Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/wCxflXxGPcZZ-__oEG_VEUholto.roa
File: wCxflXxGPcZZ-__oEG_VEUholto.roa (raw, json)
Hash identifier: TFL0IzsITimftde2qkeTvT1oCUueh84xXO66IdI4uCY=
Subject key identifier: C0:2C:5F:95:7C:46:3D:C6:59:FB:FF:E8:10:6F:D5:11:48:68:96:DA
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 461E
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/wCxflXxGPcZZ-__oEG_VEUholto.roa
Signing time: Sun 10 Apr 2022 00:30:08 +0000
ROA not before: Sun 10 Apr 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17950 (0x461e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 10 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=C02C5F957C463DC659FBFFE8106FD511486896DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:36:0a:b4:eb:e7:0c:3f:43:b1:e3:d0:51:8b:
81:f1:49:bd:1a:bd:cb:d0:1f:a4:5c:e2:69:07:40:
7e:6a:33:a4:29:33:cf:51:aa:0b:ce:91:97:66:bf:
1b:ea:f3:53:21:0f:a8:0b:9a:5a:37:be:bd:58:63:
42:e9:64:7d:c9:40:f3:8e:58:6d:04:6c:41:97:84:
47:ff:63:6f:42:d5:5e:ba:4a:a7:5f:65:7b:55:ff:
92:dc:32:b6:b2:83:db:ec:47:6f:d3:8e:e3:d4:52:
87:41:dd:39:33:8b:41:8f:56:6f:e9:3f:43:c6:6d:
be:64:5f:43:c4:7b:4d:67:1d:0c:3e:e2:4c:1f:06:
fe:5a:4a:33:32:5c:78:94:2d:e7:8c:b6:51:ec:fc:
16:c1:94:6a:00:ce:3f:ca:51:7d:46:a0:92:71:a0:
03:4a:cb:34:48:59:15:e6:8b:73:57:18:12:0c:55:
3b:e0:98:97:55:37:3d:3f:64:dd:04:89:62:22:2d:
6e:f3:4a:fc:69:8a:f2:f7:ff:fd:db:68:9f:7d:24:
57:f9:7a:37:f2:0d:af:91:9f:5e:5b:12:13:5a:be:
7b:e5:1f:a8:9d:6a:a4:f0:6a:1a:3c:55:60:c7:45:
4f:d7:6c:ef:ee:12:8a:5d:0d:34:5a:99:94:50:dc:
8a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:2C:5F:95:7C:46:3D:C6:59:FB:FF:E8:10:6F:D5:11:48:68:96:DA
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/wCxflXxGPcZZ-__oEG_VEUholto.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
25:af:5d:ee:24:d2:9b:c6:4a:20:ce:f2:d1:8f:c0:cf:87:9c:
62:68:d2:dc:e8:aa:5c:fd:04:66:c1:9e:18:55:b5:34:a4:c4:
69:ac:d5:58:7c:e9:57:30:49:3a:9a:c0:40:e4:bd:38:83:be:
49:fc:b6:7d:f9:99:33:a1:c4:b8:71:04:db:c8:c3:97:42:f1:
cd:3c:57:93:be:ae:7f:ac:69:c3:7b:67:be:da:50:33:81:af:
48:7a:3a:d0:2a:1b:47:c9:47:bd:d9:c1:ad:3d:5b:b3:1b:93:
af:c3:6a:07:5e:29:75:df:09:81:e6:3e:bb:17:10:52:05:85:
81:32:3e:3b:c2:09:a6:dd:40:0c:9d:93:21:55:a9:36:bb:92:
25:f6:99:b5:bf:10:ca:48:22:60:9b:0b:85:dd:da:85:d0:31:
8b:92:a8:f8:61:d0:42:d4:9e:fa:11:ae:2d:3e:98:e4:6c:8a:
51:bd:16:58:c7:aa:a8:1e:43:31:de:be:cf:a8:f5:79:af:24:
1a:e9:99:21:8b:9a:49:dc:fd:65:5c:5b:47:c8:61:2f:38:9e:
35:53:bf:eb:9e:21:23:18:70:f8:6b:49:d9:10:a5:a4:7f:b7:
0b:c8:4d:6d:9b:e4:15:95:c8:64:bb:78:f4:45:42:c9:6b:db:
5e:97:f2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org