Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/mF-6a0dLDkMy1uxgxDGhtGTNjn4.roa
File: mF-6a0dLDkMy1uxgxDGhtGTNjn4.roa (raw, json)
Hash identifier: wxAWu0tFhhXhGDEQ76lpg9LkaLZWjEuQR3kyav61cYc=
Subject key identifier: 98:5F:BA:6B:47:4B:0E:43:32:D6:EC:60:C4:31:A1:B4:64:CD:8E:7E
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 479B
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/mF-6a0dLDkMy1uxgxDGhtGTNjn4.roa
Signing time: Sat 07 May 2022 00:30:10 +0000
ROA not before: Sat 07 May 2022 00:30:10 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18331 (0x479b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 7 00:30:10 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=985FBA6B474B0E4332D6EC60C431A1B464CD8E7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cb:44:d8:31:be:3b:41:40:b3:f0:45:a7:e4:
65:4a:d3:84:0e:b6:76:91:47:0e:bc:0c:a4:37:d7:
b2:3e:e6:71:ca:9b:d9:d2:be:58:d8:42:5c:9b:2c:
b3:b5:76:30:fa:ff:7c:e3:8c:4b:e0:8d:ae:9f:03:
59:ce:fd:19:3e:93:8c:84:a7:a0:b0:b7:14:0e:77:
62:26:86:74:a2:d7:85:c1:ed:fc:2a:e1:5f:4c:a7:
04:ec:3e:04:26:81:2c:cc:9d:4a:dc:d9:d2:19:10:
a9:32:1c:d6:28:1b:4f:6f:56:91:7a:a6:27:42:74:
dd:4e:e4:f7:c2:3a:60:ae:ec:39:73:38:c6:62:40:
32:ba:3a:56:02:3d:31:ef:f9:3f:4d:5b:c3:2f:e7:
f5:72:6a:f0:20:40:24:12:a6:8b:e2:80:70:bd:d5:
ec:58:85:b7:fc:e9:4d:f8:b5:1f:86:08:6e:3e:84:
20:e7:a1:db:b9:69:0f:ab:71:e6:77:ed:20:bd:0c:
f7:fd:05:df:19:a7:b2:94:2d:82:49:4b:e3:02:7c:
aa:76:fe:88:63:9e:0f:6c:1b:46:a9:7e:1d:07:75:
0f:1e:7b:49:6d:ae:9a:5d:0c:3b:e0:22:02:a7:58:
43:07:b6:e9:12:3b:92:9f:25:a3:d2:76:26:c8:1c:
f8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5F:BA:6B:47:4B:0E:43:32:D6:EC:60:C4:31:A1:B4:64:CD:8E:7E
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/mF-6a0dLDkMy1uxgxDGhtGTNjn4.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:32:f7:1f:72:0c:c1:c9:0e:99:2c:93:53:cb:75:5b:d0:86:
9e:44:7b:88:11:86:ad:62:16:7b:f5:82:0d:19:4d:0d:39:24:
c3:31:8e:08:a7:fa:46:b0:d4:7d:b4:cc:36:21:be:49:d0:43:
89:e2:c3:98:83:c2:73:ee:7f:f2:7b:8f:f4:52:f4:03:f3:a6:
17:e8:58:50:3b:e8:9b:74:3c:77:04:52:d3:17:e9:45:ba:cf:
07:25:c8:58:5d:3c:ff:af:2d:ec:e5:46:1b:01:3d:ef:78:69:
4c:ce:ad:b2:d3:9e:91:db:c1:eb:81:2b:37:98:6c:8a:65:b6:
7e:43:60:03:71:d5:a7:ca:96:9a:be:fd:37:27:5e:74:6e:d4:
29:7e:d3:75:4d:60:9e:ae:16:3b:37:22:5c:8c:93:f7:88:0b:
15:6e:28:a7:0c:ba:1f:16:1e:5d:a4:c9:f2:c6:a1:a3:a5:7a:
76:68:e9:a0:47:bc:ac:b1:bb:7b:09:4b:8e:2c:51:05:4e:ef:
c4:43:0d:67:28:28:29:b1:c8:c2:32:da:3c:c2:3d:f8:d7:dc:
7e:34:db:78:33:a1:79:b6:af:b4:0a:08:f0:d0:0e:5d:e8:92:
4a:50:99:47:a8:af:b6:af:04:62:e6:93:19:04:eb:7d:2e:75:
a2:12:e2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org