Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/4yUhClSoYX8v3fUPsgTDeR-38C8.roa
File: 4yUhClSoYX8v3fUPsgTDeR-38C8.roa (raw, json)
Hash identifier: kXIq9tW9arkegzNm6A5dp6ozAcD0KBBp3USIczgmpzQ=
Subject key identifier: E3:25:21:0A:54:A8:61:7F:2F:DD:F5:0F:B2:04:C3:79:1F:B7:F0:2F
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 48EB
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/4yUhClSoYX8v3fUPsgTDeR-38C8.roa
Signing time: Tue 31 May 2022 00:30:07 +0000
ROA not before: Tue 31 May 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18667 (0x48eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 31 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=E325210A54A8617F2FDDF50FB204C3791FB7F02F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fd:f8:58:8f:60:49:fa:50:9c:6e:6b:c8:8b:
94:5b:c4:5b:bf:d8:98:0d:99:64:c0:f3:6e:2c:a7:
fc:80:3f:0a:97:01:fe:27:d2:fc:93:19:68:97:db:
ae:8c:b1:7b:77:33:bc:5f:84:62:f3:c5:35:17:df:
9c:7e:bd:6d:06:dc:f3:39:22:65:4c:44:63:6d:bb:
66:b6:be:ef:8e:86:58:64:8a:0a:48:83:4b:28:16:
35:02:08:46:67:62:b2:8d:da:86:f1:62:72:cd:30:
1a:a8:07:c5:b1:db:8f:7d:50:41:cf:db:59:e3:bb:
0b:e2:d6:d8:b8:43:4f:86:f2:45:de:48:73:3b:86:
2b:e7:d0:40:ab:36:a0:f4:c6:fd:ca:c6:f3:b6:d2:
ee:c6:92:8c:53:a5:33:28:24:5c:ef:34:ac:3f:60:
37:b8:61:7b:9a:59:b7:52:e2:8c:0d:fd:17:bb:71:
f8:6a:40:03:69:64:6c:ea:1a:27:d1:7b:89:59:79:
3e:19:b8:09:a4:31:33:ff:2f:59:69:9d:66:01:30:
c2:45:00:5f:64:cf:f8:c9:4d:48:75:3d:84:05:8e:
6b:75:89:2d:2c:89:a8:b1:ff:be:6d:08:af:72:a7:
53:7f:fb:fd:d8:e3:d3:35:30:48:07:77:c5:e1:1f:
79:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:25:21:0A:54:A8:61:7F:2F:DD:F5:0F:B2:04:C3:79:1F:B7:F0:2F
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/4yUhClSoYX8v3fUPsgTDeR-38C8.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
54:9e:de:62:c9:79:b3:f4:25:df:52:07:91:bd:1e:ac:9b:4b:
d2:f1:fa:42:d7:77:41:1c:5b:ea:54:c3:98:3b:c4:37:2c:ab:
10:07:4d:3f:ca:ba:3a:d1:78:e3:3c:08:88:93:f7:6c:d8:a5:
ec:e7:c5:94:d7:31:fb:b2:2c:02:f1:20:09:d2:bd:1d:9a:ba:
ba:6d:9a:5e:e8:a6:d6:2d:a4:79:67:d1:1f:27:72:47:8c:a6:
d1:f8:9b:7d:ec:68:ab:e5:64:64:62:96:bd:fa:bd:d0:f9:ae:
44:3d:02:d9:14:60:41:0f:25:7c:bd:07:09:74:9d:4e:f7:1e:
ef:64:f5:3f:2b:72:40:82:1d:f6:0d:10:a7:e5:98:5a:cb:55:
a9:07:25:e3:7b:26:12:af:da:b1:c7:5f:9b:a0:6c:9c:0c:d3:
07:18:8c:05:de:98:f8:be:4a:24:c0:d8:c9:aa:f6:31:73:94:
fc:2d:1d:ed:3d:e3:a5:e2:48:01:5c:f1:20:68:b4:91:ce:7f:
4f:a9:50:60:2c:aa:ae:da:d4:78:73:e0:b2:2f:dd:d0:7d:c0:
37:6a:d8:5e:cc:58:26:b3:7e:8b:94:5a:b7:e6:1c:d7:65:23:
bd:d6:0f:dc:2c:b4:bd:1f:25:12:d7:34:c9:c8:44:41:94:aa:
b4:a2:17:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org