Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/Q0QlpnrBPkiogrkvMz_FTrrqY4k.roa
File: Q0QlpnrBPkiogrkvMz_FTrrqY4k.roa (raw, json)
Hash identifier: fzIKt7XAcy0elKrBDGO2YfLyneDG+FpJ3SJPrvxoc5A=
Subject key identifier: 43:44:25:A6:7A:C1:3E:48:A8:82:B9:2F:33:3F:C5:4E:BA:EA:63:89
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4953
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Q0QlpnrBPkiogrkvMz_FTrrqY4k.roa
Signing time: Sat 04 Jun 2022 00:30:12 +0000
ROA not before: Sat 04 Jun 2022 00:30:12 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18771 (0x4953)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 4 00:30:12 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=434425A67AC13E48A882B92F333FC54EBAEA6389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b2:12:1d:1e:54:f9:f6:29:5f:bb:89:79:46:
61:43:90:6c:44:ec:54:ac:57:86:78:d3:f7:22:28:
de:b8:53:31:ea:b0:d7:7e:92:bc:9f:d6:7d:3f:46:
0f:ab:c0:66:a7:4a:19:56:ba:a0:ac:1c:fd:e6:de:
5f:00:6e:dc:76:59:3d:04:f4:a8:bb:f0:f0:b1:50:
cf:b9:de:c2:65:e4:f1:5f:b0:b6:e9:ed:3e:e5:8f:
5c:88:51:32:c6:2c:29:dd:9d:e6:41:f5:99:d5:2b:
45:56:a8:7a:22:b7:25:ee:0b:ab:ca:42:d5:d5:f8:
27:c6:14:1d:f9:ea:53:69:fc:f5:80:88:54:e7:44:
32:01:bb:94:e5:e5:c8:2b:24:79:9d:f4:72:5a:46:
67:c5:56:4c:87:f7:90:29:0d:26:91:20:bb:39:e2:
19:ee:78:92:5a:9a:5d:b0:dc:b6:e5:c6:37:90:13:
9a:6b:e1:bc:fe:d0:d6:74:66:28:38:69:3e:5b:4c:
59:37:57:fd:da:51:9d:9f:ba:36:cf:9c:e9:ec:fa:
2f:d5:2e:02:77:62:b0:83:87:65:e2:40:bd:68:22:
b5:fd:ae:f4:80:5f:0d:e0:2c:4e:fc:71:e5:2a:3c:
11:b5:ff:15:11:c1:16:5f:1a:3e:4b:f0:2e:14:d9:
43:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:44:25:A6:7A:C1:3E:48:A8:82:B9:2F:33:3F:C5:4E:BA:EA:63:89
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Q0QlpnrBPkiogrkvMz_FTrrqY4k.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.4.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:c9:33:6c:37:c8:fa:32:d4:e9:8b:9a:1c:43:9b:f2:f6:6c:
d5:74:45:a2:d6:7b:5e:1d:da:d5:c4:f3:a3:09:af:5a:f3:a6:
ef:d0:79:40:bb:d7:80:fe:fe:e2:c3:ab:89:77:03:b3:98:d5:
44:b1:a9:15:e4:69:3b:f8:c3:d5:80:a8:76:b2:90:22:08:c4:
ba:c0:ec:70:98:21:a5:08:31:55:7e:de:ad:bb:8b:c2:fa:8b:
98:0c:02:79:41:f4:86:da:d4:f8:ec:b0:5a:f1:ac:15:0f:0e:
89:6d:27:22:5f:a3:11:31:ef:04:61:1b:82:f5:6a:61:6f:68:
5e:89:fa:f9:6d:f2:73:dc:47:29:8e:01:49:6e:9e:f9:5b:e6:
04:48:ee:04:8c:09:42:f2:0c:e7:73:66:22:a2:ed:3c:7e:5d:
0f:bd:39:3a:34:78:d4:39:5d:9c:50:ed:f1:fb:e3:1a:55:53:
0c:4d:c9:4b:d0:46:e4:6a:41:37:27:5a:26:67:e5:25:d4:a8:
c7:ca:03:e5:4f:86:16:27:a4:f6:d9:23:de:40:a8:c5:a9:c4:
ca:e1:fe:2a:fe:5f:25:9f:e0:1f:e4:b3:ed:28:b3:28:e9:15:
d3:52:08:d2:bb:93:4d:6d:33:1c:77:39:60:dc:56:0d:37:d3:
e9:ce:93:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org