Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/f5bXWZIbmX9l-V-WEh8EZ3S2bww.roa
File: f5bXWZIbmX9l-V-WEh8EZ3S2bww.roa (raw, json)
Hash identifier: 0uF1RmjUPiZ8U98A9MF6vbGruchun8oeK5LYe+WPPMA=
Subject key identifier: 7F:96:D7:59:92:1B:99:7F:65:F9:5F:96:12:1F:04:67:74:B6:6F:0C
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4771
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/f5bXWZIbmX9l-V-WEh8EZ3S2bww.roa
Signing time: Wed 04 May 2022 00:30:11 +0000
ROA not before: Wed 04 May 2022 00:30:11 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18289 (0x4771)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 4 00:30:11 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=7F96D759921B997F65F95F96121F046774B66F0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:d5:58:7f:15:0c:98:42:0e:e7:7d:a4:22:a0:
c0:f4:6a:6f:c4:01:31:0f:da:3b:3b:cf:50:55:2e:
b9:e8:11:d6:ee:8d:3f:1e:59:fc:0e:a8:9f:06:1b:
e7:58:48:68:02:40:cd:00:9d:c8:de:03:f0:15:39:
64:6a:76:d2:af:4c:09:d6:85:0a:68:0b:25:4b:4f:
e6:43:a3:c4:6e:98:b4:40:62:9e:44:22:51:f0:28:
22:6c:a9:ff:bc:c2:e0:65:c3:ac:c1:b8:99:60:5b:
cd:9b:2e:8e:56:18:28:9e:05:63:c5:62:a2:25:47:
8b:50:84:9f:ff:36:a6:02:7b:87:a9:b4:94:2c:9e:
6b:1b:bc:cf:52:91:5c:31:bc:60:eb:67:77:59:29:
31:ee:41:0f:42:cf:e9:e4:bd:2d:72:32:42:5f:e6:
68:23:3a:f4:3d:e6:d5:3e:77:5f:06:fe:d7:5b:64:
b6:e0:4c:9a:85:fb:6a:45:8d:d1:41:29:62:ab:6d:
88:81:12:7f:82:d2:3f:03:ff:6f:ee:6b:6e:da:48:
1f:33:eb:cb:1b:e0:15:03:87:b1:ce:2b:20:e8:23:
5e:38:01:7f:5a:11:d5:66:44:c0:2c:b6:2a:07:72:
5f:63:17:a8:90:fb:85:60:f6:6f:5c:3d:18:6b:ff:
28:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:96:D7:59:92:1B:99:7F:65:F9:5F:96:12:1F:04:67:74:B6:6F:0C
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/f5bXWZIbmX9l-V-WEh8EZ3S2bww.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:83:fc:bd:e9:1a:72:9b:59:f8:58:d7:d3:6a:5a:59:fb:b3:
b4:c5:48:5f:d0:47:ab:34:e4:0c:ac:da:a5:f5:59:22:5d:bb:
73:e9:ab:e8:1c:c2:0e:81:5d:2e:ca:f7:18:d1:95:67:ad:1a:
dd:e6:58:c4:79:02:71:e0:ec:79:32:60:a5:d6:5d:2e:9f:66:
29:b8:bf:9e:dd:42:91:e1:80:cc:9e:67:6a:3d:f6:67:e1:d4:
0a:5d:bb:a2:da:3e:b9:75:8d:19:27:00:b3:8e:87:20:1e:6b:
60:22:37:b4:9b:da:49:87:74:a3:e6:39:0d:30:ef:02:98:b8:
2f:fa:c5:9f:17:3b:8a:ba:52:0c:1d:c4:a1:c1:2b:fd:d2:19:
20:f6:e1:7d:f5:e6:6f:55:c9:25:89:bb:d7:45:3f:2a:21:b4:
d8:d7:fd:bb:d4:83:50:25:8e:61:52:9e:85:b4:a4:e1:9a:6f:
79:5f:c9:92:12:88:9f:55:2a:d0:bc:31:67:f4:6c:42:ec:13:
8e:ef:11:29:0c:b0:0a:52:bb:56:ab:df:51:ee:60:36:04:4c:
4d:cb:e9:8e:6e:b0:df:dd:0a:93:11:12:c4:36:2e:5c:4d:81:
fd:ab:0b:83:ac:29:49:4e:39:bb:ff:60:30:51:f7:3f:51:c2:
ab:75:99:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org