Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/yT9bMVM2NI1rLgO8U7NSFllQ2Yo.roa
File: yT9bMVM2NI1rLgO8U7NSFllQ2Yo.roa (raw, json)
Hash identifier: lGywA3ced1YSWCxfK2WXLpYIeCiJkzV5uxSbmX0PEiE=
Subject key identifier: C9:3F:5B:31:53:36:34:8D:6B:2E:03:BC:53:B3:52:16:59:50:D9:8A
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 491F
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/yT9bMVM2NI1rLgO8U7NSFllQ2Yo.roa
Signing time: Thu 02 Jun 2022 00:30:11 +0000
ROA not before: Thu 02 Jun 2022 00:30:11 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18719 (0x491f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 2 00:30:11 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=C93F5B315336348D6B2E03BC53B352165950D98A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a7:f4:f4:80:44:d7:11:43:f7:a0:ce:d1:83:
de:89:3a:f2:87:a5:3e:68:aa:c6:1c:0f:28:db:01:
7f:48:4b:16:80:26:c1:58:86:bb:6a:c6:23:b2:1d:
62:68:fc:10:4a:7a:4b:e8:1b:71:84:39:01:bc:6d:
7d:04:b3:46:20:a8:7c:a9:f8:67:0e:c5:a8:33:c0:
a7:17:21:2b:6f:57:33:e7:2c:f1:8f:75:90:67:1a:
7a:26:4e:6f:aa:c1:79:ff:4d:0b:35:9c:4b:fe:c1:
99:88:d8:2e:dc:56:ce:06:af:35:0c:6b:48:32:9e:
6f:76:9a:de:23:d1:37:52:1d:d3:b4:71:98:4c:6e:
9f:b8:13:e3:01:6d:14:1a:30:78:aa:5f:19:50:0c:
2b:61:07:f8:0b:39:2b:8c:15:f6:ed:42:ba:4b:bb:
8b:35:40:1b:6b:27:ed:a7:9d:b4:e9:e3:a8:8d:65:
16:7b:d6:26:9d:50:2c:c8:b7:1d:7c:7c:31:b5:da:
ac:52:15:b0:f0:62:da:ea:7f:87:0d:a1:91:d2:46:
ca:bd:fa:20:01:a8:d5:79:20:89:63:f8:43:25:09:
c4:9d:29:0e:83:c1:ee:e1:d3:2a:37:fb:74:d0:e0:
50:b9:93:a3:55:e0:21:10:9f:4e:13:21:be:1c:7a:
17:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3F:5B:31:53:36:34:8D:6B:2E:03:BC:53:B3:52:16:59:50:D9:8A
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/yT9bMVM2NI1rLgO8U7NSFllQ2Yo.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:b2:c1:b1:23:02:8c:8a:13:f3:21:18:2e:f2:cc:a7:b5:31:
de:78:da:3b:a2:75:5c:7c:3c:6f:56:7e:c6:15:b3:7a:cc:c4:
24:9e:34:46:15:bd:14:ee:ec:e9:6d:ff:f7:01:f0:b2:29:99:
cf:99:39:25:8d:98:c5:b8:2d:27:90:93:28:29:a1:de:fb:76:
cb:c9:dc:44:d7:60:eb:29:bf:45:8c:b1:b1:1c:20:84:4b:51:
96:7b:a2:b7:ed:14:81:e5:29:15:e7:d5:49:b9:88:b7:c2:fc:
12:49:32:35:77:26:66:80:33:87:b6:24:50:d2:66:8b:97:24:
0b:1c:50:d8:34:7a:ce:a8:f4:a9:ed:69:71:73:2a:c8:6a:80:
72:bb:a1:5e:62:2e:9d:9a:24:b1:da:06:ba:d0:24:27:9c:0b:
16:34:d2:af:8b:10:66:6a:d6:49:71:f2:a6:14:1b:be:64:58:
e2:3e:c3:06:a0:11:0a:a6:c8:7e:c6:fa:47:fd:86:21:7d:9b:
15:d4:e5:aa:1e:57:68:7b:a2:11:04:fd:53:02:ea:08:a7:3e:
33:98:cc:8b:68:9e:75:24:a1:ed:01:fa:bd:c5:b2:a8:88:74:
40:54:6c:9d:9d:61:66:8e:88:d4:f8:81:3e:ba:3f:51:cb:c3:
9c:bf:77:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org