Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/g5urkvBgSN_wWbgOn_EzZXA-Jsk.roa
File: g5urkvBgSN_wWbgOn_EzZXA-Jsk.roa (raw, json)
Hash identifier: t+eL21oekPnV4i7kIBiCSHN5yNDfYDC5j94HtqyPYLw=
Subject key identifier: 83:9B:AB:92:F0:60:48:DF:F0:59:B8:0E:9F:F1:33:65:70:3E:26:C9
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 495E
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/g5urkvBgSN_wWbgOn_EzZXA-Jsk.roa
Signing time: Sun 05 Jun 2022 00:30:07 +0000
ROA not before: Sun 05 Jun 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18782 (0x495e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 5 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=839BAB92F06048DFF059B80E9FF13365703E26C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e1:5f:df:28:8d:b2:2c:58:08:22:84:c6:2d:
27:cf:24:79:1f:d9:32:a8:84:fa:f0:44:65:36:25:
e4:ad:8e:c6:b1:05:67:46:36:d6:5c:dd:2e:86:e2:
74:22:81:03:38:41:1b:3e:2b:a0:de:4f:13:f2:a8:
df:ca:f5:9c:65:d7:c8:69:de:21:b9:80:f2:c0:70:
dd:bf:73:14:67:92:95:fa:98:29:8b:a5:34:9f:f4:
44:c4:d0:a9:91:8e:42:53:7f:fa:ac:83:52:e1:18:
cb:df:a8:e1:11:c9:66:98:d6:ac:d8:ed:86:c2:94:
65:fa:64:26:1a:2d:b7:36:8a:10:9f:51:7f:06:d5:
a8:e6:7d:57:21:76:98:65:02:5b:64:d7:8d:10:ca:
c0:46:6d:38:06:f4:df:99:0b:7f:45:fb:49:fe:cf:
c8:76:dd:67:52:4e:47:00:54:20:a9:d8:cc:b2:e1:
05:79:49:6b:55:db:64:a7:35:ef:cf:be:62:98:7c:
0b:b9:06:51:52:5f:e3:2c:fb:49:37:17:4c:94:ff:
e1:73:bf:9e:d4:d3:9b:b2:c7:ce:c4:e1:39:02:d2:
10:3e:3d:24:df:1c:dd:00:9f:fa:33:87:d3:74:76:
89:65:03:77:29:1d:7c:44:45:fe:68:61:2f:79:49:
4d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9B:AB:92:F0:60:48:DF:F0:59:B8:0E:9F:F1:33:65:70:3E:26:C9
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/g5urkvBgSN_wWbgOn_EzZXA-Jsk.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
54:06:f5:eb:29:4a:5d:05:99:27:4c:d2:9f:4f:b8:6b:23:8f:
cf:af:04:6b:d4:73:05:57:d8:ce:27:04:65:09:8c:95:9f:5a:
f5:e9:90:4d:6e:cf:d9:ea:b5:dd:3b:85:5e:63:af:32:ad:dd:
1a:db:48:32:91:4f:e7:18:7b:94:03:15:ff:33:92:98:49:e9:
b4:73:1e:df:1e:37:74:94:25:e1:6d:af:66:05:ef:da:48:6f:
f5:9c:a5:f2:3d:72:c3:c3:8d:69:ed:a8:f8:a1:78:6a:bc:bb:
83:2d:34:b9:f3:84:a6:1f:56:96:cb:4c:63:93:c1:62:a9:dd:
e4:ff:a9:df:97:08:94:86:c8:ee:7f:85:cf:75:96:9f:ec:88:
ee:e9:87:23:57:88:3a:78:b5:47:1c:fa:c9:4c:ba:22:3b:7b:
b1:66:de:95:25:a7:9e:df:46:32:b9:a3:7c:60:12:c5:15:c1:
38:96:32:b1:d9:7b:a6:3f:52:2e:f9:59:48:e0:2c:14:40:1a:
0a:38:04:a1:90:c8:8e:fc:24:5b:d4:51:98:b5:82:49:61:64:
1b:34:f5:53:01:84:41:68:69:15:5c:c6:4d:f4:ab:8b:8c:a7:
42:3e:18:81:be:8b:8b:b5:fb:e2:0c:9a:9c:3b:fc:c0:84:cf:
d7:2b:d8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org