fJemNIwOhwQ3JujcMH0BDtzTJoho=
Subject key identifier: C0:A8:37:F8:5C:38:0C:49:19:D2:AF:35:D5:E8:58:6C:C9:5B:D4:47
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 42FF
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/wKg3-Fw4DEkZ0q811ehYbMlb1Ec.roa
Signing time: Fri 11 Feb 2022 00:30:09 +0000
ROA not before: Fri 11 Feb 2022 00:30:09 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17151 (0x42ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 11 00:30:09 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=C0A837F85C380C4919D2AF35D5E8586CC95BD447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:eb:90:f7:69:7b:89:d3:52:26:dc:b6:a8:e6:
ca:5f:76:e5:51:6c:3c:c2:32:5f:21:66:39:a3:5d:
84:d4:82:81:19:45:7d:3f:68:f9:7c:96:4c:50:b5:
24:98:93:5d:1f:3b:b8:23:30:e1:49:1a:25:7e:80:
49:f9:db:f5:72:99:35:b2:d3:0c:6a:f0:26:14:ca:
a2:b6:cd:a7:d6:eb:4d:b5:56:24:aa:19:60:2c:8d:
9b:84:a5:39:47:e4:88:ad:af:b0:c2:af:21:b4:7c:
d2:2b:10:56:86:04:16:a3:a9:69:6a:46:13:81:a4:
99:7f:26:7d:fc:14:60:e5:aa:8c:56:24:4b:f8:51:
5f:55:71:97:e5:ca:32:f7:91:04:fe:f8:fb:76:32:
1f:0b:82:64:97:15:fc:17:8a:aa:c2:10:cc:61:92:
b0:a4:11:17:d8:76:36:c1:27:c6:4f:19:02:63:7f:
75:8a:c5:dd:ab:77:f2:5a:f3:d2:03:63:54:a7:bb:
2f:2c:3e:b9:6b:56:fd:84:d7:a3:b9:86:81:cf:d1:
ca:56:0d:d4:40:fd:0d:30:cb:ce:40:bb:ef:be:8a:
64:a3:82:de:66:7f:ee:30:9d:5c:39:f1:c7:26:b0:
5d:d3:de:32:94:ce:78:6f:74:2a:21:e8:5f:43:47:
c4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A8:37:F8:5C:38:0C:49:19:D2:AF:35:D5:E8:58:6C:C9:5B:D4:47
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/wKg3-Fw4DEkZ0q811ehYbMlb1Ec.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
03:b4:a9:45:53:85:f5:8e:13:85:dd:db:c4:78:69:00:e3:b9:
43:b7:a7:6a:60:91:09:4e:33:92:57:0e:4a:8c:01:40:1d:61:
b2:d4:49:94:3e:83:88:e5:c6:d4:53:56:8a:9e:64:dc:dc:a8:
2f:fb:8d:15:ac:41:e3:65:5c:6d:3f:ac:46:5f:39:6c:00:4e:
90:18:e1:2c:3a:7e:54:b6:f2:85:50:85:9a:4d:b4:14:d4:a0:
2a:1a:00:da:87:29:85:fb:7a:c0:11:db:c3:de:3d:d0:14:a0:
08:19:de:b3:0a:dc:dc:bc:94:df:47:75:6a:cd:69:44:77:e9:
80:fe:25:98:9e:6c:22:2c:2d:e4:e3:46:07:d4:ae:5d:31:84:
53:1e:03:67:c2:3a:17:80:4b:1f:78:07:4f:b3:e7:1c:60:08:
a0:c2:a8:fc:61:65:10:21:27:d5:05:44:d6:4d:ac:aa:68:59:
7f:88:a6:fa:81:b5:a3:54:e0:06:0a:f4:84:83:2c:5d:35:66:
f9:f0:43:27:46:8c:11:17:47:de:1f:81:a8:59:54:c7:fc:d6:
90:69:b1:52:8b:bc:61:9a:9a:84:91:f3:1c:b7:49:f8:ae:da:
80:9f:74:a3:d8:85:36:3c:e0:24:c3:73:08:64:a2:dd:1a:dd:
2b:e0:3b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org