Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/FDAHUhD2kmY5eraJA_m--J_ZZSg.roa
File: FDAHUhD2kmY5eraJA_m--J_ZZSg.roa (raw, json)
Hash identifier: mrHQYdzqczy1GdDU6AaHY88CE4E0q/I1IjuLliyIf/E=
Subject key identifier: 14:30:07:52:10:F6:92:66:39:7A:B6:89:03:F9:BE:F8:9F:D9:65:28
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4405
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/FDAHUhD2kmY5eraJA_m--J_ZZSg.roa
Signing time: Wed 02 Mar 2022 00:30:16 +0000
ROA not before: Wed 02 Mar 2022 00:30:16 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17413 (0x4405)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 2 00:30:16 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=1430075210F69266397AB68903F9BEF89FD96528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:fc:f5:56:0e:e2:d6:f3:37:aa:6b:7f:97:79:
29:12:e2:a0:4d:e7:0e:b3:08:a4:cd:e9:e6:c8:bf:
4f:c7:da:96:d5:10:21:4b:b4:65:4c:d4:48:0a:49:
87:12:e1:2c:f3:db:ed:41:e1:09:5a:6b:6f:68:85:
c8:b6:fb:84:e0:18:75:2e:01:1f:0a:a2:f6:b8:8b:
86:77:aa:d0:1f:8e:91:98:de:6c:65:80:9e:6a:41:
a5:18:bb:c4:ca:59:e7:94:75:97:ca:66:b9:1e:22:
52:b5:22:48:a7:d0:7d:8f:cf:d2:d3:db:be:4a:c0:
e9:96:94:fa:5b:bb:8a:14:ab:75:51:06:e3:38:2c:
6b:f1:b6:39:fa:6a:a8:34:50:39:6d:e8:35:b3:b6:
6c:92:d6:0d:22:be:4a:ef:5c:14:00:1e:c8:1f:10:
88:b7:cf:13:0b:77:73:4b:75:53:14:a9:00:ca:7c:
79:44:de:3e:9b:68:d9:07:61:b1:80:3c:92:7d:22:
6d:d6:73:8c:e0:bc:34:8e:8c:95:ab:6d:ce:e3:17:
25:4c:ee:8d:1a:2f:84:8a:ff:c6:5b:a1:15:61:43:
ca:0e:d8:2b:e4:57:06:dd:e2:6d:e2:4d:df:8e:f9:
49:71:15:00:56:7a:cb:ad:84:d3:c7:c6:c5:fa:9c:
85:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:30:07:52:10:F6:92:66:39:7A:B6:89:03:F9:BE:F8:9F:D9:65:28
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/FDAHUhD2kmY5eraJA_m--J_ZZSg.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
51:7d:61:af:9a:9a:4a:66:9d:e2:37:6f:6c:1e:4d:44:e8:6b:
a8:30:4e:cb:77:99:8a:99:3e:6f:86:ef:ee:5e:d5:37:d2:12:
a7:eb:78:34:9c:bc:a1:66:01:09:a6:67:0d:eb:53:59:27:d2:
d3:01:68:01:1f:f4:6f:12:71:20:5f:51:11:1b:1d:cb:47:db:
d5:a0:df:e2:49:1f:73:9c:0c:5f:32:b4:ab:c4:8e:dd:bc:cf:
13:0e:89:6e:4f:d3:4c:c7:e5:fc:e4:95:4f:25:d3:d3:11:4b:
24:82:8d:3a:a3:fc:39:8b:00:e5:99:be:e8:72:5e:db:ae:99:
40:1e:f0:15:ed:01:16:ca:8e:72:f3:0c:e2:d2:0e:ac:bb:b6:
ae:3e:61:bb:de:95:03:ea:9e:e5:d3:5c:36:8d:56:c7:c9:b9:
05:06:06:82:bc:76:a6:6d:0b:44:34:e3:13:e3:37:79:df:29:
95:e9:fd:40:f2:b8:cc:bd:67:3d:ba:7d:f7:00:91:8a:5e:64:
2a:75:41:9c:4c:07:3e:72:c0:3c:ac:a8:42:33:9c:b6:6d:3d:
0d:6c:a9:c9:0b:d3:73:80:21:77:d9:25:fa:ee:54:9f:a7:78:
e4:ea:5b:64:24:4a:d9:a8:6d:bf:e6:ca:6f:52:8e:eb:5c:6a:
ba:d3:82:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org