Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/J4nlsxT4Q7goauugBayhbsHNZBU.roa
File: J4nlsxT4Q7goauugBayhbsHNZBU.roa (raw, json)
Hash identifier: diDKuc1G1R46zXmINK57x+HQP6A5gZ6KDypyWA18nkw=
Subject key identifier: 27:89:E5:B3:14:F8:43:B8:28:6A:EB:A0:05:AC:A1:6E:C1:CD:64:15
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 476E
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/J4nlsxT4Q7goauugBayhbsHNZBU.roa
Signing time: Wed 04 May 2022 00:30:08 +0000
ROA not before: Wed 04 May 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18286 (0x476e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 4 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=2789E5B314F843B8286AEBA005ACA16EC1CD6415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:71:39:13:27:74:b6:aa:66:29:1f:b6:00:ee:
44:1c:9b:d1:21:b2:00:56:3b:41:2e:f4:86:4a:b7:
2f:59:42:3a:cc:77:4b:47:d2:69:b7:b0:88:20:ca:
4a:78:61:87:bc:d2:22:87:d2:8c:af:e9:19:27:35:
92:ed:c0:d2:c2:ea:61:4d:6c:74:ce:38:c5:70:a8:
ed:6d:65:f4:23:0e:9e:c7:21:21:94:d7:ad:1b:8a:
ff:b4:32:48:43:1a:9b:55:53:53:1b:51:e3:3a:0a:
7d:b5:ab:a8:f6:ad:c7:a4:20:e4:9e:71:23:4d:23:
f3:e1:54:ad:43:03:eb:21:03:fa:0a:a0:32:fa:dc:
0f:6d:d0:25:f0:59:f3:e9:ab:ea:84:37:c1:c5:82:
46:cf:b7:0a:7f:eb:88:3e:e3:9d:06:b6:0e:f9:f8:
0c:d6:58:5b:d9:53:1b:88:ea:63:49:90:d4:3f:a6:
9c:3d:52:20:8c:e3:47:fc:67:d0:c2:a8:a0:b3:7b:
1b:04:5c:76:bf:9b:4a:fc:f5:48:e7:38:1a:29:25:
4a:43:c5:8c:84:57:7a:ca:79:31:c9:e2:3d:88:43:
c5:0f:9f:61:f2:04:88:80:b0:de:a1:62:1e:52:37:
bf:e0:aa:7f:d4:63:22:1f:50:30:7c:7f:02:7a:d6:
a9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:89:E5:B3:14:F8:43:B8:28:6A:EB:A0:05:AC:A1:6E:C1:CD:64:15
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/J4nlsxT4Q7goauugBayhbsHNZBU.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:f2:1c:b8:1b:db:bb:0d:59:2f:0e:4e:b0:7b:db:ff:59:8c:
1d:91:7c:f2:76:31:8d:0c:2a:18:b8:de:43:43:f4:8e:02:1e:
83:bf:e0:b1:34:c2:6a:78:5b:d0:92:2a:1f:72:39:ce:89:fe:
d0:47:98:33:dd:f3:cb:60:2f:be:00:27:60:88:f4:34:b8:f3:
bc:2a:c5:4b:ed:1a:7a:1e:1c:5b:36:f8:51:e2:88:40:61:c2:
27:72:06:fa:15:e2:d7:c8:48:ec:af:7d:8b:7f:46:6d:0d:71:
a3:55:20:63:98:e6:51:aa:4e:a3:85:a9:9c:c3:d3:8e:33:ed:
0b:ab:bd:bc:ce:f9:42:72:a4:bd:3b:17:5a:51:3e:20:1e:a9:
6d:5d:e1:54:2e:4c:85:23:47:c3:85:95:8a:fa:70:0c:c7:9a:
63:9a:c8:b0:23:aa:59:c0:7d:1d:41:d2:9b:69:8a:43:65:ba:
70:e8:9d:39:59:66:3b:36:13:e6:81:b2:4b:41:39:78:09:ec:
7c:68:06:eb:9d:92:0e:0e:f2:ba:74:fd:2c:3d:1d:b2:e8:83:
10:05:ae:3f:61:88:64:e5:ea:cc:72:7f:0b:9c:26:b9:f9:e8:
14:5e:03:cf:95:19:4b:ef:2d:5c:8a:86:dc:ae:f0:7d:70:1b:
ec:f5:bd:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org