Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/MYP_ZmBw-_6_E90BAIx0q_QiMhQ.roa
File: MYP_ZmBw-_6_E90BAIx0q_QiMhQ.roa (raw, json)
Hash identifier: pUlIGOnCIJ7kZEFoZfOmTufHPQvGUftDjys399kiOXM=
Subject key identifier: 31:83:FF:66:60:70:FB:FE:BF:13:DD:01:00:8C:74:AB:F4:22:32:14
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4243
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/MYP_ZmBw-_6_E90BAIx0q_QiMhQ.roa
Signing time: Sat 29 Jan 2022 00:30:06 +0000
ROA not before: Sat 29 Jan 2022 00:30:06 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16963 (0x4243)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jan 29 00:30:06 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=3183FF666070FBFEBF13DD01008C74ABF4223214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0f:20:14:7d:70:32:df:e8:02:4b:bf:d5:b6:
f8:ea:19:00:0c:24:e1:59:58:fb:41:2b:b2:8e:d5:
3a:9b:a7:d6:0a:99:6c:9c:f7:b9:da:1e:b4:8b:9a:
87:2c:f9:6c:60:d2:a3:96:93:40:d7:97:28:0d:1e:
c0:61:ba:bb:bc:7e:74:e7:f1:40:c0:3d:9d:e9:49:
09:a2:61:89:e3:26:26:33:45:32:73:47:6c:c1:d1:
d6:d2:56:18:de:d1:c5:22:7a:a8:3c:95:d7:c7:da:
9c:3d:2a:3d:32:97:aa:c5:d6:51:21:bb:55:6b:5e:
ca:4a:31:1e:1a:83:2a:9b:2c:fd:be:cb:69:fc:f4:
9a:e0:d8:df:89:07:45:e9:49:3a:38:47:02:80:d8:
27:81:27:45:1a:5e:56:23:72:c3:61:95:62:a2:f8:
f2:71:15:e3:ca:58:78:60:c3:98:5b:7b:3e:fa:fa:
08:be:f9:09:bd:6d:88:30:41:33:e6:0b:bd:a0:e9:
f7:e4:04:fd:39:c8:f3:b7:18:28:f0:25:da:64:bc:
e2:62:79:2e:6f:fe:7d:4f:f5:75:31:f6:6f:66:95:
25:e2:80:67:60:5e:1f:59:c1:2f:af:c4:ce:36:ec:
e3:c6:54:ad:ec:f3:e4:48:7f:56:55:58:6e:f9:71:
d8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:83:FF:66:60:70:FB:FE:BF:13:DD:01:00:8C:74:AB:F4:22:32:14
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/MYP_ZmBw-_6_E90BAIx0q_QiMhQ.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:42:f3:6b:d4:5e:cd:40:03:e0:8b:68:ad:3e:b6:ba:c0:7c:
59:c1:44:4c:da:b2:b9:73:28:7b:e9:7a:54:b4:60:90:aa:28:
5e:d6:fd:68:04:b4:ae:74:58:3e:bf:57:67:02:d6:05:c5:13:
e9:11:dc:fc:ce:93:00:57:fb:6d:6a:f8:65:d5:53:a9:3e:3a:
d4:ae:fd:a1:81:3f:b3:ea:a0:34:24:9c:c8:b6:89:ab:e2:2d:
8c:f5:0d:df:ec:c8:e8:74:52:00:98:d8:e9:2c:10:a0:c0:6b:
c2:96:71:2f:9d:bb:4d:75:dc:95:92:f9:45:b5:0c:a4:7e:a3:
e9:b2:0a:d2:01:12:6b:75:4b:55:0c:6b:6f:ce:86:3a:d1:3c:
7d:1b:f3:35:33:66:56:cc:3b:ef:33:28:3c:01:5d:e4:ba:ba:
3b:c3:e5:a4:88:6c:9a:b9:7b:a5:17:e4:7e:7a:ea:46:fa:65:
d9:ef:c0:27:dd:1d:3f:af:cf:de:78:ea:6c:72:eb:e4:16:ca:
60:a6:3e:a0:5f:9a:e1:93:57:d1:3e:2f:12:a1:c6:d7:e2:27:
b1:c9:31:6d:6d:81:10:53:0f:77:35:18:63:af:92:ac:5e:bb:
c1:84:73:9e:a0:b4:dc:1b:32:86:da:af:60:e4:ef:d5:c1:10:
a9:dc:d9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org