Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/QHOYwGIO_o4A7HL9P1xEQJx6Y0M.roa
File: QHOYwGIO_o4A7HL9P1xEQJx6Y0M.roa (raw, json)
Hash identifier: Sz8uMTKu+txWlaLOvoij7ELSR+Nk63nfIAEb7G5IBoM=
Subject key identifier: 40:73:98:C0:62:0E:FE:8E:00:EC:72:FD:3F:5C:44:40:9C:7A:63:43
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 48BF
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/QHOYwGIO_o4A7HL9P1xEQJx6Y0M.roa
Signing time: Sat 28 May 2022 00:30:05 +0000
ROA not before: Sat 28 May 2022 00:30:05 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18623 (0x48bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 28 00:30:05 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=407398C0620EFE8E00EC72FD3F5C44409C7A6343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:8c:63:ea:fa:6d:15:d4:2d:75:54:22:74:bf:
af:da:fa:e2:12:51:90:4c:98:c6:8e:75:d7:30:8d:
aa:30:02:f5:7d:12:ca:4a:1a:ad:fc:d5:c4:e9:d8:
5a:61:c3:0a:23:a5:3a:7a:4a:f4:c3:92:4a:e9:f7:
d2:9c:78:87:2e:e8:2f:28:d1:a5:01:aa:ab:64:c2:
fb:35:de:d6:ba:38:bf:c2:46:0a:53:21:c8:b1:9b:
f0:3d:f8:c6:e7:09:c4:d0:1a:ba:84:56:4f:c2:74:
80:6b:25:cc:1b:ef:e7:c4:d5:b6:4e:7b:26:bf:49:
86:4e:fd:c0:0d:7f:4b:40:9a:0a:ee:1a:5d:23:bb:
79:0b:47:cf:65:ff:7d:8a:25:24:a6:43:f4:33:23:
a4:ce:8c:1c:0d:e8:ea:a4:24:78:5c:ce:7e:42:8b:
71:ae:c0:08:75:61:10:87:44:27:a4:1d:89:43:a6:
20:6f:00:04:e3:f6:be:73:bd:0b:8a:87:fe:7c:08:
1c:c5:19:08:6a:b1:21:e4:fb:bc:ea:46:65:83:f2:
6b:d8:93:d7:95:3d:74:11:d9:0d:78:96:3d:25:cf:
c0:c1:fc:33:b4:4f:14:1a:14:ff:40:7c:cc:b8:8c:
ff:c0:4f:6b:1e:71:47:50:98:ea:e2:17:13:45:95:
32:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:73:98:C0:62:0E:FE:8E:00:EC:72:FD:3F:5C:44:40:9C:7A:63:43
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/QHOYwGIO_o4A7HL9P1xEQJx6Y0M.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
82:c3:c9:a9:b3:4b:46:46:89:64:3d:d3:50:a5:3d:1d:bf:3a:
e0:8d:07:2f:3a:cd:e2:74:f4:1d:e0:71:35:98:c1:59:26:59:
18:ea:d2:a5:46:f2:26:7d:b7:8a:5d:03:9c:ee:dc:6a:69:6d:
8d:a2:67:8f:b8:17:f4:5d:20:16:97:19:35:e0:27:dd:9f:0c:
94:e1:75:af:17:93:60:1e:fc:ec:92:73:e6:c6:19:76:89:42:
f8:c5:0b:df:1c:63:07:8e:df:d3:61:4e:fb:56:10:4a:c7:90:
dd:7c:bc:23:9b:a1:23:dc:67:42:29:51:cb:2c:05:5d:74:89:
0c:13:52:4b:1d:13:89:3f:c5:86:06:1b:5d:98:1e:2a:dd:0f:
cc:09:cd:b5:2a:bb:fb:1f:ef:d0:a2:68:3f:a3:0d:c1:4b:a0:
73:43:7b:dd:82:cd:86:2d:e5:a6:2d:51:07:0b:94:ef:c9:e2:
2f:11:ef:bb:d4:ee:4d:40:c3:25:29:7f:9d:dd:a1:4e:b1:a4:
b1:da:d0:0c:3d:1c:21:2d:57:53:77:f0:32:ab:e2:0e:16:15:
d9:e4:b9:46:6d:a3:1d:a7:f8:ac:1b:d3:bd:c0:68:32:74:57:
62:64:68:36:b2:98:88:f5:1d:87:03:89:d1:31:94:8a:1e:d5:
08:fc:c2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org