Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/xlwFq6t5avvgzaMexKDTXIA3lHk.roa
File: xlwFq6t5avvgzaMexKDTXIA3lHk.roa (raw, json)
Hash identifier: OyoTgNEo1/WX8KhG+tWrTvbdw7gY91agUd702a5SxJQ=
Subject key identifier: C6:5C:05:AB:AB:79:6A:FB:E0:CD:A3:1E:C4:A0:D3:5C:80:37:94:79
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 463A
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/xlwFq6t5avvgzaMexKDTXIA3lHk.roa
Signing time: Tue 12 Apr 2022 00:30:09 +0000
ROA not before: Tue 12 Apr 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17978 (0x463a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 12 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=C65C05ABAB796AFBE0CDA31EC4A0D35C80379479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:45:0e:98:4f:21:08:dd:9d:ec:0b:d7:f9:8c:
15:24:aa:c7:26:dc:0c:c3:0a:5f:a2:8b:05:03:97:
df:52:91:00:53:0d:42:35:52:ef:f7:fc:12:bc:7a:
c1:49:0f:ee:04:51:f2:d5:d5:88:82:49:9b:62:26:
0f:dd:a5:66:0d:55:8d:17:53:ce:a0:27:d3:77:5d:
1e:0b:6e:d4:f3:49:6a:00:6b:fe:c5:23:d2:9a:03:
cd:86:77:f3:63:4b:5a:79:48:fd:a4:c7:53:ec:16:
8e:0a:0e:17:1a:5f:05:4b:a4:8b:35:10:df:be:7c:
89:ba:05:6c:5c:d6:d9:26:50:1a:55:ae:fb:51:70:
b9:3d:91:5d:a8:c0:7d:f8:ff:29:60:76:1a:99:e3:
ad:16:4a:d9:3b:22:3a:1a:d8:72:f4:71:94:c5:32:
77:4a:6d:b0:16:60:15:73:bc:47:66:5c:a6:4a:fb:
1e:24:e8:8f:f3:2b:6b:39:17:17:2e:28:94:82:4b:
c3:55:67:af:99:93:ae:73:22:0c:52:a8:a1:c1:3e:
93:1d:05:23:be:7e:cf:a6:c7:3d:a0:03:f9:c7:e1:
76:6e:4b:f2:6e:9e:cf:c6:81:3b:49:21:13:12:2c:
2d:15:05:18:da:46:3d:1f:02:1e:83:66:1f:8d:5e:
d7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5C:05:AB:AB:79:6A:FB:E0:CD:A3:1E:C4:A0:D3:5C:80:37:94:79
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/xlwFq6t5avvgzaMexKDTXIA3lHk.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
98:fc:f0:06:b6:65:13:f1:77:79:d9:22:f0:5f:99:3a:95:50:
41:8d:85:d0:07:58:db:30:fd:f8:eb:9b:fd:0a:0f:91:2d:8b:
ef:8f:68:60:3a:2c:b7:c8:31:20:b9:98:40:a4:50:17:df:f7:
e3:c2:08:94:61:32:0c:be:e7:dd:45:f3:a7:1b:af:fc:ac:66:
4d:b3:c5:5b:b4:40:31:80:56:f7:8d:fd:db:28:d0:32:c9:70:
c3:7c:2d:60:7f:e4:d7:81:57:a6:74:8c:a6:ee:4c:3e:c9:dc:
25:24:b1:69:74:cc:17:64:6f:b4:01:22:a9:a7:46:c9:58:ac:
0d:44:1d:3e:1e:05:37:3f:24:16:e0:a5:bf:96:14:48:fd:49:
84:37:49:61:c4:90:b0:3e:c9:05:bb:d9:01:72:2c:cb:74:3c:
b2:79:ae:6a:16:25:d8:9a:5c:08:b4:55:51:c9:0d:81:b0:86:
47:7f:05:2c:37:be:2b:0f:ba:48:d4:4c:4d:24:29:d1:66:0d:
c6:5f:0f:c6:90:7a:c5:87:0b:89:7b:9a:5b:69:0d:cb:07:47:
26:03:8c:be:b9:45:d8:3d:af:82:16:32:9c:a8:8c:a2:ad:b5:
7e:8a:d9:2a:7e:5f:2b:3b:c2:cc:b7:10:8f:62:5e:86:fa:18:
91:f9:bd:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org