Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/h_VTvAdssPeCaUTUZYYjQFhYfTU.roa
File: h_VTvAdssPeCaUTUZYYjQFhYfTU.roa (raw, json)
Hash identifier: 6iUitpvj+jf1TMQiLJDwCGkPuv3e0RpaMApclNryKhE=
Subject key identifier: 87:F5:53:BC:07:6C:B0:F7:82:69:44:D4:65:86:23:40:58:58:7D:35
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 46C7
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/h_VTvAdssPeCaUTUZYYjQFhYfTU.roa
Signing time: Fri 22 Apr 2022 00:30:07 +0000
ROA not before: Fri 22 Apr 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18119 (0x46c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 22 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=87F553BC076CB0F7826944D46586234058587D35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c2:59:3e:0c:9b:1c:d6:25:78:64:4f:db:40:
00:07:ab:1a:ca:c1:da:73:d3:f6:95:a2:15:21:b8:
5d:b0:bf:83:39:43:27:2f:85:3e:71:92:41:c4:d0:
f9:47:89:b6:95:60:26:48:a1:d4:00:e7:ff:3f:a5:
f7:ed:c9:6d:49:d4:c6:bf:98:fb:71:18:08:87:a9:
db:ca:16:d3:fc:75:99:4f:a0:f5:42:59:a2:d9:83:
38:5f:0c:e4:2f:1b:af:ff:ed:59:b2:a5:d5:1c:5e:
a6:b2:25:7f:d9:2c:f6:b5:d2:6e:44:fd:bf:2a:a4:
80:91:f7:65:c8:7a:17:c7:75:4b:c3:9e:f7:06:d9:
8c:99:ab:84:2e:68:95:30:e4:d4:5e:4c:1e:0a:a7:
5a:89:cc:d8:97:1f:28:81:61:be:09:62:54:29:57:
8f:db:8a:16:5b:53:85:39:52:96:e6:5c:7b:87:4d:
c2:0e:0d:69:f9:7a:7d:cb:ee:f7:15:a2:43:77:08:
96:29:1f:73:98:7a:13:f5:c1:94:b8:1d:1a:66:6f:
25:90:c0:82:9c:84:8c:f8:38:3f:66:8d:47:9b:d4:
55:f7:6c:a9:ad:c9:d7:3f:da:48:82:2c:1c:73:fe:
f1:28:bf:eb:d0:b5:e5:5f:ba:5c:d1:32:30:a0:29:
aa:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F5:53:BC:07:6C:B0:F7:82:69:44:D4:65:86:23:40:58:58:7D:35
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/h_VTvAdssPeCaUTUZYYjQFhYfTU.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
22:23:fd:34:4d:fb:f3:cb:5d:40:99:01:6c:b1:a6:d9:91:07:
47:4f:65:d4:1b:fe:13:8c:af:bd:f2:18:02:29:72:85:27:31:
6e:e6:7e:cf:ab:f6:f8:08:01:d0:d0:13:a3:04:cd:de:f2:a2:
79:a6:9e:37:7d:e8:3b:e3:aa:99:92:54:af:cc:b7:8e:c0:cb:
28:ee:7f:32:2d:86:9f:15:12:b2:52:0b:0d:d4:f0:14:30:33:
63:63:cf:75:3c:60:cf:61:56:fe:f3:45:13:05:4f:7e:ba:e5:
97:ff:c9:e7:e8:57:ca:52:64:7f:1f:e6:a7:08:18:d9:a5:15:
68:53:ae:d3:d0:38:a7:58:04:54:80:66:94:4c:b6:ef:e2:e4:
0a:96:85:d7:d7:e7:60:74:12:69:50:61:c5:74:54:61:c2:37:
f9:f9:ff:ec:0e:a9:9f:fa:ed:a3:bc:e2:a2:fe:d0:0f:5a:f7:
5e:12:7a:0f:0c:c0:ee:b1:e8:c5:5b:e9:6f:b5:f8:98:87:b7:
5a:5b:62:68:5a:d3:54:14:1e:d2:46:e8:7a:41:c1:95:cb:64:
ff:77:54:41:85:d3:ef:25:a4:7b:f2:1a:35:c3:ea:a8:fa:ea:
cf:42:0e:b0:13:10:84:e4:88:ad:06:3a:ab:12:f2:00:30:81:
e5:22:7f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org