Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/X5G9DqQ5-_j5TMeiJpuZ7KV28Do.roa
File: X5G9DqQ5-_j5TMeiJpuZ7KV28Do.roa (raw, json)
Hash identifier: GRLDcjV3XjM3+9p9MCzJtM+5QHv7H5JOHRVS7GjHHB4=
Subject key identifier: 5F:91:BD:0E:A4:39:FB:F8:F9:4C:C7:A2:26:9B:99:EC:A5:76:F0:3A
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 33E4
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/X5G9DqQ5-_j5TMeiJpuZ7KV28Do.roa
Signing time: Wed 14 Apr 2021 10:34:46 +0000
ROA not before: Wed 14 Apr 2021 10:34:46 +0000
ROA not after: Fri 01 Apr 2022 01:01:03 +0000
asID: 47065
IP address blocks: 147.28.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13284 (0x33e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 14 10:34:46 2021 GMT
Not After : Apr 1 01:01:03 2022 GMT
Subject: CN=5F91BD0EA439FBF8F94CC7A2269B99ECA576F03A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5f:a4:3f:8c:27:35:8f:25:57:fe:f4:7c:ab:
49:05:c1:ca:2d:3b:ba:96:df:b9:0f:ad:7c:b8:b4:
45:c7:da:d9:a9:cb:d9:12:f7:81:63:22:f6:bc:97:
b1:b3:ab:c4:61:e8:49:92:4f:02:8f:90:44:84:bc:
5e:31:b7:52:c2:95:f9:39:03:c3:a5:e7:8a:cd:43:
64:3b:23:1b:4a:a8:c4:83:ec:6d:ee:28:f0:eb:79:
29:e6:4f:d9:86:e6:7b:88:53:14:5b:98:90:7c:b4:
2c:1a:44:09:1a:0e:8b:dd:81:fa:51:b0:15:aa:f3:
21:b3:a1:65:f7:4d:00:9f:dd:9f:8c:48:d6:35:ae:
a9:5a:e9:dd:31:37:47:c1:50:df:eb:88:c2:14:f7:
60:84:ed:8f:b1:84:7d:e8:60:af:f3:94:86:63:af:
97:49:c7:8f:f0:af:75:25:f6:5a:36:73:bb:61:c2:
aa:c5:5d:f6:73:9d:7e:d5:ae:40:43:c5:c1:1d:1a:
30:2b:29:db:df:42:4d:0f:81:90:a4:d3:eb:62:60:
31:f6:25:f1:66:13:97:d8:93:66:df:e7:bf:7e:03:
ad:e9:8b:44:4e:dc:d9:69:1c:eb:c7:fc:9f:b9:b6:
1e:fd:f0:eb:5a:8e:f2:44:88:d8:f8:54:f3:dd:1f:
67:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:91:BD:0E:A4:39:FB:F8:F9:4C:C7:A2:26:9B:99:EC:A5:76:F0:3A
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/X5G9DqQ5-_j5TMeiJpuZ7KV28Do.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.2.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:38:ad:aa:45:d2:b3:6d:c6:f8:cc:ce:25:4e:ad:94:52:72:
ef:8c:e7:52:b9:dc:94:ad:57:d5:90:ec:45:50:32:06:95:9a:
f6:2c:b7:95:01:7c:1f:e0:c7:63:0e:47:02:07:7f:b8:ad:56:
79:a1:1a:83:31:fd:49:c1:68:4f:dd:01:4f:46:1e:c8:f2:9d:
81:d3:70:a0:bf:5d:b1:09:17:70:f7:42:bf:6a:a3:c8:bd:f8:
e8:a8:7a:e2:9b:d5:dd:8d:ce:87:fc:06:01:7f:ba:8b:66:78:
72:89:e6:5b:e7:9e:f7:7e:fc:fa:bd:81:9c:37:58:52:10:9e:
10:67:51:e0:87:11:11:40:1b:79:36:e8:b5:f8:24:6d:8c:84:
60:19:9d:8a:23:62:d8:4f:50:5e:9e:ee:1f:fc:c2:56:a0:34:
6b:42:ea:e0:49:a3:24:32:1e:d3:61:11:7c:56:57:81:c4:b4:
ed:ff:50:60:5d:17:09:a0:38:70:fc:01:82:1c:17:c4:7f:e0:
aa:dd:5f:47:4a:cb:bc:82:a4:31:85:87:98:3a:a5:df:da:5f:
62:aa:c7:6a:47:f8:cc:af:66:96:d9:7e:12:f0:cc:a4:2c:7a:
60:14:ad:f1:1f:96:77:05:c1:1c:bf:3f:f5:79:1e:98:32:3f:
53:b0:4e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org