Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/wFlM4rf9Df2J0YBmEpkgUKKYsJA.roa
File: wFlM4rf9Df2J0YBmEpkgUKKYsJA.roa (raw, json)
Hash identifier: yKg7h8HXs0jRi57cx+tHIQKi9NklUBG4Efw2EurJuDE=
Subject key identifier: C0:59:4C:E2:B7:FD:0D:FD:89:D1:80:66:12:99:20:50:A2:98:B0:90
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 448C
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/wFlM4rf9Df2J0YBmEpkgUKKYsJA.roa
Signing time: Sat 12 Mar 2022 00:30:08 +0000
ROA not before: Sat 12 Mar 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17548 (0x448c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 12 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=C0594CE2B7FD0DFD89D1806612992050A298B090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8e:72:74:dc:f1:37:09:a0:57:d7:eb:f4:ca:
2f:5b:32:0b:95:77:62:5b:5c:4c:1f:c0:f5:4a:bf:
91:51:88:6e:18:bc:96:b3:64:06:f5:d4:5f:40:ce:
02:47:18:26:14:90:4d:9f:e2:7c:00:35:41:a4:c2:
ff:bf:6e:4c:89:bc:c7:37:56:d8:21:06:ee:78:08:
bf:5c:65:25:26:70:bb:2a:22:07:e0:0c:f9:60:b8:
37:41:10:e8:de:fe:b8:8b:a7:4a:1c:89:79:d2:a0:
7b:f0:1e:9d:70:8d:9f:de:55:a9:f6:3a:8e:ca:3c:
cb:84:de:b2:a0:76:78:51:bf:7b:73:3a:05:af:6e:
31:19:7c:ae:0c:f4:33:25:ba:18:d1:66:44:cd:ae:
cd:d6:1f:12:82:c1:b7:88:f2:15:2c:19:2d:86:c2:
55:71:3c:bb:ad:4d:7c:06:0e:8a:ca:90:71:2e:20:
17:83:2f:8d:22:77:77:58:36:81:c6:71:80:08:c7:
b6:88:97:a5:c3:cf:27:5a:3f:ff:56:dc:51:b9:58:
16:82:24:36:af:cd:e7:0a:c0:77:b8:d3:2d:7a:78:
24:01:dd:41:16:72:17:62:8f:af:66:f0:23:49:b2:
10:2d:aa:4b:d9:70:dd:1a:60:c7:85:fb:0a:96:95:
85:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:59:4C:E2:B7:FD:0D:FD:89:D1:80:66:12:99:20:50:A2:98:B0:90
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/wFlM4rf9Df2J0YBmEpkgUKKYsJA.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
46:85:8b:88:12:e0:93:f2:f2:bd:d6:5f:11:38:6b:60:72:68:
6e:51:88:f6:fe:5d:11:46:e1:95:37:86:be:0a:d8:dc:78:e0:
20:d4:47:e1:ce:93:c2:fd:ee:5b:07:e3:79:6a:3c:26:d4:fe:
de:6a:af:c6:42:9b:7d:27:00:f7:4c:ce:c8:55:32:a4:c2:44:
58:66:09:33:23:a5:c4:c8:e6:b3:fc:e0:e2:5a:ab:a2:04:2a:
ec:2d:13:e2:1d:67:a5:63:8f:f5:11:8f:2d:9b:85:a6:02:a3:
a5:f4:7c:50:6f:cd:77:95:f0:44:1a:af:d7:d4:a8:30:41:91:
61:19:c7:c2:7f:eb:24:4a:93:dc:24:ab:40:03:d9:b6:c1:1d:
74:4e:d6:6e:5c:58:49:a8:95:47:93:36:cb:7c:d5:5a:2f:d1:
fb:39:47:24:a0:d9:94:2c:22:45:c9:35:c4:2b:59:f9:11:1f:
26:64:1a:2c:cb:8d:1c:c7:c8:eb:b2:ff:4f:f4:9f:5e:d1:4f:
3e:8a:3a:4a:d0:32:ee:1e:6d:cf:d3:97:c0:e6:e3:25:10:df:
4e:e7:de:2c:b3:cf:02:40:59:db:4b:0e:93:5c:57:7b:39:4a:
dd:d7:f9:e8:d0:ec:90:56:8c:fd:af:b1:03:30:a1:fe:30:34:
27:ff:79:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org