Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/evB-lhx0kJ7WY4Ly4xJX46kADjE.roa
File: evB-lhx0kJ7WY4Ly4xJX46kADjE.roa (raw, json)
Hash identifier: 3DJSKV1LdpEpudbuKzxOOnLXt8eCwaHzJN/JknhxnzA=
Subject key identifier: 7A:F0:7E:96:1C:74:90:9E:D6:63:82:F2:E3:12:57:E3:A9:00:0E:31
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 487D
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/evB-lhx0kJ7WY4Ly4xJX46kADjE.roa
Signing time: Mon 23 May 2022 00:30:07 +0000
ROA not before: Mon 23 May 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18557 (0x487d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 23 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=7AF07E961C74909ED66382F2E31257E3A9000E31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bf:d5:43:3e:80:37:90:84:fe:8f:c8:60:93:
7c:d8:8d:1a:5b:81:6f:24:b4:ca:38:53:b5:3c:4d:
03:3e:13:aa:c6:f0:29:80:5b:13:d4:80:93:4a:19:
57:c0:4e:cf:53:9b:0d:11:1b:36:ce:30:86:5e:3e:
e0:60:14:76:2f:6b:a9:89:4d:e6:43:ae:98:5a:2b:
af:56:4b:87:df:76:1b:08:c0:28:d9:e9:d1:b2:75:
64:77:b5:c8:01:d0:84:b6:00:f8:26:c3:74:ec:71:
6d:c9:fb:e2:c3:66:57:c9:db:26:f7:57:cd:9c:a9:
ec:ae:b4:77:b2:df:77:11:f6:0e:1d:01:64:c4:7f:
80:fc:b7:c6:61:40:af:f7:2c:0b:e5:cb:35:1c:ec:
a0:b1:3e:3f:22:19:0d:69:5a:cf:fa:df:64:8f:7a:
87:ea:09:ce:63:1d:63:4d:d2:48:b8:22:49:86:ca:
00:32:91:ff:cf:77:79:f6:0b:b0:8a:92:49:51:5e:
54:56:96:8d:1a:85:1c:6a:73:64:d3:b2:c6:e2:66:
b1:3a:e3:17:fc:0b:ec:b5:45:43:3c:f7:de:ef:e1:
99:77:6f:40:e8:c2:29:b5:e3:9c:4b:2f:88:c9:fc:
82:80:31:c6:ef:40:9a:01:65:81:da:9f:f1:10:ca:
fc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F0:7E:96:1C:74:90:9E:D6:63:82:F2:E3:12:57:E3:A9:00:0E:31
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/evB-lhx0kJ7WY4Ly4xJX46kADjE.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
77:7d:90:04:d1:3a:9e:71:b0:5d:2a:39:37:fc:f9:c0:e4:26:
d6:b8:d1:0d:b6:5e:d5:9a:5f:79:d5:ff:6d:0a:69:0c:9c:fe:
ee:73:ae:72:66:64:d0:27:da:0f:94:6b:7f:c6:b3:17:95:1f:
4c:2f:db:77:ea:cf:50:80:b6:01:53:25:c2:1d:57:80:d7:c0:
1b:e0:e2:d3:62:45:28:cf:28:31:4c:1a:3c:da:b6:ca:92:b6:
ab:97:fc:e1:18:90:d1:ff:e6:08:7a:70:8f:01:7f:e4:4b:81:
99:11:10:59:e7:8b:58:54:15:71:59:19:5a:77:13:f7:22:da:
e5:ce:3e:6b:fa:21:26:28:cc:b4:fb:78:53:23:92:4d:13:d2:
e1:17:28:41:56:f0:2a:6d:2a:fe:d2:75:42:fe:64:5e:fb:7f:
8a:f8:e7:41:c5:df:34:22:74:d6:6a:aa:25:ac:ab:89:66:6d:
85:cc:0b:ec:01:9e:5c:0c:16:db:fd:4d:dd:29:ab:af:07:d9:
e6:df:56:82:07:40:70:ee:3a:e0:01:82:6b:85:05:2d:c6:8e:
d5:ef:fa:81:62:34:52:b3:f3:03:0b:4f:d8:b9:67:5a:9e:12:
ae:c9:c0:03:47:bc:b8:1a:a0:48:69:fc:bf:3a:71:9d:5c:cf:
4f:f7:15:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org