Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/jFfSlcgFzf38K8RCC0GqbKx3Dxg.roa
File: jFfSlcgFzf38K8RCC0GqbKx3Dxg.roa (raw, json)
Hash identifier: kUn0H7xdH2qEM1Q2urwtyyl9GiEv3F3N8QM/eaXaVeQ=
Subject key identifier: 8C:57:D2:95:C8:05:CD:FD:FC:2B:C4:42:0B:41:AA:6C:AC:77:0F:18
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 47EC
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/jFfSlcgFzf38K8RCC0GqbKx3Dxg.roa
Signing time: Fri 13 May 2022 00:30:06 +0000
ROA not before: Fri 13 May 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18412 (0x47ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 13 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=8C57D295C805CDFDFC2BC4420B41AA6CAC770F18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a7:6b:b2:9f:1a:c5:f4:c5:7f:f4:53:53:d9:
bf:55:1f:c9:e5:92:f0:2e:cf:3b:64:00:b9:46:6d:
c4:b7:a4:ff:e8:aa:c0:2b:cd:92:48:93:d4:ae:be:
56:76:a5:3f:6d:bc:f6:9a:db:95:c8:14:ef:b3:74:
fa:92:61:c9:e4:a4:2d:3f:6b:0a:d4:48:50:da:be:
19:ce:a1:54:64:00:23:36:bf:20:8c:f8:65:01:5f:
c1:fc:33:63:1a:7a:7f:c2:09:62:a3:29:5a:cc:03:
45:f7:5d:11:1c:62:72:7d:68:2f:ff:3f:6f:3c:2c:
64:56:54:9a:e0:0b:57:1e:3b:b8:2c:49:c9:e9:c4:
e0:ae:54:84:98:14:c9:a9:f8:be:73:84:d5:b9:f1:
1c:d9:93:1b:e3:49:7f:35:0d:d2:2c:41:4e:30:d5:
56:64:c4:e1:d8:f0:fb:14:8e:1e:d4:c6:19:07:0a:
63:69:ab:86:98:22:a8:8d:32:cc:a5:31:40:8d:c4:
1b:49:81:62:02:8f:d7:90:48:be:f8:02:be:69:41:
52:3e:76:94:d8:da:6d:3a:90:a9:b8:1d:fa:55:fe:
4d:cf:d4:aa:e0:7a:26:84:09:f6:9e:ac:4b:7e:2e:
61:4c:44:1f:87:ad:55:84:1a:0c:ed:60:43:f3:ba:
24:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:57:D2:95:C8:05:CD:FD:FC:2B:C4:42:0B:41:AA:6C:AC:77:0F:18
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/jFfSlcgFzf38K8RCC0GqbKx3Dxg.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:6c:4a:7e:ff:98:cf:c1:31:fc:76:ae:63:e8:94:db:ca:1a:
a4:07:cf:f0:78:bc:38:ec:0a:b1:65:ca:3b:fa:fb:26:4b:92:
d2:fa:51:c8:43:01:fa:bb:ec:23:b4:0f:a5:23:d6:d9:ed:6c:
dc:a1:32:05:7d:78:8e:4b:4e:c3:81:20:a4:29:6f:7c:0f:3e:
73:b3:81:3f:7c:65:87:48:2c:60:39:a4:2a:d1:77:e8:c0:fe:
aa:ef:f1:a8:06:67:f5:8d:71:26:d6:34:08:3d:2c:5c:15:27:
2e:f5:82:55:c6:14:3f:4f:1d:24:33:35:92:dd:c8:8b:17:51:
59:e0:42:2e:1a:63:88:e2:24:15:36:5e:32:43:84:c7:c3:55:
a7:5c:b6:2a:cf:c0:b4:66:4a:d0:07:e5:17:e2:7d:37:ae:5c:
a2:5c:f9:59:d5:1c:c7:c1:a3:0c:60:ab:89:74:30:74:85:d4:
c9:57:32:c8:14:2f:82:d8:ca:7d:37:f0:78:c1:85:af:6e:14:
59:cc:f5:cb:9b:71:89:4a:36:57:d9:ae:57:3c:c6:c3:81:c5:
7e:47:a5:20:91:b0:b5:1c:29:47:9c:69:12:f9:15:85:7d:c5:
51:c3:66:1c:50:ed:ea:53:5e:3d:e5:9e:3f:9c:23:ed:56:b6:
81:c7:f0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org