Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/RTDywiXTq7wOSFc3ltUY2FB-Mi0.roa
File: RTDywiXTq7wOSFc3ltUY2FB-Mi0.roa (raw, json)
Hash identifier: p/fgEVos403wmlO1Iv0D80LB/tFBgjViVcjiU/FdWVA=
Subject key identifier: 45:30:F2:C2:25:D3:AB:BC:0E:48:57:37:96:D5:18:D8:50:7E:32:2D
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4435
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/RTDywiXTq7wOSFc3ltUY2FB-Mi0.roa
Signing time: Sun 06 Mar 2022 00:30:07 +0000
ROA not before: Sun 06 Mar 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17461 (0x4435)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 6 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=4530F2C225D3ABBC0E48573796D518D8507E322D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:76:6c:72:9a:5b:d3:63:19:c3:86:eb:91:2d:
c9:55:8d:45:35:57:88:b6:db:5d:a1:b4:55:e2:48:
c4:e4:35:bd:b6:a2:87:d3:ca:80:87:40:6f:e4:37:
cd:d3:ef:05:1c:40:b7:dc:cb:08:a7:fa:d1:4f:a5:
7b:93:17:b1:52:fe:fd:3b:23:d4:57:9b:e3:b0:f2:
96:50:09:d9:9e:a1:e8:7c:60:31:61:74:6e:c3:27:
fe:ff:98:c4:9b:49:49:17:76:3c:b1:8d:c9:92:d0:
72:49:02:cb:5d:be:dd:1d:e0:f8:df:f9:89:a2:0d:
a2:e8:2f:1e:48:e4:d3:ea:83:4b:4c:38:3f:38:85:
84:8c:60:ad:ec:a6:22:b2:89:01:4b:49:2a:bd:c1:
3f:32:07:b0:05:72:69:09:61:49:0d:86:a8:2d:84:
86:de:bf:f4:27:47:23:de:fb:2a:79:55:53:40:00:
e7:be:9b:33:b1:1d:47:b3:ec:c9:b9:e5:ed:6a:2f:
9b:3f:14:f9:46:59:5c:98:77:41:a6:43:fb:bf:eb:
da:f2:45:8c:04:da:d6:d3:c0:59:89:bd:42:6e:27:
27:ad:4a:78:e9:36:76:53:a7:bd:4d:fe:42:2c:ab:
84:c2:22:93:2d:de:5a:3c:42:ae:cc:c3:cf:85:d7:
b8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:30:F2:C2:25:D3:AB:BC:0E:48:57:37:96:D5:18:D8:50:7E:32:2D
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/RTDywiXTq7wOSFc3ltUY2FB-Mi0.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
65:90:e9:14:55:45:c9:12:be:1f:0f:22:b8:47:fa:25:e4:db:
29:3e:34:45:c8:e4:1d:e0:57:e1:6e:3f:46:9b:cc:57:c2:a8:
04:5d:ff:71:cc:94:a7:c0:e5:1c:b8:20:24:8c:68:cf:db:32:
65:8b:a1:33:31:7f:2c:27:48:fb:db:56:d2:48:dc:fc:73:8c:
72:d2:92:3f:c5:7f:20:11:fa:6b:0b:fb:5a:5f:17:e9:c5:d0:
8d:7c:c6:cb:15:6e:cf:53:ae:71:88:58:ae:e6:b6:6b:3c:f6:
38:68:49:32:da:9b:96:07:82:7b:42:b7:77:8f:92:d3:82:38:
da:f3:e5:34:75:35:06:95:76:a9:dc:cd:f1:50:ad:e5:8f:f5:
5e:6e:5f:39:35:8a:e0:bc:49:f0:42:77:10:81:08:07:9e:c5:
2e:4b:7b:59:1d:8a:4f:dc:17:ac:87:14:a7:d4:93:f4:6f:41:
18:4d:1a:24:cb:0f:e8:0d:d5:28:e1:59:3d:3e:d1:70:cd:d2:
1a:c9:74:14:86:66:1a:85:a1:f6:0a:ca:41:ef:98:96:e8:8c:
e4:1f:34:7e:58:31:fb:ee:82:5c:6c:84:b5:dd:7d:32:cb:e6:
07:e1:bd:3d:bf:f8:6f:9e:6b:60:d5:e0:b6:c0:f7:b4:a2:df:
a5:c1:bb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org