Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/gT7kVeQZCgBKmMHat6DEYJoBtus.roa
File: gT7kVeQZCgBKmMHat6DEYJoBtus.roa (raw, json)
Hash identifier: 5RWQoRSfqMY9/kn1+3Fw/GqSUD9NWeqSPoh1EZyNvXI=
Subject key identifier: 81:3E:E4:55:E4:19:0A:00:4A:98:C1:DA:B7:A0:C4:60:9A:01:B6:EB
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 477F
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/gT7kVeQZCgBKmMHat6DEYJoBtus.roa
Signing time: Thu 05 May 2022 00:30:07 +0000
ROA not before: Thu 05 May 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18303 (0x477f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 5 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=813EE455E4190A004A98C1DAB7A0C4609A01B6EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:68:c5:3e:3b:db:62:e0:ac:c6:aa:4b:2a:91:
2b:c1:8d:fe:3b:92:40:4e:3f:b8:8a:e8:f6:3a:3f:
83:0d:cb:5e:cd:a7:ad:97:f3:8d:29:a5:27:9c:e6:
7c:93:d8:8d:67:13:c2:66:3a:c6:42:00:d7:14:8b:
a1:4d:72:a8:72:d2:ab:8b:c9:c5:88:22:7b:89:66:
0d:78:fb:5d:84:c1:18:1f:80:c2:82:c2:47:28:d1:
6c:78:75:ec:9c:55:64:ad:16:3c:dd:13:be:eb:3e:
13:3e:79:82:37:b4:34:c2:85:35:16:15:db:88:57:
39:f2:25:a9:34:29:d7:1e:6b:43:f9:f3:5d:30:f1:
b6:9b:81:a9:82:59:95:a6:4c:f5:98:8b:dc:b9:3d:
ab:62:23:5b:ac:be:35:0a:03:03:0b:b7:88:ce:85:
d1:08:5f:fd:51:2d:30:79:51:49:91:ad:7f:1a:a1:
5a:72:7b:1a:52:b1:a7:9e:a2:d8:11:c7:34:22:7e:
d8:6f:82:dc:6d:0b:22:b4:88:3d:7b:85:ea:a8:34:
f7:11:4b:42:d8:35:e4:af:96:93:1e:f2:53:ea:52:
4e:a9:99:93:3d:64:fc:07:e8:c1:4d:7d:6b:0b:55:
20:24:c0:13:c4:7b:88:0c:c2:5b:a2:15:f6:4d:be:
07:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3E:E4:55:E4:19:0A:00:4A:98:C1:DA:B7:A0:C4:60:9A:01:B6:EB
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/gT7kVeQZCgBKmMHat6DEYJoBtus.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
08:df:d5:0f:21:14:6a:cd:42:43:8a:59:19:05:f6:f0:e1:a4:
f6:50:88:d1:d4:59:38:85:c0:7f:5b:b1:55:3f:7e:f7:97:be:
0e:c3:99:96:ad:4f:ce:f1:62:32:aa:4d:b0:4a:f0:a6:27:4d:
d2:2f:fd:af:04:39:8c:26:37:f9:91:aa:2e:47:b0:1e:6a:ca:
50:0b:f0:17:13:ad:f6:e5:55:0e:da:61:06:f4:79:6a:0c:df:
50:44:df:fb:1b:47:a8:d3:12:b6:06:94:81:57:ba:8f:ce:a7:
43:b1:b4:e9:7e:06:ca:d4:a5:d9:1d:15:5a:c9:93:3b:dd:cb:
82:62:ad:86:b2:b2:0b:f3:db:9f:37:b4:93:c3:d7:30:4b:cd:
e5:80:c9:09:f1:c6:c2:9f:a8:9d:0b:b2:7f:de:22:3c:54:0f:
ef:94:e4:91:4a:cf:0c:df:00:5a:e8:43:01:cc:45:e3:b4:20:
6e:30:c0:a0:47:05:4c:cc:26:7e:de:81:b9:b5:71:fb:38:cb:
51:2f:5d:cb:4a:bc:5d:96:98:d8:66:54:a0:a3:cf:d7:ff:60:
8a:b3:bc:84:60:b5:29:89:85:6c:55:d0:bb:ff:93:6c:88:10:
97:19:15:63:d9:05:de:e4:eb:5c:9b:ae:35:45:e5:41:cd:e0:
48:5b:fa:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org