Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/LolegsMZ-EKVLn5NnklcN7W7gx4.roa
File: LolegsMZ-EKVLn5NnklcN7W7gx4.roa (raw, json)
Hash identifier: 3Ww0/ERrdwVWflUNry7yIuP9+ScQXQlG6kjqzzRCGdU=
Subject key identifier: 2E:89:5E:82:C3:19:F8:42:95:2E:7E:4D:9E:49:5C:37:B5:BB:83:1E
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4894
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/LolegsMZ-EKVLn5NnklcN7W7gx4.roa
Signing time: Wed 25 May 2022 00:30:06 +0000
ROA not before: Wed 25 May 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18580 (0x4894)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 25 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=2E895E82C319F842952E7E4D9E495C37B5BB831E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8b:68:c1:42:99:af:ed:15:bd:32:97:08:d7:
81:e0:a0:53:2c:80:ce:f0:21:e9:aa:c2:f4:4f:27:
c1:0d:d0:47:ed:29:c7:7e:2e:f2:c3:c9:1b:a4:4d:
12:76:dc:26:09:fc:e1:20:f6:de:bc:32:d7:95:95:
c5:62:40:62:ad:ea:01:02:af:96:0f:0e:ec:c1:56:
01:4c:e0:45:e1:15:ab:2d:7b:d0:78:0a:fd:51:91:
40:4a:c0:f0:7d:09:9e:b0:fd:5d:0a:6f:24:78:c0:
2f:f8:94:e3:d4:84:7a:83:4d:59:e8:60:46:d4:8a:
e9:f0:d3:3c:fe:ce:8b:92:72:90:ac:b3:ad:45:c7:
ef:59:dc:40:21:ea:3f:4f:fb:72:16:02:ac:91:71:
c9:0d:c0:3b:0c:51:83:eb:2c:5b:19:d0:34:c6:9e:
20:cd:97:62:da:35:8e:cf:11:e5:e8:86:b0:c8:2a:
79:cf:83:66:24:e2:7d:76:b0:2a:08:41:f1:96:a8:
ef:e4:5b:35:50:bb:39:8b:0d:21:da:0d:21:01:bd:
ba:70:8d:5e:66:ec:dd:bc:7e:a9:54:12:d3:95:db:
6d:6f:9b:57:f7:7f:86:ac:65:0b:cc:67:5c:0a:b3:
f8:78:01:c7:a0:a3:5d:f0:e0:ba:5d:68:ab:e5:49:
04:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:89:5E:82:C3:19:F8:42:95:2E:7E:4D:9E:49:5C:37:B5:BB:83:1E
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/LolegsMZ-EKVLn5NnklcN7W7gx4.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:ac:09:4f:ee:15:f5:03:5e:b4:11:24:aa:3d:44:71:95:5c:
70:75:9f:a2:32:aa:2b:1b:fb:aa:58:84:fc:a4:c2:a4:32:fe:
36:c0:d8:c0:91:7c:a5:fe:88:ea:da:80:71:a3:cc:25:2d:c5:
3a:d4:d0:7d:ac:5b:44:ac:b8:57:87:21:cd:44:bd:04:f8:c4:
be:e1:34:c6:97:6d:ee:9e:20:f6:74:6a:12:a6:32:a8:28:02:
60:9e:65:50:14:a5:e7:0d:63:bc:8e:63:c7:39:78:86:1f:fb:
ef:73:e4:9a:76:90:d6:ac:19:10:55:9d:22:be:e9:4d:ad:5a:
25:9f:64:6f:c8:62:bb:30:9b:24:f1:ba:6f:5f:c0:61:3f:e6:
9e:a1:c5:0a:08:28:58:d2:44:e1:99:30:89:46:6b:89:1a:73:
84:c0:1f:6b:13:04:23:a6:e2:73:54:0a:fc:ba:ae:0e:64:ee:
13:96:e6:79:24:96:c0:b8:ac:10:06:2d:43:b2:e7:53:9c:22:
da:64:40:15:c3:4e:10:5e:3a:71:55:13:9d:00:bd:33:da:b6:
f2:99:05:d3:23:f3:04:88:a7:f7:90:6c:ce:1f:98:cc:b5:ec:
24:46:a0:b8:e6:c8:3d:80:0d:8c:a3:8b:15:d1:59:80:93:77:
7d:f6:74:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org