Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/9w-OLVNygDIid2_AGlYZ1ezry8g.roa
File: 9w-OLVNygDIid2_AGlYZ1ezry8g.roa (raw, json)
Hash identifier: sFvKWEBOwtM7KkVoHqMmKx2kkQaARXJ+p3tywrOeoVs=
Subject key identifier: F7:0F:8E:2D:53:72:80:32:22:77:6F:C0:1A:56:19:D5:EC:EB:CB:C8
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4847
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/9w-OLVNygDIid2_AGlYZ1ezry8g.roa
Signing time: Thu 19 May 2022 00:30:09 +0000
ROA not before: Thu 19 May 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18503 (0x4847)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 19 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=F70F8E2D5372803222776FC01A5619D5ECEBCBC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3c:b9:b5:dd:f0:0a:9e:e8:a9:5d:15:77:7e:
10:25:60:8c:4e:db:46:8d:7e:21:c9:00:24:fc:2a:
2c:76:8c:39:b0:df:ea:b9:33:04:e3:03:6e:16:67:
e6:27:a3:28:27:4c:9f:ce:e4:9c:b7:7e:75:43:1b:
99:1c:35:58:cf:cd:5c:86:85:38:fc:45:fb:d8:f8:
54:88:f9:04:c0:5f:91:52:b0:80:35:62:ae:9e:42:
7d:a4:ce:00:cc:8e:41:ff:a0:a5:b2:4e:4c:f6:9b:
7a:10:63:2f:15:e4:e8:41:6b:67:1a:cb:f1:99:98:
0b:c9:bc:0d:9c:e6:d6:25:1f:e7:6e:cd:99:70:ac:
3c:82:83:56:ea:b7:1e:f8:6f:e9:de:37:2e:72:03:
b6:ba:67:47:41:b8:a6:05:df:37:a3:e0:66:4d:f8:
f1:86:fb:1e:2a:bd:ae:c7:b5:54:82:af:8e:ed:51:
15:60:59:66:f7:28:a8:99:9e:93:f5:96:bf:99:f4:
e2:a9:33:02:01:a3:8c:c4:f0:4f:3a:1e:ca:f7:03:
09:df:66:9f:04:a6:a0:68:a1:37:01:c4:70:9a:68:
50:45:2a:21:e3:ff:7a:2e:e6:8f:05:9a:cb:29:5f:
e5:fb:31:7f:c5:54:35:87:80:28:dd:84:89:e1:f8:
e4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0F:8E:2D:53:72:80:32:22:77:6F:C0:1A:56:19:D5:EC:EB:CB:C8
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/9w-OLVNygDIid2_AGlYZ1ezry8g.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:23:70:4f:fb:74:1a:47:37:37:b5:53:a9:51:10:f6:04:bd:
be:ba:c1:75:12:bf:c6:ea:50:f4:a4:b8:28:24:d9:c6:9e:09:
c0:cb:36:68:c8:b7:94:2d:cf:b1:5d:dc:b2:fa:39:c0:45:65:
43:c2:af:aa:24:08:15:79:e1:22:e1:4b:d7:1c:93:39:a0:c3:
b5:34:56:b3:f1:da:25:6e:df:24:5d:5f:e4:d7:a2:53:35:1b:
36:fe:fb:71:d7:49:7a:a0:41:18:63:67:0c:69:6c:91:ba:f8:
52:00:35:6c:6b:67:e0:32:77:81:95:3f:79:17:12:f1:57:c2:
7c:9a:50:7a:dd:83:24:d9:97:cc:7e:fb:65:27:06:e7:54:db:
9b:39:d3:74:90:3a:47:b0:d4:0c:e0:d0:f1:e9:41:b4:53:38:
76:89:cd:7a:de:c0:c7:b8:5f:49:3c:4c:6d:3f:ba:0b:59:18:
ef:b7:70:47:1d:5d:94:0a:d1:af:da:19:99:da:7e:ee:df:c2:
3b:52:53:80:2e:65:cc:c3:2f:56:fc:be:7d:d1:81:ea:8f:23:
18:8b:14:9d:9b:0b:b4:3d:30:11:9e:48:c1:13:e7:62:91:48:
4d:2a:49:11:3c:6b:f5:05:ac:55:96:4e:ec:52:cd:4f:8d:f2:
25:32:98:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org