Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/wF1Atr6CRCMRUf1zFHTR8rVaX5o.roa
File: wF1Atr6CRCMRUf1zFHTR8rVaX5o.roa (raw, json)
Hash identifier: n1SgZJmXL/BjQpQsID9FFCeA5L7c5Q3pdMgR9eAFEXU=
Subject key identifier: C0:5D:40:B6:BE:82:44:23:11:51:FD:73:14:74:D1:F2:B5:5A:5F:9A
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 45CD
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/wF1Atr6CRCMRUf1zFHTR8rVaX5o.roa
Signing time: Mon 04 Apr 2022 00:30:07 +0000
ROA not before: Mon 04 Apr 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17869 (0x45cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 4 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=C05D40B6BE8244231151FD731474D1F2B55A5F9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4d:fb:03:aa:9f:a2:70:14:f8:29:84:c7:a5:
f4:40:d2:98:fc:99:89:51:3f:61:ce:c7:e3:96:aa:
84:29:49:13:22:ce:bf:84:72:1d:f3:a9:ce:e2:b4:
e2:29:03:7c:19:aa:ed:25:de:0d:94:a6:0e:bc:a1:
8d:9a:19:b2:ac:c8:df:4e:4f:6d:09:f4:18:97:9c:
c8:26:2c:bd:1f:75:7e:d7:ec:18:d4:cc:b1:f7:57:
9f:35:e4:25:28:bb:4e:fb:db:28:37:a8:45:b5:49:
ae:0c:7f:96:cd:2a:ef:db:f8:b7:5f:d0:ea:4a:b8:
91:36:6d:cd:78:b2:b0:33:29:8a:2c:61:76:8b:26:
1a:c4:4d:40:18:59:eb:be:b1:e6:12:3b:4a:11:75:
ec:c2:6a:ba:4a:52:78:83:8a:82:f7:28:03:a3:d2:
8a:94:60:20:d7:80:15:8f:8b:4b:19:74:35:c0:db:
b3:31:01:9d:dd:60:7b:6b:a1:9b:9f:eb:a8:de:20:
b5:0f:c2:6f:ba:0a:1a:0a:c6:e4:a3:1e:d3:42:b9:
40:c0:ee:4e:0e:25:12:70:ec:3f:77:46:87:39:72:
5d:52:55:d5:17:22:c3:0e:30:d8:79:70:bb:a5:5a:
df:22:43:e9:75:4b:ab:58:6f:ad:cf:a3:3a:69:dc:
88:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:5D:40:B6:BE:82:44:23:11:51:FD:73:14:74:D1:F2:B5:5A:5F:9A
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/wF1Atr6CRCMRUf1zFHTR8rVaX5o.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:b3:63:3d:1b:ab:16:d3:8f:78:7d:b9:b5:b0:ff:81:4e:36:
8f:dd:1e:6e:0a:ca:3c:1a:4c:8b:5a:e6:de:52:8d:0e:1c:c8:
4b:5b:0b:e6:78:15:aa:67:11:81:10:68:0d:c2:a2:1d:22:0b:
fc:4b:83:69:d8:f8:f0:c2:5e:67:08:57:b5:fc:cb:a8:84:91:
a1:3f:10:3e:7c:58:3d:3f:f7:2f:46:2a:60:ff:45:eb:ac:bd:
f0:07:a9:c8:0a:5c:8d:35:2f:cd:1e:5f:f2:4a:d1:56:4b:27:
72:94:68:91:4e:36:d7:e3:53:6f:be:53:ad:8d:77:bf:7e:2c:
5a:1d:2e:e4:49:bd:82:54:34:49:82:56:37:3d:22:d0:52:89:
81:fd:48:a2:67:dc:a3:57:50:8a:30:d6:63:ef:8a:40:18:6e:
96:2d:f6:80:94:36:34:88:28:56:19:65:0c:23:d2:5c:e9:92:
21:7e:53:1f:ae:6c:4a:54:80:e9:d9:7c:68:be:01:42:ef:4a:
7f:2d:a3:3d:09:c7:9a:04:50:e2:9a:86:a9:9e:a4:85:02:ea:
59:f4:2a:6c:62:ba:ab:26:14:21:91:8d:8b:ef:c7:25:09:c6:
20:99:89:c3:ad:ef:12:41:8b:d5:45:fa:a8:89:57:f1:ac:63:
5e:71:d5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org