Route Origin Authorization
$ rpki-client -vvf cb.rg.net/rpki/RGnet-cb/lCwUpT0n4hLDn-cUS_DX3Ua7X7k.roa
File: lCwUpT0n4hLDn-cUS_DX3Ua7X7k.roa (raw, json)
Hash identifier: FiILL58BSzoU3ygcs9Z0oEklcQjELUnUOrykHJzG+TI=
Subject key identifier: 94:2C:14:A5:3D:27:E2:12:C3:9F:E7:14:4B:F0:D7:DD:46:BB:5F:B9
Certificate issuer: /CN=06D0ED55BA251ECFE68A641939DD1C3C3ACCCA81
Certificate serial: 64B7
Authority key identifier: 06:D0:ED:55:BA:25:1E:CF:E6:8A:64:19:39:DD:1C:3C:3A:CC:CA:81
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/BtDtVbolHs_mimQZOd0cPDrMyoE.cer
Subject info access: rsync://cb.rg.net/rpki/RGnet-cb/lCwUpT0n4hLDn-cUS_DX3Ua7X7k.roa
Signing time: Fri 17 Jun 2022 01:28:45 +0000
ROA not before: Fri 17 Jun 2022 01:28:45 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 3130
IP address blocks: 198.180.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25783 (0x64b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06D0ED55BA251ECFE68A641939DD1C3C3ACCCA81
Validity
Not Before: Jun 17 01:28:45 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=942C14A53D27E212C39FE7144BF0D7DD46BB5FB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:72:1e:11:10:d7:02:c3:c5:8b:93:5f:a8:f8:
f3:3c:83:0c:a9:4e:e5:cb:ea:f3:ce:66:59:03:99:
a3:49:f6:4a:7f:a5:aa:3b:13:ec:53:d1:6d:fa:1b:
01:82:49:83:03:83:1a:0d:d2:08:11:66:94:c8:ba:
ec:f2:51:a8:87:75:a8:21:3e:32:c8:33:29:cf:8b:
78:a8:27:a8:34:95:fa:bc:e3:f6:6f:fd:19:e1:d2:
b0:56:2c:b3:10:1d:08:34:b6:17:74:b3:a9:82:37:
68:50:85:b0:38:d8:91:79:f9:bf:e7:8e:41:9c:4e:
1a:a0:83:d9:4a:69:c5:2e:af:ba:c8:55:71:68:a3:
26:56:24:b6:7d:d4:b2:f3:ad:ec:c4:38:38:55:06:
a9:d9:15:9c:46:af:54:ad:03:f4:5a:25:19:77:09:
40:fd:a1:c4:ed:d9:f7:c2:10:5c:66:41:93:c9:9a:
34:6a:4d:4e:3d:21:d9:11:10:f2:33:4f:fa:bc:e8:
8e:e2:e7:49:ac:d8:9e:5f:2d:4e:97:93:4b:9b:84:
43:b9:9d:62:40:b9:07:23:12:a2:65:a2:d9:e6:2d:
24:e3:13:4f:02:61:b5:2c:f6:f7:cb:a5:f2:42:b7:
dd:a5:2b:dd:37:c8:9a:aa:a5:51:75:13:73:eb:12:
cc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2C:14:A5:3D:27:E2:12:C3:9F:E7:14:4B:F0:D7:DD:46:BB:5F:B9
X509v3 Authority Key Identifier:
keyid:06:D0:ED:55:BA:25:1E:CF:E6:8A:64:19:39:DD:1C:3C:3A:CC:CA:81
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cb.rg.net/rpki/RGnet-cb/BtDtVbolHs_mimQZOd0cPDrMyoE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/BtDtVbolHs_mimQZOd0cPDrMyoE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://cb.rg.net/rpki/RGnet-cb/lCwUpT0n4hLDn-cUS_DX3Ua7X7k.roa
RPKI Notify - URI:https://cb.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
198.180.151.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:c3:87:4c:da:3d:18:d7:fb:f1:5e:b6:d9:04:24:09:72:4c:
b8:a6:5c:e0:33:78:21:c5:29:13:4e:fd:ed:d9:74:f6:19:34:
96:64:a9:52:47:a8:3b:27:b9:f5:07:a0:a4:d3:3b:2b:90:44:
61:d3:52:3c:50:4a:83:50:45:09:75:13:bd:9d:50:02:67:8f:
2b:ea:c2:4e:2e:37:5a:5a:7c:b2:ef:46:5a:f8:04:4e:9b:cb:
a6:7f:ce:73:05:cf:01:b9:89:3e:f5:3c:5a:ca:49:30:22:b0:
f1:94:ae:73:6d:20:fd:a0:7b:41:12:96:2b:c1:57:73:bc:97:
6d:39:df:a4:ef:4e:4c:7b:85:f7:60:12:21:85:b7:eb:4e:b4:
1b:ce:59:2f:dd:bd:ca:9f:2e:73:a6:84:1b:32:db:2c:80:a5:
4e:36:bd:82:99:f6:06:0a:15:57:f7:02:6a:93:3c:6f:1c:16:
22:ec:ac:2a:f5:27:2b:f7:9a:de:6f:8c:68:1b:7c:fd:7b:08:
51:a2:6a:26:96:f8:5d:57:a9:48:5a:91:6c:81:12:a3:3b:82:
de:2e:32:c1:48:18:77:9f:77:b1:25:27:e7:61:d7:62:ac:5d:
df:9a:6b:f6:40:d1:8f:d4:cd:22:1f:b6:e0:1d:89:41:43:85:
c8:3a:bb:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:18:48 2025 by rpki-client