Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/GF5MJJoNSdeFsGKz3waT9wzcZeA.roa
File: GF5MJJoNSdeFsGKz3waT9wzcZeA.roa (raw, json)
Hash identifier: N+AZXfW4MHn/cAwOcuWKh9V8mUezbEg+iFmf1NAhRnE=
Subject key identifier: 18:5E:4C:24:9A:0D:49:D7:85:B0:62:B3:DF:06:93:F7:0C:DC:65:E0
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 434D
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/GF5MJJoNSdeFsGKz3waT9wzcZeA.roa
Signing time: Thu 17 Feb 2022 00:30:04 +0000
ROA not before: Thu 17 Feb 2022 00:30:04 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17229 (0x434d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 17 00:30:04 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=185E4C249A0D49D785B062B3DF0693F70CDC65E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ce:fc:a9:20:91:7c:6b:f5:b8:cc:b7:71:e9:
ca:00:fe:3e:26:9d:24:e4:a3:af:21:20:31:bd:9d:
71:60:1e:f4:b5:15:ea:18:c6:7e:f1:d9:93:0f:90:
66:c4:4b:95:8a:d8:29:62:27:f0:77:c0:fb:1d:4a:
8b:99:4d:21:17:48:80:fa:a3:a1:6f:ff:f3:0a:a6:
ff:9d:2c:30:60:ec:4e:fd:c3:2e:80:e3:fa:f1:a7:
d3:68:5e:f7:fc:c0:77:15:db:fd:2a:5e:b0:7f:eb:
cb:da:ba:bf:06:13:0d:12:a8:63:18:6a:0c:cf:f9:
0d:37:8e:ec:e8:71:ac:c1:5a:df:ab:99:3a:d2:d0:
e2:23:21:b6:9a:ef:61:e6:b6:af:7a:7f:04:50:cb:
ab:de:d8:fd:d3:2e:fd:c9:2e:20:b1:7d:d5:36:cd:
a7:17:59:0e:bc:bc:e9:8b:16:78:78:8a:c7:62:c0:
01:88:3f:cb:1e:88:a6:fb:09:86:f1:eb:f1:43:c4:
9b:a7:ff:61:7d:76:84:a0:e1:8f:8c:b0:d9:d4:d3:
26:f5:bc:a0:5c:e2:e3:30:3c:67:01:73:57:95:21:
b7:bf:e8:11:0d:e8:09:ae:3c:ce:d5:7a:8a:e8:a8:
2a:99:24:64:0a:da:6a:3d:48:8f:9c:f3:ff:9c:97:
3d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5E:4C:24:9A:0D:49:D7:85:B0:62:B3:DF:06:93:F7:0C:DC:65:E0
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/GF5MJJoNSdeFsGKz3waT9wzcZeA.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
74:39:3a:fc:19:b7:64:92:74:b9:aa:cc:84:a4:c2:b0:34:9c:
b7:df:55:4b:54:19:a0:be:41:39:46:68:f0:1f:86:f0:b1:bb:
c2:8f:5b:0e:47:c1:8a:e5:ad:c1:c6:ee:6e:b9:8d:7a:6c:6c:
ba:ed:3a:e4:7b:1e:75:32:88:68:7d:1a:59:57:8d:a0:7d:f4:
8d:f2:f0:8c:43:82:6b:2c:70:fe:01:44:98:4b:ed:b3:db:81:
b2:31:0e:02:d4:70:02:3d:d9:02:ad:38:50:5a:11:2f:0e:8a:
41:b2:8f:52:91:0d:2c:47:6b:03:e8:7e:22:35:3f:4a:8d:9d:
f8:91:55:c9:98:91:1a:c1:77:09:6b:9e:18:2d:90:6d:20:e1:
f3:0c:fa:ce:5e:79:34:17:80:c2:0c:9b:49:dd:83:ee:fb:01:
5e:dd:54:b3:bb:0a:bb:e5:f6:98:ce:1c:e9:bc:89:3a:aa:22:
23:29:e8:9d:e1:44:50:f3:32:43:f5:e4:f4:db:a1:88:3c:58:
26:a3:96:10:67:2c:72:8f:a3:f3:82:8a:82:81:76:f6:c0:f5:
28:f7:a7:65:a1:e3:e4:e0:0d:7b:77:94:4f:62:d2:61:18:1f:
34:cf:da:1f:62:e9:ce:71:db:62:28:03:40:c4:7f:e3:0e:00:
bd:86:29:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org