Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/m2d-WB4lAyH-JPrg3FFZv2XbrFI.roa
File: m2d-WB4lAyH-JPrg3FFZv2XbrFI.roa (raw, json)
Hash identifier: JuTdUzcrvuXMYnKAAiiqlE0KyBzqVuxPQSfoIPdjWYM=
Subject key identifier: 9B:67:7E:58:1E:25:03:21:FE:24:FA:E0:DC:51:59:BF:65:DB:AC:52
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 470C
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/m2d-WB4lAyH-JPrg3FFZv2XbrFI.roa
Signing time: Wed 27 Apr 2022 00:30:07 +0000
ROA not before: Wed 27 Apr 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18188 (0x470c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 27 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=9B677E581E250321FE24FAE0DC5159BF65DBAC52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c1:1a:0d:c4:43:06:c5:a0:13:e1:6a:56:7f:
e9:ce:1b:33:9c:39:6c:54:71:10:4b:ce:bb:e2:2d:
58:06:c1:43:60:cd:0a:77:51:d8:b9:b2:63:e7:fc:
af:91:69:98:4d:8c:06:9d:5a:ac:2a:be:c9:0c:a8:
bd:6c:ea:5f:61:e4:20:2a:ed:1c:51:ec:38:25:dd:
98:62:b1:e0:01:7a:9b:38:d4:f9:3f:df:b0:c2:9b:
18:8f:81:f0:77:1a:72:cc:e7:1c:98:6a:34:03:f6:
21:0f:ab:f9:b5:d2:ff:35:36:4b:1d:83:02:d4:ec:
51:9a:76:dd:54:46:6e:61:fa:6d:68:21:d6:a8:84:
47:4f:c6:24:a1:a0:7f:98:2e:bb:17:cc:c8:fa:9f:
3b:68:99:ad:27:80:6c:7c:f9:60:31:9c:19:c9:3b:
a4:ff:de:dd:13:a7:45:f5:48:13:6e:47:77:c3:9d:
5c:ee:c8:4b:7c:78:6f:90:b8:12:01:ec:4a:64:3d:
52:8e:95:a2:8b:7a:4f:be:43:17:ff:5a:b3:8e:2f:
7e:e0:60:88:55:0d:20:40:64:ee:72:cd:f7:83:b6:
14:66:7a:68:ae:20:17:07:69:ec:bf:12:e0:30:13:
3c:36:a2:e8:3e:f3:8d:09:84:1c:c0:85:70:55:a1:
3c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:67:7E:58:1E:25:03:21:FE:24:FA:E0:DC:51:59:BF:65:DB:AC:52
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/m2d-WB4lAyH-JPrg3FFZv2XbrFI.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:1c:0f:f2:26:10:3a:4f:e2:b8:e7:b4:6a:bc:80:93:98:ea:
f1:5a:4c:7c:6f:f0:73:d8:0c:74:4c:d5:28:83:77:46:7a:18:
b2:c7:ce:79:0f:97:4c:fc:96:f8:1a:14:ec:ca:03:d9:8f:15:
bf:06:2b:5e:f7:89:6a:b7:2b:ae:4e:93:62:a6:fa:b9:2b:25:
74:82:0f:e7:6d:19:3b:b5:d1:87:2a:40:5d:4a:df:ad:95:d3:
33:58:f8:36:b9:4c:17:fb:f5:e9:a8:9f:8b:10:01:55:b7:b0:
90:7d:01:70:2f:72:f4:91:5b:1d:54:e7:f0:93:7f:9d:f2:46:
bd:7d:a8:12:a0:51:b6:ec:e3:5c:cf:bc:3f:e7:0f:ca:0a:41:
57:f3:5a:ef:83:6f:cd:d5:af:60:7a:0b:f7:e6:76:16:18:c0:
98:08:be:26:a3:de:b7:dd:34:e0:ab:e6:99:aa:c4:17:69:7f:
76:1c:38:ec:e2:c8:af:f0:b9:32:b4:95:1b:05:8c:6c:b5:50:
73:16:21:d6:1e:1d:5c:2d:a6:64:b5:3f:a3:57:f7:0b:62:37:
25:93:de:17:20:31:fc:77:dc:27:0a:d3:12:1c:ee:41:0d:68:
27:31:a7:e1:a8:df:06:96:0b:69:4e:02:94:af:4b:59:a0:2b:
4f:e2:98:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org