Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/u-AlwM9GkRCsu5q6D0emhqP5cI4.roa
File: u-AlwM9GkRCsu5q6D0emhqP5cI4.roa (raw, json)
Hash identifier: 3lTCc9+eTtfqDrOWNjogIXgZxDGNjAMNNPw+JRxv4vE=
Subject key identifier: BB:E0:25:C0:CF:46:91:10:AC:BB:9A:BA:0F:47:A6:86:A3:F9:70:8E
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 47FA
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/u-AlwM9GkRCsu5q6D0emhqP5cI4.roa
Signing time: Sat 14 May 2022 00:30:05 +0000
ROA not before: Sat 14 May 2022 00:30:05 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18426 (0x47fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 14 00:30:05 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=BBE025C0CF469110ACBB9ABA0F47A686A3F9708E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:39:7c:1a:1e:6e:79:fd:c2:7f:11:a7:aa:87:
8b:eb:04:a7:4f:b3:3b:be:a9:99:e0:9c:6c:1a:99:
73:96:df:a9:7c:5c:6c:7e:2d:d7:26:76:52:e1:ec:
a5:6e:f2:e1:61:f1:b8:37:c0:f1:14:d6:89:3f:3f:
c4:f2:1c:13:77:2f:92:63:9f:c7:c4:b7:8e:4e:30:
ee:89:94:83:e1:a7:02:2b:20:ca:df:27:89:f7:11:
32:ca:a0:11:e6:a5:f8:c1:69:c5:36:20:ec:30:22:
01:96:0a:4f:2e:ad:d3:8b:31:c4:aa:b4:8c:53:0e:
10:db:d8:f4:42:17:c2:07:15:b3:be:aa:1e:7f:6a:
01:ac:04:1c:83:a0:b2:af:ff:1b:e3:7b:ab:cc:17:
3a:b5:0a:46:f4:8b:16:83:3b:51:87:2d:4c:e5:73:
5a:f3:6a:5f:9b:c3:7c:28:2b:ad:f2:e2:71:a2:b1:
cb:ca:87:bd:a7:02:a5:3d:40:7a:60:10:2b:87:cc:
25:a7:bb:73:4f:04:bc:c7:21:d8:d5:f5:82:99:28:
48:a3:d8:8b:2e:43:6b:b3:4b:15:23:19:b8:ee:8e:
7b:b8:2d:b5:e5:9b:a1:06:1b:10:b1:9a:de:9b:9b:
de:f9:07:7b:ca:40:44:c4:f8:85:1e:3d:c2:cf:4c:
c2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E0:25:C0:CF:46:91:10:AC:BB:9A:BA:0F:47:A6:86:A3:F9:70:8E
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/u-AlwM9GkRCsu5q6D0emhqP5cI4.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
52:c4:b0:da:13:4c:04:93:f6:9f:9d:44:ac:c5:e0:72:69:21:
c6:88:ee:92:6d:41:08:b1:e2:37:67:06:67:80:91:f7:75:58:
dd:1e:60:ad:84:29:65:3c:e9:69:9f:82:73:1e:86:75:f6:db:
18:4b:08:56:c1:4a:11:76:91:b2:16:7e:18:51:3f:d0:ff:36:
cf:fc:16:7d:ee:0c:fb:f9:00:7c:6e:ce:c9:75:fc:2d:38:3a:
e5:24:b1:78:7f:a8:0b:c5:04:d4:5f:e8:3b:24:38:00:bf:20:
ec:ae:ba:a3:e6:62:00:dd:50:d1:92:39:35:c2:16:25:91:06:
1c:f6:07:02:e3:62:51:b8:78:57:0e:a8:6f:53:91:5a:f2:bd:
a9:68:e5:e9:52:b3:39:3d:ef:8d:cd:3e:af:78:59:d4:e9:62:
ef:40:b2:21:34:cd:0a:fc:97:75:5e:c1:8d:b8:ac:b3:4f:3b:
0d:42:d6:90:02:2f:75:8c:d8:cd:2d:db:50:23:e7:0f:94:ab:
2b:5f:f4:f6:f3:7b:fb:30:43:fe:10:d2:bb:b5:ad:b4:ea:55:
63:b7:3b:09:b2:bc:42:a2:f9:ff:be:11:8f:9e:18:01:96:d5:
ea:b5:68:d7:89:31:6b:97:fe:3c:c7:d7:38:32:3e:f7:be:59:
9c:bf:7f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org