Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/hoeoL9LQuIqBBweuuIA_UAGj-s0.roa
File: hoeoL9LQuIqBBweuuIA_UAGj-s0.roa (raw, json)
Hash identifier: 92ggWSjRQBmztFrO+YjoD2Lilnc3Cyw5Tt6C5LRjjq8=
Subject key identifier: 86:87:A8:2F:D2:D0:B8:8A:81:07:07:AE:B8:80:3F:50:01:A3:FA:CD
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4657
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/hoeoL9LQuIqBBweuuIA_UAGj-s0.roa
Signing time: Thu 14 Apr 2022 00:30:09 +0000
ROA not before: Thu 14 Apr 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18007 (0x4657)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 14 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=8687A82FD2D0B88A810707AEB8803F5001A3FACD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:db:3e:0d:4e:98:ff:37:0e:88:3c:47:62:63:
73:d3:f5:16:82:ee:5e:d8:2e:58:b4:fa:8f:78:4a:
ac:94:91:66:c8:1a:11:d1:91:9b:c9:dd:63:7e:1b:
90:2a:2a:4a:26:bf:e7:8e:9d:4e:54:a0:c6:32:a1:
34:c5:b9:ba:f2:d2:3f:63:0b:76:f7:86:ca:e3:48:
3a:9e:02:20:30:07:07:cc:e4:da:5f:57:ac:2c:00:
89:e9:5d:05:9a:62:a0:d3:26:0c:2f:97:2c:f1:87:
bb:c8:5a:d4:45:e9:bf:b9:55:7e:4d:43:37:fa:11:
88:df:66:3b:c6:c9:0c:39:e2:b5:2a:f6:90:45:a4:
c0:5e:d5:4b:44:b3:d1:a3:ac:c1:88:ef:ce:94:8f:
83:6e:44:ae:15:1d:4b:20:c6:41:9c:3b:09:5a:33:
24:0d:20:96:ee:fa:d4:0b:03:ef:47:89:2f:b0:14:
9f:3b:83:68:fe:b0:66:02:1b:07:c6:d2:a5:3e:76:
3e:c7:08:10:24:05:44:08:7b:50:b7:d7:91:3d:26:
dc:08:8f:50:33:87:3d:a1:28:72:5e:29:f5:3d:af:
cd:7b:65:ea:8a:dd:9f:1e:73:c8:74:29:77:c6:72:
e6:60:1a:d0:0b:fa:34:98:3b:85:ea:aa:67:fd:7c:
fb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:87:A8:2F:D2:D0:B8:8A:81:07:07:AE:B8:80:3F:50:01:A3:FA:CD
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/hoeoL9LQuIqBBweuuIA_UAGj-s0.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
87:ed:d5:ef:46:65:34:87:47:e4:1c:08:17:8a:07:fc:e5:0e:
ed:5f:f4:4e:a6:a9:69:30:ab:fc:ce:d1:a5:f3:dc:86:91:0a:
fe:9f:34:7d:68:1e:55:38:70:41:88:77:6c:5e:7f:3e:3b:d2:
d8:aa:28:ec:9b:c8:a7:7f:2d:54:ec:59:07:b6:51:0b:15:97:
87:40:fa:12:8a:b8:22:31:93:88:fe:69:08:7b:7b:7b:84:30:
ce:27:d8:9c:07:82:92:0e:e4:1b:e3:90:4d:50:5f:16:ba:85:
f7:b9:77:3e:be:e3:0e:3e:2d:2c:0c:90:27:01:3c:c6:4f:bc:
9b:f9:e7:5e:bb:e1:ef:e9:96:6b:8b:ee:35:5c:46:cc:47:32:
69:c5:c4:db:93:41:90:31:86:56:fb:ad:b7:45:17:1d:b6:05:
70:50:ed:b0:e5:28:11:ab:a2:30:4e:1e:3b:3e:c9:d9:43:96:
20:d0:4f:6a:a9:a6:f8:cf:49:69:5b:aa:33:b1:6c:21:ab:65:
91:18:ca:a5:f2:8c:0c:ab:7e:02:90:56:f2:eb:4e:64:17:ae:
c7:eb:b2:2b:ba:6e:92:68:dc:79:0b:97:89:e3:4b:ca:2a:22:
28:1b:84:16:fa:a9:2e:65:6d:ce:f1:c1:eb:b4:38:eb:83:9d:
97:ac:9c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org