Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/zvwKsDrE056eT9eFEZsZ0WMCjUM.roa
File: zvwKsDrE056eT9eFEZsZ0WMCjUM.roa (raw, json)
Hash identifier: oZFCJaU2nVBC97FztpqieXjzddqozTgkpCah7099Cf8=
Subject key identifier: CE:FC:0A:B0:3A:C4:D3:9E:9E:4F:D7:85:11:9B:19:D1:63:02:8D:43
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 441C
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/zvwKsDrE056eT9eFEZsZ0WMCjUM.roa
Signing time: Fri 04 Mar 2022 00:30:08 +0000
ROA not before: Fri 04 Mar 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17436 (0x441c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 4 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=CEFC0AB03AC4D39E9E4FD785119B19D163028D43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2a:e5:fb:93:f4:0f:97:0b:4b:b7:9f:32:07:
96:45:b6:d6:19:54:25:70:f5:df:a1:33:2f:40:77:
a4:1a:81:3e:9f:f8:6f:b5:a8:f2:35:fd:1d:cc:fe:
e3:56:31:32:00:81:52:91:97:ba:40:b1:6b:b2:06:
2c:7c:da:b3:8d:d1:c9:74:d8:54:7c:c6:ab:a1:b0:
2c:81:0c:7b:60:63:c9:e7:2e:30:bc:20:ab:d4:71:
92:56:85:d7:cb:77:fb:67:56:52:9e:be:0d:84:85:
93:46:d5:ba:c7:14:5f:9e:90:d2:cf:c2:4a:5e:7b:
57:32:70:55:28:fa:5e:e4:d0:5f:c0:2a:cb:fc:da:
78:b3:c3:27:09:37:9b:83:35:e5:3b:08:9f:03:4d:
49:a1:3d:30:5e:3a:92:65:7a:3f:77:6f:88:6d:1a:
67:d2:34:56:d0:41:41:b2:a3:1e:ed:79:e3:d0:67:
1f:44:c1:48:05:8c:a2:ec:a1:e1:81:f2:f5:b7:40:
a8:53:d6:7d:0f:9d:38:1b:71:be:98:d7:c7:25:79:
63:04:61:eb:ba:36:d8:3e:72:19:52:34:8f:14:fe:
4b:19:de:b1:e8:64:1e:8d:36:bf:9a:81:a0:dc:81:
93:3d:0c:d7:fc:43:da:63:91:be:6c:73:67:98:0b:
cb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:FC:0A:B0:3A:C4:D3:9E:9E:4F:D7:85:11:9B:19:D1:63:02:8D:43
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/zvwKsDrE056eT9eFEZsZ0WMCjUM.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
30:f3:98:15:32:6f:54:4e:eb:24:28:bb:32:ca:37:60:be:f5:
04:ed:61:46:d5:4a:44:a0:6a:15:a1:47:cc:11:0d:c2:39:f9:
7e:c5:60:2c:f8:ac:ba:47:0b:17:a3:0e:a8:2b:d5:0e:e5:a3:
33:21:73:ba:5a:29:19:c1:00:a8:90:29:ad:21:8f:62:b0:7d:
a9:3a:77:04:76:5f:db:b9:45:ac:3e:21:75:21:12:6f:67:7d:
98:76:c0:6b:05:24:4b:68:fd:20:0b:01:54:00:80:22:35:96:
5d:6e:cc:c3:bf:0e:3e:be:02:f1:20:97:90:49:77:c6:16:64:
59:92:eb:2f:34:7a:16:ab:10:96:9d:b2:2a:4c:21:9c:12:c0:
db:7a:62:72:92:e9:fb:f1:7b:7a:64:c4:96:a3:db:23:98:e7:
90:54:00:f3:1d:94:16:ac:4f:7c:b2:9a:81:50:bc:34:9f:19:
c4:3e:ab:59:38:73:72:c3:31:6b:e3:b6:1d:a8:43:a6:bc:9e:
39:c1:c1:b0:4b:89:30:f7:76:9b:48:83:39:1e:6f:d7:41:2b:
f8:14:f0:86:a4:fd:0a:e9:c1:57:0c:b2:01:07:59:fb:58:db:
35:f7:cf:c7:5c:80:4e:86:27:73:cc:4f:bd:58:97:47:42:20:
e0:52:2a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org