Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/FtoVR1eKRcVukcgXgxm31ey1GCQ.roa
File: FtoVR1eKRcVukcgXgxm31ey1GCQ.roa (raw, json)
Hash identifier: YncMQkkrUcjsA+khjSRIiY4D19F09wuEGkq7ih8OF7k=
Subject key identifier: 16:DA:15:47:57:8A:45:C5:6E:91:C8:17:83:19:B7:D5:EC:B5:18:24
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4951
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/FtoVR1eKRcVukcgXgxm31ey1GCQ.roa
Signing time: Sat 04 Jun 2022 00:30:11 +0000
ROA not before: Sat 04 Jun 2022 00:30:11 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18769 (0x4951)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 4 00:30:11 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=16DA1547578A45C56E91C8178319B7D5ECB51824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:18:10:2c:60:4d:6e:4e:1c:97:06:b7:59:e6:
06:8f:f8:7b:9c:16:c9:8d:89:bf:1a:89:2f:30:8b:
35:5c:e6:0c:84:16:4a:4e:b6:b4:42:19:7d:7b:a9:
20:32:49:f1:3b:6b:38:c4:7b:c9:1b:74:cc:e9:e5:
2d:5d:fa:da:32:46:c1:40:dc:73:c8:8c:16:33:a1:
ae:73:d1:ef:98:e8:8b:8a:e6:db:43:8c:45:94:9f:
21:87:1a:6a:28:f3:d7:7e:d1:cb:e2:07:a6:79:fb:
49:81:17:ab:51:41:59:0d:95:72:0e:10:d4:4a:51:
57:55:81:f8:a0:18:28:84:32:44:79:12:23:e3:3a:
d6:0c:d3:db:a5:87:48:58:dd:2d:42:79:4b:2e:22:
65:32:c9:ca:b6:b6:f6:85:0a:90:3b:a9:e7:7e:d5:
d4:b9:84:51:0f:25:a8:ec:67:68:96:5f:e4:0b:03:
3e:e9:9f:10:ac:42:d8:af:bb:15:97:c2:79:56:c1:
b3:05:f3:d6:27:aa:72:9a:4e:2e:4b:dd:50:45:5d:
d4:27:5a:cb:66:15:3d:9a:2f:50:48:fa:a3:e8:4c:
36:67:7d:62:90:68:58:26:e5:53:d9:39:88:7f:fd:
b0:d2:81:43:d0:f4:a5:fe:23:c5:5a:69:f2:e5:19:
15:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:DA:15:47:57:8A:45:C5:6E:91:C8:17:83:19:B7:D5:EC:B5:18:24
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/FtoVR1eKRcVukcgXgxm31ey1GCQ.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.10.0/24
Signature Algorithm: sha256WithRSAEncryption
26:4a:c6:29:f5:29:a5:58:e3:34:fc:97:e7:53:5d:43:62:c6:
f1:e7:69:36:9e:c9:f4:3d:d8:c8:8b:0e:e8:18:4a:bc:4c:e5:
7c:c6:c6:62:7c:01:c0:2e:26:26:63:11:26:d0:e9:56:1b:d2:
74:1f:68:23:99:75:8c:a1:67:e5:5c:aa:8c:7f:5d:7c:f8:c9:
bb:1a:c9:0c:72:10:0a:81:94:26:6e:e0:56:f5:4c:8d:13:00:
d1:ec:42:bc:a7:51:6b:97:e1:48:88:6d:1d:55:39:2b:5b:89:
ec:6a:8b:0a:c6:c9:d8:31:08:60:7b:70:e5:33:63:ea:21:c1:
86:c5:c6:dd:0e:02:88:04:b2:37:5d:9c:6a:52:3e:0a:20:f3:
61:58:60:6e:74:d3:f1:67:8f:ff:28:86:5c:c3:22:5e:43:c7:
1b:f4:13:18:11:be:26:6f:03:eb:46:d1:a2:31:c1:2f:00:23:
1c:00:0b:0d:f3:74:26:e1:79:89:76:f6:61:ed:36:c8:a8:ff:
32:10:39:95:e0:04:d3:5b:cd:5a:f4:5a:0a:6c:69:da:a2:41:
69:03:a6:c1:93:9c:48:88:2c:6c:33:d0:c6:f3:76:bc:b1:bf:
14:bd:bb:7f:c1:a1:3e:f0:0f:05:76:3b:22:88:9e:cc:fd:9b:
38:70:51:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org