Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/cMEVczShbNmKywNnpEQOBYYMS3s.roa
File: cMEVczShbNmKywNnpEQOBYYMS3s.roa (raw, json)
Hash identifier: NSgMrtbVt6m0SHbPzb+x1jklFwq57W1DeKxMz0yOa38=
Subject key identifier: 70:C1:15:73:34:A1:6C:D9:8A:CB:03:67:A4:44:0E:05:86:0C:4B:7B
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4761
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/cMEVczShbNmKywNnpEQOBYYMS3s.roa
Signing time: Tue 03 May 2022 00:30:07 +0000
ROA not before: Tue 03 May 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18273 (0x4761)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 3 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=70C1157334A16CD98ACB0367A4440E05860C4B7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:52:72:8e:51:42:43:43:85:11:13:29:2a:52:
d9:6f:e1:fd:bc:b7:ef:24:54:54:85:60:6f:ba:70:
fd:96:21:52:bc:c5:23:d4:b5:08:03:98:16:15:5f:
eb:8e:8a:24:5e:1e:25:1e:67:8d:3b:c6:e5:66:69:
43:7d:da:51:cc:9a:3f:f6:1f:c4:a7:2e:45:ef:db:
09:21:50:1f:4c:d5:37:18:ae:c5:e5:be:53:a0:2a:
58:f0:37:93:18:9b:3a:95:07:77:4c:2c:03:d0:3f:
86:3a:50:51:81:b9:19:e8:ff:aa:38:5b:66:39:f4:
cc:62:b8:2d:d2:e4:45:6a:4b:ae:aa:1f:75:d4:b5:
6a:43:4a:52:9c:a9:67:60:12:72:99:4d:ef:ab:58:
f9:57:9f:61:33:65:c2:0b:f3:4e:6d:20:29:63:b0:
1b:c8:dc:b8:65:29:16:40:37:38:f7:42:69:a5:ae:
26:a7:09:19:d8:ea:7d:99:91:0f:51:68:d1:2e:ae:
ac:fa:dd:9a:09:28:0d:0e:2c:0f:18:c3:54:e6:6b:
eb:49:7e:f1:74:a9:06:81:1d:0a:2c:dd:22:2a:03:
8b:65:bb:a1:52:d6:ba:d1:37:dd:2e:83:b9:4c:9f:
d7:8c:02:bf:9a:6f:aa:c0:93:e3:08:70:69:62:df:
6a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C1:15:73:34:A1:6C:D9:8A:CB:03:67:A4:44:0E:05:86:0C:4B:7B
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/cMEVczShbNmKywNnpEQOBYYMS3s.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
11:5f:48:53:96:25:fd:79:f8:99:33:47:dd:34:5e:66:ee:eb:
97:48:ac:04:c9:ab:57:8f:f8:7d:d9:3e:62:7f:b4:be:fb:5c:
fa:ab:9e:7d:d7:3e:fa:12:49:0a:9c:d0:32:b3:40:8a:5f:10:
bb:ab:ac:9f:c4:d8:04:1d:20:40:1c:b9:b4:8e:87:61:66:0d:
d9:18:28:50:e0:62:fc:12:f8:62:fb:c2:12:ab:b8:53:79:ca:
43:ce:f8:82:27:14:bb:8f:8b:b9:33:22:6c:65:70:b1:73:d7:
87:4e:c4:9c:b6:53:46:b1:d6:9c:10:cf:db:61:9d:5b:13:0b:
86:df:66:9c:a8:ee:cc:87:28:ef:86:e6:80:cc:de:cf:99:e9:
30:b8:84:e1:e1:c0:3f:1e:a2:6c:75:37:0f:c7:bd:50:93:99:
b6:81:bc:96:d7:fa:d0:07:aa:ff:d3:47:f4:fc:c9:86:ae:5a:
c5:8b:a0:e7:11:74:fe:74:79:c5:e7:31:fd:02:c2:74:d2:7b:
37:95:96:01:bc:d7:b4:af:5c:d4:6e:6e:d8:1a:c4:b2:13:c6:
3a:54:40:f3:f9:4f:bf:4f:cb:61:6e:9f:20:4a:db:4e:27:f3:
cb:bb:40:17:8e:08:8a:eb:60:42:c5:3b:b8:e7:cc:fa:93:c0:
28:93:e4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org