Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/F2wQ2A-daOz_4MGxBpQ9l186EZo.roa
File: F2wQ2A-daOz_4MGxBpQ9l186EZo.roa (raw, json)
Hash identifier: sIZIvg7sgQOCo20bedDmYht+wxczfoDaBSTm9iv9QU0=
Subject key identifier: 17:6C:10:D8:0F:9D:68:EC:FF:E0:C1:B1:06:94:3D:97:5F:3A:11:9A
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 48B0
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/F2wQ2A-daOz_4MGxBpQ9l186EZo.roa
Signing time: Fri 27 May 2022 00:30:06 +0000
ROA not before: Fri 27 May 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18608 (0x48b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 27 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=176C10D80F9D68ECFFE0C1B106943D975F3A119A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:12:2c:f7:e0:aa:6b:6f:39:7d:0b:ab:1d:e6:
b2:02:6e:74:d1:e7:30:36:b1:77:60:f3:80:9e:f1:
bd:49:5e:1b:9b:99:86:55:9d:86:7a:3d:5b:9e:85:
23:45:4a:67:ef:93:d1:26:e1:cb:3d:85:29:0f:15:
6b:0c:e6:da:3e:0e:aa:30:71:8e:05:8c:00:a0:80:
2a:e9:67:5d:63:b0:14:b2:e1:ec:33:a4:c6:1e:a2:
35:3b:78:66:5b:67:b6:a0:05:f7:58:3d:51:ac:3f:
2d:0e:00:55:30:cc:3d:c2:95:cf:9d:10:21:61:19:
f2:4a:ce:bd:83:93:ce:b1:a6:30:3d:b4:f0:a6:94:
13:22:87:66:a0:59:84:ce:08:35:d6:6a:5b:f5:57:
7f:d2:a3:20:9e:96:fd:03:32:f8:22:c9:5d:22:2d:
3a:d2:23:34:54:d5:f5:c5:62:75:89:ad:02:d3:72:
fe:e6:dc:89:23:74:61:72:4f:0d:1a:d5:47:6e:4c:
0a:55:f0:4b:3b:e7:b7:0c:3b:8f:3f:92:b8:09:2b:
d9:bf:d6:02:68:3d:db:77:ff:51:aa:35:08:70:79:
16:fb:f7:70:c5:55:d8:e0:c0:6c:06:d0:d0:7a:2c:
16:47:98:d6:0e:53:7a:b5:a5:87:7d:b7:ba:7d:c6:
d5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6C:10:D8:0F:9D:68:EC:FF:E0:C1:B1:06:94:3D:97:5F:3A:11:9A
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/F2wQ2A-daOz_4MGxBpQ9l186EZo.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:37:f3:a5:b7:ac:33:c0:27:cb:a9:16:17:29:68:63:54:86:
6c:41:5e:73:77:3a:1f:16:19:3f:48:8e:cc:db:7d:82:0a:3e:
60:8f:7e:b1:5f:d0:f2:fe:96:42:f1:7e:b1:04:32:84:93:e3:
40:31:11:14:bc:63:b0:05:04:31:0e:64:96:ca:2b:47:f4:4d:
f7:8e:53:f3:9f:8a:4e:44:b0:8c:0e:11:49:f3:a1:03:b5:2a:
47:b5:6d:ee:25:6a:77:16:bf:14:fd:41:38:eb:61:bc:d1:2e:
41:01:89:c6:41:7a:e3:35:3b:cf:5e:74:07:40:19:4f:4f:7d:
76:5a:72:9a:46:df:a6:1e:5c:19:66:18:18:a8:92:5d:b1:58:
a1:23:7c:e6:53:58:76:3f:2a:04:9f:75:bc:5d:3f:56:35:57:
73:5d:aa:88:87:15:a2:ad:08:e5:8b:30:f9:74:ea:6f:53:8d:
61:8c:9b:a3:1f:e3:32:07:1e:ee:04:3a:94:92:04:52:d1:13:
7a:50:97:26:09:dd:b1:27:7a:92:44:1b:33:9b:38:d9:c7:82:
29:bb:1d:de:aa:22:1a:88:cf:e1:8f:fd:11:a2:af:e8:b6:0c:
1f:f1:ed:21:23:e0:31:74:b5:93:b1:02:bf:9b:34:99:37:d0:
19:83:3d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org