Route Origin Authorization
$ rpki-client -vvf cc.rg.net/rpki/RGnet-cc/aFAec0GwM_p4QB4d1Ff6KkUk25U.roa
File: aFAec0GwM_p4QB4d1Ff6KkUk25U.roa (raw, json)
Hash identifier: kLP/XU+i+x6CAYsSn2G/rq5MCVm6vgd+2qak+AjZ6no=
Subject key identifier: 68:50:1E:73:41:B0:33:FA:78:40:1E:1D:D4:57:FA:2A:45:24:DB:95
Certificate issuer: /CN=818E5E643C3DA212D2022D669714B087581515C6
Certificate serial: 6A2F
Authority key identifier: 81:8E:5E:64:3C:3D:A2:12:D2:02:2D:66:97:14:B0:87:58:15:15:C6
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/gY5eZDw9ohLSAi1mlxSwh1gVFcY.cer
Subject info access: rsync://cc.rg.net/rpki/RGnet-cc/aFAec0GwM_p4QB4d1Ff6KkUk25U.roa
Signing time: Fri 17 Jun 2022 00:59:48 +0000
ROA not before: Fri 17 Jun 2022 00:59:48 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 3130
IP address blocks: 198.180.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27183 (0x6a2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=818E5E643C3DA212D2022D669714B087581515C6
Validity
Not Before: Jun 17 00:59:48 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=68501E7341B033FA78401E1DD457FA2A4524DB95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:39:e2:01:a4:7c:6e:00:d0:ef:88:12:5e:59:
3e:51:62:29:22:8d:fa:f7:61:76:38:29:82:21:ed:
c0:2f:75:0a:0f:25:57:2c:d1:bc:9b:2c:4b:1d:98:
4d:78:60:6a:d0:ed:9d:b2:73:91:01:40:db:3d:07:
d6:62:b5:fd:d6:aa:d9:f0:64:97:c1:2c:46:eb:06:
64:9e:31:bd:97:4b:b6:3a:04:b4:0e:0f:b2:0b:a4:
88:d0:9b:24:85:9f:e9:f7:f7:d1:6f:00:02:52:d1:
2f:5f:08:97:4e:fc:7c:59:92:ed:0a:da:2a:c0:2b:
47:68:bc:7d:60:fe:47:6f:60:19:16:6f:54:21:52:
db:49:23:78:94:e2:50:af:ba:16:a3:98:54:cc:a9:
24:41:84:e1:20:1c:00:08:e8:3f:a0:29:c5:eb:59:
53:e3:df:6e:02:07:e2:3f:f4:0a:9c:c0:6b:fb:63:
ee:1c:1d:60:05:98:dd:51:e5:8a:ec:40:85:a0:90:
43:84:52:d6:1b:71:85:89:d8:a8:74:25:49:75:96:
5d:85:5b:da:1a:ef:31:cb:95:e2:62:64:44:06:7e:
53:c4:1e:0e:a9:b7:d9:33:d2:f3:d5:88:b4:08:e4:
03:9d:67:c9:e9:ed:b9:4c:06:8c:19:71:2d:cb:5f:
8c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:50:1E:73:41:B0:33:FA:78:40:1E:1D:D4:57:FA:2A:45:24:DB:95
X509v3 Authority Key Identifier:
keyid:81:8E:5E:64:3C:3D:A2:12:D2:02:2D:66:97:14:B0:87:58:15:15:C6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cc.rg.net/rpki/RGnet-cc/gY5eZDw9ohLSAi1mlxSwh1gVFcY.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/gY5eZDw9ohLSAi1mlxSwh1gVFcY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://cc.rg.net/rpki/RGnet-cc/aFAec0GwM_p4QB4d1Ff6KkUk25U.roa
RPKI Notify - URI:https://cc.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
198.180.153.0/24
Signature Algorithm: sha256WithRSAEncryption
69:58:c8:75:7f:c8:9c:e2:ec:44:02:b2:5d:5c:d6:ce:d2:27:
a1:f0:94:29:12:b8:90:53:b5:2b:ed:22:82:fb:d8:15:16:50:
21:cd:b1:34:8e:7c:0a:9b:0a:27:9c:1b:e5:1a:0a:98:a8:8d:
7a:0a:dc:9e:f4:ae:19:78:dc:3f:52:b8:4e:b2:17:38:89:d8:
fb:a9:10:73:42:9c:cc:6e:d5:a2:91:f6:3c:07:46:e4:f7:fb:
11:91:18:b3:d9:10:0e:cc:b9:8e:2f:26:ad:6a:50:cb:df:7b:
e1:94:3b:d5:3a:50:52:54:c8:e4:59:54:e9:04:12:54:f7:46:
5c:1f:9c:f8:8e:0e:9d:f8:3f:d3:e0:aa:de:ff:31:7f:86:b9:
49:02:97:a2:60:08:8f:fc:14:ce:58:4a:02:62:46:e1:02:aa:
45:79:89:49:0d:c0:3d:17:16:ab:56:2a:78:d6:8d:58:4e:dc:
45:60:48:c1:7b:21:e2:24:8a:bb:9c:e1:56:71:4d:21:35:ee:
ca:16:ca:5a:af:08:7d:c2:38:8b:9f:ff:b0:83:0f:4f:14:62:
f0:69:c6:39:ac:2c:09:ee:1e:68:e8:2d:8f:5c:af:42:d9:32:
92:f8:7c:26:66:db:67:85:99:09:6f:6b:cd:e6:5b:5c:15:95:
bf:78:9c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:52:47 2025 by rpki-client