Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/Xe8xLmjCdCRbySPy7aGk4LTkoWs.roa
File: Xe8xLmjCdCRbySPy7aGk4LTkoWs.roa (raw, json)
Hash identifier: +iO1YiLBfShL8DKPr5nt7eAf9DZCfpbJRPYsDYaXaGc=
Subject key identifier: 5D:EF:31:2E:68:C2:74:24:5B:C9:23:F2:ED:A1:A4:E0:B4:E4:A1:6B
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4451
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Xe8xLmjCdCRbySPy7aGk4LTkoWs.roa
Signing time: Tue 08 Mar 2022 00:36:41 +0000
ROA not before: Tue 08 Mar 2022 00:36:41 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17489 (0x4451)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 8 00:36:41 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=5DEF312E68C274245BC923F2EDA1A4E0B4E4A16B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0d:60:4a:30:9a:4d:33:5e:9e:53:ad:fa:1f:
35:b4:61:1c:8a:dc:68:1f:f7:f1:a9:b8:e2:df:99:
43:1a:fb:64:ad:a8:75:9c:0d:a2:43:ef:ec:05:02:
f5:b5:50:f0:4d:48:c5:5a:0b:58:d3:4c:8d:5d:d4:
b1:8f:92:3b:f7:96:ef:f1:90:49:b3:d7:ac:49:e6:
75:c4:f5:d8:78:55:89:85:0b:e4:03:f7:66:ae:95:
83:f3:b3:45:3a:19:76:58:6c:ca:7e:88:1a:33:5b:
4f:ba:99:84:3c:9e:ff:40:66:1c:3c:b0:ac:1d:28:
99:a0:06:fc:02:15:57:b6:70:6f:c2:12:c4:96:2d:
f9:5c:fe:d0:43:ff:39:6d:f4:38:da:12:e2:2d:c9:
40:83:6c:bf:39:97:1b:a2:4f:2c:41:31:c9:6c:f6:
38:00:0d:ed:66:80:64:99:f4:c5:3a:62:d7:3f:3d:
54:15:2e:18:60:61:90:79:4e:35:de:0e:94:92:43:
36:ec:74:e7:78:29:7b:6d:a6:66:e3:79:69:bd:f8:
a6:05:76:e6:05:cd:03:8d:8a:9a:65:81:3b:ef:30:
bf:4a:ac:8d:2b:39:ff:f7:fe:35:a1:0f:94:cc:8c:
23:e0:ee:8a:26:7a:da:6d:07:1e:00:60:e1:07:c2:
82:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:EF:31:2E:68:C2:74:24:5B:C9:23:F2:ED:A1:A4:E0:B4:E4:A1:6B
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Xe8xLmjCdCRbySPy7aGk4LTkoWs.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:7f:b8:53:83:02:d8:79:34:8b:6e:78:c0:24:b7:5c:d1:83:
90:c9:a8:9e:a2:8f:80:50:fd:19:49:ac:9b:e0:04:f5:08:73:
dd:74:34:54:08:1f:35:2e:47:69:7f:34:2e:38:bb:18:1e:7f:
89:c5:a8:66:6c:b0:99:06:09:76:c2:89:f5:a1:60:76:88:63:
77:7e:d0:bc:89:79:ed:20:91:10:7d:90:52:a5:e5:af:cb:48:
fb:8f:f0:99:e0:32:45:36:9e:30:e3:be:02:7a:07:dc:ef:34:
cd:ea:e6:fb:0d:1a:54:6e:4f:4b:ec:85:8f:cf:8e:d2:12:cb:
fc:b1:ff:48:a4:d5:72:4d:06:44:1b:38:97:64:aa:38:b1:76:
b4:d6:91:1d:97:25:a9:cc:1f:94:78:a2:6b:6d:2c:69:db:09:
9d:70:ab:1a:a2:93:fc:25:cf:60:95:74:7e:d4:44:ee:f2:00:
d7:66:64:90:d8:e8:f2:ed:b1:3a:df:da:22:04:c2:90:b2:bf:
a9:a2:e6:d4:da:f5:28:f4:0c:5d:15:b9:82:e4:09:94:99:3f:
53:ec:40:e9:e2:44:7f:a2:13:3f:82:5b:57:37:47:71:f4:56:
77:a8:a9:ab:53:f4:36:d1:98:b3:be:d3:53:0c:26:ba:ea:23:
15:2c:a8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org