Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/q8YyVDG_-C9GlSGpvr5oCR6znPk.roa
File: q8YyVDG_-C9GlSGpvr5oCR6znPk.roa (raw, json)
Hash identifier: QgbxAH2HMMk7sqaG4Xna9gK7P2Bytla4OyXCTXuiJI8=
Subject key identifier: AB:C6:32:54:31:BF:F8:2F:46:95:21:A9:BE:BE:68:09:1E:B3:9C:F9
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4664
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/q8YyVDG_-C9GlSGpvr5oCR6znPk.roa
Signing time: Fri 15 Apr 2022 00:30:06 +0000
ROA not before: Fri 15 Apr 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18020 (0x4664)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 15 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=ABC6325431BFF82F469521A9BEBE68091EB39CF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dd:50:f1:f5:2a:46:a3:3b:34:7d:44:9f:e4:
46:2c:6f:00:26:54:b0:f8:35:5d:c2:79:2e:a8:2a:
e9:01:78:8b:54:1d:3e:4f:d7:14:78:aa:a9:5b:81:
cb:23:64:c8:4f:80:0d:d6:28:e0:cb:a3:c5:13:ca:
1c:18:93:6b:34:7c:d9:60:02:c6:79:7d:da:5f:44:
dd:ed:d2:5b:b8:e8:4a:0e:88:ee:10:9d:ef:0d:f9:
78:a2:08:84:d7:b9:db:c2:dd:d3:ec:3c:d5:8b:a4:
fa:d1:30:6c:2a:b4:1b:98:8f:60:09:05:08:f5:f9:
d4:6a:7b:5c:84:6e:75:b3:25:23:ae:11:04:cc:6e:
95:5b:a0:1e:1f:75:c7:50:40:08:4b:89:7d:1b:5d:
d9:b3:80:51:13:d8:e3:7f:20:f6:f0:e0:ee:df:60:
b4:c2:af:01:7c:8c:70:e7:ff:86:f7:85:90:d7:c9:
9f:95:6a:f0:43:f1:45:3a:2f:1d:29:aa:1e:4f:a4:
19:b6:9a:3a:9f:50:a0:63:b3:ee:05:59:7d:35:a2:
7f:31:a9:48:76:d3:48:61:fd:97:65:fe:f2:2a:fe:
cc:97:84:48:e8:a9:cd:00:95:6b:c4:2c:05:c1:8d:
74:5f:b1:14:70:c4:fb:5b:03:c5:a2:27:00:2c:4b:
53:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C6:32:54:31:BF:F8:2F:46:95:21:A9:BE:BE:68:09:1E:B3:9C:F9
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/q8YyVDG_-C9GlSGpvr5oCR6znPk.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:cf:49:40:72:73:b7:ec:e1:cd:98:23:81:b3:1c:76:6c:ae:
3b:e6:16:51:9c:34:ec:cc:87:cb:06:35:3e:f9:1f:04:34:4f:
25:b4:f1:7b:e6:4c:58:ea:53:b6:ce:1a:78:ee:e0:05:16:cc:
b2:8b:e4:8c:ce:c4:0a:6b:13:5e:5a:a1:94:23:69:f0:b3:6b:
75:62:c2:91:34:d0:a6:f6:ae:bc:dc:16:7c:2e:34:ee:02:e7:
58:73:64:7b:91:59:81:62:2f:44:59:94:b5:e7:81:69:ea:71:
70:e5:7e:53:62:c4:29:14:bd:f4:29:ce:5d:58:57:48:e4:ed:
9b:b4:89:1b:0b:7f:42:02:c6:f3:02:c0:b9:80:bd:69:91:f3:
2f:98:ad:fa:e9:ba:c0:a2:ea:8c:8d:b3:8a:ed:2b:39:6c:5b:
ea:b9:20:70:10:54:53:54:81:05:ec:7a:12:6d:45:c0:3f:a8:
38:01:8f:8f:fd:78:a6:05:24:7f:a2:f1:58:fd:98:d3:69:00:
7c:40:82:81:7b:14:d4:d4:82:9f:22:15:3f:69:cf:10:3a:d0:
4a:55:74:10:a6:a1:d4:cb:fb:fa:22:1a:b9:58:c5:c5:5d:90:
0a:54:b3:c7:52:c5:dc:eb:01:f1:7d:8e:c9:b7:61:a6:0a:cd:
40:06:b3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org