Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/FLbPoCujMpM4UuX-aSlnozOW42c.roa
File: FLbPoCujMpM4UuX-aSlnozOW42c.roa (raw, json)
Hash identifier: +5pS0nIFIBoFX5c654etziHN6dg/WU0UsOn/lEIV5Ho=
Subject key identifier: 14:B6:CF:A0:2B:A3:32:93:38:52:E5:FE:69:29:67:A3:33:96:E3:67
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 48CC
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/FLbPoCujMpM4UuX-aSlnozOW42c.roa
Signing time: Sun 29 May 2022 00:30:04 +0000
ROA not before: Sun 29 May 2022 00:30:04 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18636 (0x48cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 29 00:30:04 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=14B6CFA02BA332933852E5FE692967A33396E367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7b:5e:72:6e:8d:eb:0b:5a:cf:8d:e1:1d:b6:
a1:67:f3:1b:74:8d:4b:da:c1:8a:8f:19:84:24:8f:
69:33:0f:02:6b:d3:94:8f:7e:1a:c1:dd:e8:a8:75:
7e:a6:68:f2:55:49:2f:d8:8c:92:a5:97:7c:b8:9e:
df:66:02:b6:48:b1:1d:25:66:18:9c:62:3f:4b:0b:
c9:76:b9:e2:b2:71:49:b2:86:13:05:48:eb:92:9d:
a8:3c:8e:d3:7f:b6:57:39:2a:9d:5c:c7:47:f7:98:
1f:7a:5e:eb:5d:4f:a9:b8:f9:c7:d7:0f:f0:54:22:
ae:09:fa:89:f4:8f:36:e5:fc:48:1e:2b:d2:83:7e:
f9:4e:18:d0:2c:2a:88:29:84:65:b2:8e:d7:1b:a7:
ed:10:aa:92:20:ef:30:6e:28:a1:46:f6:5b:d9:eb:
9b:64:38:dc:b8:4a:8a:39:4c:70:76:e1:6e:c1:6c:
f2:56:c0:73:ce:4a:51:58:69:05:38:2f:f8:fe:44:
b5:e0:fd:94:1c:c8:cd:5e:87:f7:f2:de:52:3a:44:
d5:16:26:43:2e:7c:b9:07:c4:4b:31:a3:95:25:40:
4f:63:4f:1f:91:3a:07:fe:10:da:44:15:db:a1:0c:
78:fc:cc:5c:8c:25:92:d2:57:db:1e:f7:d0:87:b9:
51:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B6:CF:A0:2B:A3:32:93:38:52:E5:FE:69:29:67:A3:33:96:E3:67
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/FLbPoCujMpM4UuX-aSlnozOW42c.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
58:2d:c7:ac:79:74:82:f1:db:bc:23:66:d1:6e:7f:88:c6:bc:
58:a6:19:0b:9d:37:56:f3:59:d4:43:dc:4d:22:a0:6c:90:9f:
d1:65:63:aa:e5:89:4e:cc:03:57:04:a4:b0:e0:eb:59:01:89:
81:59:54:92:dd:95:3e:45:ab:9f:18:64:92:35:ec:b1:3e:e6:
43:f1:7d:d2:8d:45:66:1e:e3:eb:d7:c8:cf:2c:46:bf:7d:9e:
f4:21:2c:99:49:14:be:8c:a5:a1:92:f3:3e:5a:88:88:c9:9b:
68:53:ca:a1:14:80:b1:4c:5c:3d:de:6c:f6:72:fb:d2:3a:4b:
4c:14:8b:f6:52:32:5f:e6:33:ac:31:8a:ed:1f:e1:f7:57:9d:
52:d2:14:7d:c4:9d:04:5e:56:34:5e:0a:70:04:de:c8:7e:de:
f7:c6:0e:be:57:c8:f4:cf:73:e8:6e:de:f1:f3:b9:23:c5:7b:
9c:90:2e:bf:98:2f:01:46:6c:e2:7e:9d:e0:63:76:9b:aa:99:
b2:73:5c:1f:5c:fd:8d:d2:ca:4e:3d:06:60:5e:ed:22:98:95:
bf:b8:27:27:1f:1f:03:01:e3:81:10:25:b6:d3:e7:9f:24:e7:
85:ec:09:d8:8e:8a:95:59:fe:86:89:c7:87:c0:c2:26:65:51:
c0:03:b1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org