Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/FPB9_VdExB2IPCPvkOYDndzUtjc.roa
File: FPB9_VdExB2IPCPvkOYDndzUtjc.roa (raw, json)
Hash identifier: aVVGLIEA7s3LJt+eIsnmTCcOq2wolPoFX0FYJWVuwtk=
Subject key identifier: 14:F0:7D:FD:57:44:C4:1D:88:3C:23:EF:90:E6:03:9D:DC:D4:B6:37
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 48A5
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/FPB9_VdExB2IPCPvkOYDndzUtjc.roa
Signing time: Thu 26 May 2022 00:30:16 +0000
ROA not before: Thu 26 May 2022 00:30:16 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18597 (0x48a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 26 00:30:16 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=14F07DFD5744C41D883C23EF90E6039DDCD4B637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d6:d9:3f:bf:17:40:1d:aa:10:11:fc:5b:34:
37:b6:1a:7b:22:c7:10:81:1e:bf:5d:dd:98:65:cd:
2d:6a:e0:b5:6e:81:6d:af:f8:61:56:8f:a4:c6:2f:
0c:8e:08:64:90:23:81:01:6f:e2:75:fc:24:fa:67:
fa:5e:a8:f7:79:d8:42:ae:5a:b7:85:33:d4:c4:a7:
1d:92:89:72:8f:95:b2:0c:f5:5d:41:dd:c0:de:92:
e9:4e:b7:8c:66:5d:59:40:17:5b:27:2c:ca:47:e7:
e2:1e:07:c4:1c:31:10:a2:a4:8f:b4:78:a0:94:22:
27:e3:1b:63:50:85:fd:96:71:b4:98:39:61:93:bc:
ac:16:89:d3:de:ba:53:dc:9f:47:6f:a0:e8:e6:ae:
aa:a9:e6:00:7d:85:f9:8d:31:53:84:58:2a:87:7f:
3f:39:4f:ae:2a:05:25:b6:0b:2f:40:1e:20:bf:68:
93:ed:8f:dc:d9:c5:af:2a:42:32:e6:1e:bd:93:43:
bf:b9:fe:d3:63:ec:65:d8:25:54:4d:62:c8:24:aa:
77:7b:b6:d0:30:13:80:20:a6:23:26:3f:4c:72:98:
94:7e:cc:17:32:c2:8c:6f:76:29:f0:3c:e3:94:f0:
c7:c8:4d:0d:16:5a:cf:e1:63:a4:30:e5:12:62:0b:
e1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F0:7D:FD:57:44:C4:1D:88:3C:23:EF:90:E6:03:9D:DC:D4:B6:37
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/FPB9_VdExB2IPCPvkOYDndzUtjc.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:3c:ae:23:03:02:b2:33:11:b1:ec:20:3d:6d:36:fa:3e:fa:
5c:2f:31:f8:e3:89:2a:2d:a8:fc:be:d6:a6:ce:1d:f8:73:e2:
7b:9a:f7:ae:f9:5c:2f:1a:ad:d0:e7:16:50:55:ae:2d:ae:4c:
72:ad:93:a1:b0:5d:dc:6d:b3:89:85:ad:a3:8b:f4:9f:a5:35:
46:08:0e:48:dc:a9:08:38:47:42:d0:6c:3f:93:72:2d:c7:c3:
8e:07:ee:4b:1d:54:f7:c3:fc:0e:eb:e9:47:16:95:95:b3:7f:
36:6b:8d:f2:89:c0:fc:47:2d:90:b6:b6:57:c4:c4:9e:39:f5:
c4:70:df:35:5d:b7:34:9a:32:7c:84:7c:86:10:0a:e6:7c:d2:
a5:66:a2:8c:9e:f1:89:f4:8d:7d:e1:0f:16:35:e4:3f:29:de:
08:c4:76:2e:f2:7f:91:60:81:bd:c1:3f:d5:c0:6e:9f:5b:cb:
71:4b:82:78:50:1a:ae:f7:6c:d9:6d:64:f5:6d:54:fa:05:8a:
b2:12:21:a6:08:3f:e3:d2:27:75:15:55:27:4a:9d:a0:e7:dc:
71:7f:25:7e:cb:74:7a:99:60:24:8b:e3:59:24:35:21:64:bd:
42:fc:ae:93:62:81:e1:12:88:5d:0a:ad:bb:c7:18:11:9a:3f:
2f:e9:1e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org