Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/_Rs5a8-WZBLA_5DHZQKwxkiU0gI.roa
File: _Rs5a8-WZBLA_5DHZQKwxkiU0gI.roa (raw, json)
Hash identifier: 61qvx/c/mLlvIGXXsvnaG0BhdkW6qIXbFW081PdqgGE=
Subject key identifier: FD:1B:39:6B:CF:96:64:12:C0:FF:90:C7:65:02:B0:C6:48:94:D2:02
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 494F
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/_Rs5a8-WZBLA_5DHZQKwxkiU0gI.roa
Signing time: Sat 04 Jun 2022 00:30:10 +0000
ROA not before: Sat 04 Jun 2022 00:30:10 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18767 (0x494f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 4 00:30:10 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=FD1B396BCF966412C0FF90C76502B0C64894D202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:66:0a:0d:cd:15:c5:56:63:7b:1c:b9:65:4d:
83:4c:c2:93:11:73:9a:56:7b:a3:d7:d0:62:77:60:
2e:e0:fb:36:0a:f2:08:28:de:7f:83:21:a6:8b:44:
fb:ec:f7:6b:3d:9f:2a:f6:f7:55:cc:4c:ec:48:d7:
da:92:ee:47:f5:61:e1:98:13:95:80:de:00:8b:c1:
68:94:62:55:7b:a3:21:f7:45:ad:50:20:b4:fc:79:
34:2c:c7:48:3c:61:8e:fb:5d:98:84:62:65:a7:e3:
17:77:ec:b8:71:59:cb:c0:73:cc:d5:b2:8d:19:45:
d4:14:f3:2a:c2:82:7d:d2:c4:f4:db:d0:c5:87:96:
82:21:29:15:f9:14:d8:81:4b:97:3a:dd:67:2e:f3:
95:00:67:18:87:3f:d5:12:7c:cf:9c:53:d2:c7:f9:
ae:9e:20:22:76:e4:49:2a:da:a0:2b:35:8a:0b:56:
d4:cf:f3:3b:c4:cc:72:8b:56:f7:d8:76:e8:b7:83:
fe:ef:f5:ba:26:91:32:ee:21:6b:44:5b:41:4a:73:
40:e0:96:35:43:27:41:94:a0:d6:7d:c5:82:7d:fa:
b5:9a:93:bd:03:14:6f:10:99:11:ad:ff:6c:c8:50:
57:99:57:8a:56:4f:fb:ad:8b:90:2c:8d:24:80:f6:
e1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1B:39:6B:CF:96:64:12:C0:FF:90:C7:65:02:B0:C6:48:94:D2:02
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/_Rs5a8-WZBLA_5DHZQKwxkiU0gI.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.8.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:41:d0:77:6d:e8:18:85:f4:7b:b5:26:7f:79:ad:5b:1b:05:
74:29:d7:2d:66:20:73:43:80:e7:5e:26:d9:b1:3d:23:31:80:
dc:c5:b8:61:6b:39:33:9e:74:07:e6:e0:95:dc:ef:10:50:21:
af:58:72:e4:f0:5a:1c:3e:ac:18:c6:01:b6:7b:1f:a4:25:cb:
d2:a9:1f:b3:ca:b6:ab:46:fd:0e:9d:c6:2f:19:1e:54:da:50:
ad:b4:5f:00:b5:72:eb:2e:66:db:c6:6e:2e:42:4b:e2:f5:1f:
65:cd:fc:24:b1:5d:13:04:65:c4:bd:71:18:c3:33:c0:57:83:
5a:93:95:03:96:14:77:c1:c0:3a:ff:e6:d9:f3:4a:a0:32:24:
0b:3f:16:6c:32:de:c5:79:78:45:51:bb:6d:7b:50:98:51:70:
58:7e:10:6e:b8:7c:01:96:f7:9b:ef:f8:01:ae:a7:9c:4f:3c:
fa:be:31:87:6f:b5:5e:64:22:ae:36:83:4b:5a:f0:3a:b2:16:
29:d2:0d:3b:d2:fc:7f:0d:cd:0d:20:fb:9a:fe:eb:27:8c:e9:
18:f1:d6:20:e1:e6:2f:d9:13:a6:9b:a4:60:3f:0b:07:8c:b8:
04:c8:46:c3:8d:57:ce:ff:ae:0f:81:35:2a:0b:dd:b4:33:5a:
16:89:67:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org