Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/7_GS4DmiiHM7HYaB8LIsHuRaFVY.roa
File: 7_GS4DmiiHM7HYaB8LIsHuRaFVY.roa (raw, json)
Hash identifier: hAHxj7XU3fjc7rB9007bWJQSxGQHIlWaejusqBkvaZk=
Subject key identifier: EF:F1:92:E0:39:A2:88:73:3B:1D:86:81:F0:B2:2C:1E:E4:5A:15:56
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 44BE
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/7_GS4DmiiHM7HYaB8LIsHuRaFVY.roa
Signing time: Wed 16 Mar 2022 00:30:06 +0000
ROA not before: Wed 16 Mar 2022 00:30:06 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17598 (0x44be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 16 00:30:06 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=EFF192E039A288733B1D8681F0B22C1EE45A1556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:26:77:2b:c4:79:7a:e5:cb:d7:00:ca:d8:db:
79:8b:6e:37:5d:18:55:0e:c8:85:e6:17:44:be:01:
ab:8c:9c:29:9c:ab:5b:82:3d:3b:cc:9a:c2:61:cc:
62:89:ce:65:2f:89:8b:c7:f8:ac:8b:2b:68:16:33:
74:5b:84:9a:c3:ef:aa:10:72:8f:06:8e:49:fd:e7:
66:1b:ef:58:27:fd:2d:9e:b5:f8:b7:80:c0:46:6f:
f9:05:73:8b:b5:2e:ad:5c:c4:41:dd:2e:9a:8f:58:
3f:4f:de:38:2a:3d:c7:f5:8f:ed:d5:4c:62:09:8d:
ed:f1:a3:81:02:bf:51:b0:6b:75:36:8b:36:d6:69:
bd:c9:08:5e:8e:66:bf:2d:dc:99:11:66:23:e2:11:
cf:f9:4c:14:15:fd:cf:fc:86:df:e5:ac:08:48:66:
ed:3e:8f:ac:05:ab:0b:47:56:dd:00:49:92:41:e3:
1b:f9:2f:01:a0:0c:2b:cf:f4:32:0b:a5:14:4f:7a:
17:d4:45:09:04:46:75:3d:3e:6f:98:49:e5:d5:9a:
b8:d5:16:58:28:26:34:d6:73:52:83:f1:6d:82:42:
43:ac:01:55:43:df:0e:9a:0f:fb:84:36:61:aa:bd:
57:26:1e:47:13:81:46:f2:f0:24:ab:81:03:d2:39:
0e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F1:92:E0:39:A2:88:73:3B:1D:86:81:F0:B2:2C:1E:E4:5A:15:56
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/7_GS4DmiiHM7HYaB8LIsHuRaFVY.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:97:5b:c1:e0:eb:2b:87:fe:9b:fb:16:0c:09:d2:22:16:eb:
a9:f3:3a:04:47:b4:f8:93:19:69:93:ea:1e:fc:a3:78:f3:f4:
bf:39:db:4c:83:6b:2f:70:a2:f8:c9:6b:9e:4f:04:96:c0:1a:
d0:45:4d:f3:5e:bf:47:ea:6b:83:be:09:b4:cf:9f:b6:3a:61:
ba:1b:96:74:0e:90:c2:6e:5f:33:c2:96:69:a8:14:5d:ca:1c:
a3:3d:e0:e1:dd:3b:5a:9d:51:83:8d:01:24:c0:24:17:60:0e:
6f:d0:12:36:b5:04:da:c1:22:03:0f:51:75:a4:4f:59:da:03:
9a:64:34:f4:6d:c9:d0:1e:ec:fa:96:39:1b:89:79:f3:12:8f:
3f:ef:76:ff:a0:ea:8e:63:58:82:4b:b4:f1:c5:77:cc:64:cd:
51:78:4d:e4:54:21:69:18:29:0d:b5:c7:27:f8:4e:85:fe:7c:
23:5c:7e:db:7a:25:cb:32:a1:84:5a:86:60:7e:14:0b:b3:a7:
17:11:73:11:94:9e:9d:29:c2:5d:b7:22:d6:13:8b:87:f5:49:
84:08:99:01:ec:01:eb:fd:3d:78:81:c1:ef:4e:2b:44:e0:e8:
0a:74:fd:38:aa:c7:f1:c2:b3:7f:bc:81:1c:e8:77:bc:6f:72:
94:6e:46:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org