Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/YvHBlEjxzm1YgPMfUCUlHVdRCU4.roa
File: YvHBlEjxzm1YgPMfUCUlHVdRCU4.roa (raw, json)
Hash identifier: 1WSX/RvgY0paEveGlyVBJ49Nc45tFvk2wcy1vh49r9g=
Subject key identifier: 62:F1:C1:94:48:F1:CE:6D:58:80:F3:1F:50:25:25:1D:57:51:09:4E
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 454B
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/YvHBlEjxzm1YgPMfUCUlHVdRCU4.roa
Signing time: Sat 26 Mar 2022 00:30:06 +0000
ROA not before: Sat 26 Mar 2022 00:30:06 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17739 (0x454b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 26 00:30:06 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=62F1C19448F1CE6D5880F31F5025251D5751094E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:62:fd:bb:41:76:48:e9:f7:b1:2e:c6:5c:85:
ab:59:b1:f0:94:2d:4a:f7:45:1a:37:dd:23:3b:18:
4b:9d:f9:5b:43:80:eb:1e:02:1a:be:a5:0e:1f:25:
5a:49:04:5b:79:d6:53:1e:4f:78:31:74:4e:f3:e8:
9f:ac:67:1e:8d:65:32:52:04:2a:54:66:55:b4:23:
f0:a8:ba:24:1c:a9:a6:83:c4:90:49:c1:07:f5:c9:
52:36:e7:87:ab:6b:89:fe:07:a5:dc:32:b0:30:bc:
0a:b3:59:35:4b:23:1d:db:ef:61:38:a0:11:69:de:
51:f3:94:35:23:e7:90:e7:7e:4f:73:1e:36:59:43:
bc:2f:06:3e:12:5a:0b:ab:c3:05:ad:b0:ef:00:de:
c2:5b:dc:0d:60:d7:3a:94:8d:7e:9b:ed:27:b6:d3:
1c:4c:be:5b:87:ce:89:08:2b:08:e4:15:6c:10:81:
01:b3:4a:e3:3f:e6:d0:05:55:86:bb:83:f3:1a:72:
3b:8c:d2:e5:bd:57:ee:56:de:07:65:96:f6:0a:ca:
57:b9:d6:55:ea:d5:f0:80:ae:b3:8b:fa:0b:be:1c:
6e:63:a6:9d:fa:b7:6a:fe:35:72:36:65:8f:c8:f1:
31:0b:9a:7d:a1:c9:5e:45:b0:ee:80:fc:13:c2:29:
c9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F1:C1:94:48:F1:CE:6D:58:80:F3:1F:50:25:25:1D:57:51:09:4E
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/YvHBlEjxzm1YgPMfUCUlHVdRCU4.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
82:6e:4e:62:75:fa:ec:18:d2:ed:2b:b0:a8:d3:e5:d3:65:38:
1d:bc:fa:c8:65:8f:51:27:5e:8e:2c:32:e5:3d:32:2d:62:84:
8d:5e:a2:d5:59:e8:56:d2:b8:4d:d5:37:50:44:8a:1d:29:a8:
46:0c:aa:46:c6:c6:0c:bd:2c:88:4b:85:c8:cf:eb:02:b5:76:
c2:58:64:51:fa:13:2e:53:b4:6f:52:35:02:a2:1f:8f:4b:6d:
c9:66:cf:97:06:b5:6b:42:cc:1b:da:8d:9f:90:57:24:21:62:
96:8a:2e:bb:d6:eb:5d:2e:e6:ca:fd:aa:e3:03:2f:5c:b7:0b:
20:59:81:c6:34:6c:61:d5:61:08:7c:97:19:ef:ec:fc:9b:cd:
01:e8:ef:9d:eb:14:3b:c4:78:11:51:db:80:b7:6c:31:c8:0d:
1d:7d:b4:49:05:ef:83:af:66:a3:b8:7b:da:30:5c:e8:d1:a6:
ab:7f:be:ff:f3:8a:9b:34:f1:72:03:7c:23:0d:10:59:01:ae:
f5:da:87:62:2d:6b:ed:14:c4:96:b8:84:7e:47:64:23:69:f4:
4d:46:d7:00:b4:dc:36:22:ed:a5:09:e0:27:d8:16:e1:9a:a0:
83:e9:fe:45:12:75:b6:e1:80:9d:83:cb:3b:5d:c9:c5:c2:dc:
f4:dd:2f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org