Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/Xu0gI6tDcsRtV5a-LfF6tndnd5I.roa
File: Xu0gI6tDcsRtV5a-LfF6tndnd5I.roa (raw, json)
Hash identifier: 1Q53HtP4ZgcLOwSQdiJhRAg2YZIVwcs8jMdUxatPRX0=
Subject key identifier: 5E:ED:20:23:AB:43:72:C4:6D:57:96:BE:2D:F1:7A:B6:77:67:77:92
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4494
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Xu0gI6tDcsRtV5a-LfF6tndnd5I.roa
Signing time: Sun 13 Mar 2022 00:30:06 +0000
ROA not before: Sun 13 Mar 2022 00:30:06 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17556 (0x4494)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 13 00:30:06 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=5EED2023AB4372C46D5796BE2DF17AB677677792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7c:aa:5c:32:8b:89:cf:4a:00:04:26:88:c8:
ae:6d:aa:97:9d:b5:79:57:69:8e:5b:71:39:3b:6b:
c1:42:63:65:5d:90:ef:d3:ca:90:f8:88:1d:1d:a6:
7a:96:6b:22:ed:5b:19:13:53:88:ff:24:87:78:cd:
dd:f1:3e:39:3b:a5:45:e2:7a:cf:c4:a9:3a:29:4c:
05:e2:ad:61:fd:69:21:c1:7d:c5:bc:02:05:7f:15:
74:38:30:57:6e:55:ee:90:42:64:a3:9e:4e:14:81:
1b:5d:d8:1a:1e:1c:8c:ef:a7:df:b0:a3:a3:b8:47:
fb:5d:44:9d:56:df:34:1d:2c:47:31:00:a8:91:28:
11:69:a0:66:b0:ba:2d:5e:c6:19:90:64:38:fc:a8:
66:bf:b9:65:36:e7:17:75:0b:a3:3e:24:58:e3:2c:
8e:d2:f0:19:ae:c8:2d:a8:80:ec:e3:70:1c:76:89:
4a:d8:60:1c:15:bb:04:f8:52:79:33:12:f2:8c:8e:
50:6f:85:3b:b0:24:03:32:8f:ff:c2:69:0d:39:f3:
56:f9:98:49:02:8c:27:46:20:61:3b:7b:cb:a0:fa:
11:33:06:04:99:44:89:08:b5:50:dc:a6:c8:c0:6a:
13:78:07:75:22:86:54:ca:04:2c:22:04:74:bd:91:
11:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:ED:20:23:AB:43:72:C4:6D:57:96:BE:2D:F1:7A:B6:77:67:77:92
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Xu0gI6tDcsRtV5a-LfF6tndnd5I.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:db:12:9a:9f:a6:8e:94:55:36:ae:76:95:a8:7c:b6:8b:79:
c7:82:a1:e1:8d:ae:3c:ac:ab:d4:96:86:2c:ca:5e:3e:fe:d1:
1f:d6:4d:69:99:26:24:74:6d:50:cf:57:55:63:2c:eb:9b:28:
3f:65:d9:d3:bc:ca:0b:88:a4:c5:b1:9f:7e:bb:36:d0:a3:1d:
5c:9e:c0:15:27:0c:2b:90:b3:89:f0:4a:f2:e9:fd:bc:b5:b5:
e7:d1:e6:55:b3:46:c4:47:cd:96:aa:d5:1b:03:7a:00:ba:3a:
90:04:87:0e:44:a4:09:69:9b:14:72:67:52:ae:ff:8e:ad:e0:
5c:68:8d:a0:24:57:f7:c2:3c:d4:72:20:a0:b7:00:a1:1c:fd:
6f:38:c5:9c:c6:fc:e1:12:5c:87:67:df:24:1e:d6:e4:d6:0c:
55:71:77:0b:c1:24:f3:31:de:12:e2:63:e6:79:8c:2e:3c:5c:
28:2d:62:82:62:40:63:37:aa:c0:6a:d9:36:12:df:a4:21:18:
dd:95:2a:ef:aa:cc:51:26:d9:8d:e3:83:61:59:d1:19:95:ca:
14:01:d9:12:cd:97:5d:f4:5f:67:94:6c:7f:0b:dd:c4:7e:54:
e0:16:35:77:c0:d2:5e:5b:73:87:32:a9:97:41:b0:6d:fd:56:
a7:d2:de:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org