Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/Wc2876QeZ_YQzF0B-CZPwZAx-4w.roa
File: Wc2876QeZ_YQzF0B-CZPwZAx-4w.roa (raw, json)
Hash identifier: m+T5dmf0trUviPraRic/DPJIPeWDJNd7+w4ddBy6ABU=
Subject key identifier: 59:CD:BC:EF:A4:1E:67:F6:10:CC:5D:01:F8:26:4F:C1:90:31:FB:8C
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 427D
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Wc2876QeZ_YQzF0B-CZPwZAx-4w.roa
Signing time: Wed 02 Feb 2022 00:30:06 +0000
ROA not before: Wed 02 Feb 2022 00:30:06 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17021 (0x427d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 2 00:30:06 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=59CDBCEFA41E67F610CC5D01F8264FC19031FB8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6e:11:89:db:e0:02:97:69:a0:25:a1:58:d2:
b6:2e:51:bf:d8:e2:88:1c:2c:44:1b:b3:0e:7c:82:
e6:36:56:77:4c:c6:91:95:15:2f:35:11:e6:54:ba:
3e:43:24:c0:aa:41:36:fd:30:2a:73:b8:8a:ab:45:
b5:a1:42:40:12:a4:0a:74:cf:84:01:05:be:8f:07:
3a:ab:28:09:12:24:e6:cc:15:ba:70:73:69:21:7d:
7b:04:02:08:19:00:54:f0:2e:b2:c6:7b:dc:44:9b:
1d:f8:1f:32:90:06:4a:48:f4:30:27:53:a2:c3:7d:
ad:f8:1e:7c:ab:ca:9c:1f:86:d0:24:24:37:bb:15:
98:b2:a3:32:cb:f7:00:58:a9:15:fb:c3:c3:26:a0:
41:84:4a:ce:dd:18:db:c0:90:1e:40:59:28:40:54:
0d:2c:45:b4:2d:ce:16:df:4e:54:42:a1:a5:fd:8e:
30:08:48:24:a7:ff:0a:7e:a6:ae:97:63:10:34:55:
b0:39:a0:91:eb:0b:e1:6e:60:4a:b1:ea:5a:bd:e0:
2b:b5:67:3b:66:f1:3f:d6:33:06:73:69:75:fc:de:
23:e1:ab:6c:db:12:6c:ab:7f:b6:2d:5b:be:f8:ef:
ef:03:8b:07:85:fb:ac:e8:05:4f:33:51:7c:e2:76:
d1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CD:BC:EF:A4:1E:67:F6:10:CC:5D:01:F8:26:4F:C1:90:31:FB:8C
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Wc2876QeZ_YQzF0B-CZPwZAx-4w.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
03:a8:b7:27:e8:b6:c9:e5:06:f6:5b:47:36:46:81:2a:9b:94:
bc:e9:94:02:63:df:2f:fd:6d:30:e0:8f:9e:31:ca:fc:cb:a2:
8d:0e:40:1b:ac:14:5c:ba:05:07:ec:5e:76:b1:76:bb:d3:c3:
94:56:81:c8:58:9c:2d:f5:ed:98:0e:df:2f:b3:17:75:ef:34:
90:b7:a4:68:d6:93:0f:4f:70:75:72:79:47:ae:f5:c4:66:65:
c5:4e:95:c3:0e:f7:d6:58:84:e4:d5:a4:8a:ce:0f:77:87:6a:
f5:8c:69:9d:11:2f:6f:6f:ee:1a:13:6b:08:6f:7d:ca:db:00:
44:e1:19:00:e0:41:53:c2:c0:ec:45:6b:03:12:ff:49:5d:aa:
b1:0c:39:9a:96:14:96:84:6b:be:78:97:31:4a:2d:b8:cb:59:
4d:7e:4a:7e:29:15:be:84:b1:dc:dd:38:9c:6b:ce:0c:17:37:
a6:ce:cb:85:a6:58:28:ee:6e:61:13:23:3d:22:18:1e:38:61:
4a:6f:79:fb:f6:d5:4c:93:e1:a4:18:8d:de:50:b6:95:c4:8c:
00:39:d7:e0:e9:ab:8d:65:1b:a3:b8:b3:0e:98:9a:d3:fe:6f:
3c:2b:f8:44:58:85:3d:21:ea:5c:b6:a2:74:05:e3:c1:15:8a:
62:f4:63:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org