Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/k44MGor1Wk7WI999rKzyY5N7CLM.roa
File: k44MGor1Wk7WI999rKzyY5N7CLM.roa (raw, json)
Hash identifier: +hvJLja+QG3/f0f/9RShn7l9RS0BOmlpCHv3bmNeTes=
Subject key identifier: 93:8E:0C:1A:8A:F5:5A:4E:D6:23:DF:7D:AC:AC:F2:63:93:7B:08:B3
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 453E
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/k44MGor1Wk7WI999rKzyY5N7CLM.roa
Signing time: Fri 25 Mar 2022 00:30:07 +0000
ROA not before: Fri 25 Mar 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17726 (0x453e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 25 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=938E0C1A8AF55A4ED623DF7DACACF263937B08B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ba:34:e2:23:b4:5c:fc:a5:17:37:50:e0:fa:
75:7a:a4:0d:7a:eb:42:d9:37:93:de:b8:76:db:b8:
f1:71:72:c5:39:64:74:11:25:61:b9:32:13:e0:36:
0c:ad:3c:ef:ad:e9:14:10:9a:06:0a:f2:2b:19:e4:
b3:da:0d:6e:ab:43:bf:c4:7e:84:35:49:33:fb:a3:
f2:c4:09:71:88:36:a7:fc:92:95:dc:5f:82:a7:96:
db:5f:37:be:07:a7:54:9e:d0:9c:2d:1e:a0:10:9f:
3b:67:3b:c1:80:e9:ed:bb:a3:20:ab:45:39:6b:90:
93:a1:7a:70:8b:e0:27:c4:b7:59:66:bb:f3:9b:b0:
4f:a0:d6:09:cc:55:cb:37:47:4e:eb:eb:8f:6f:c7:
ec:8e:7d:e9:9b:60:b7:c0:2c:e9:79:d9:ed:a7:87:
b3:a1:e6:d5:05:d6:17:41:15:9e:d8:fe:ce:fe:dd:
d5:b8:92:a2:04:14:6c:53:07:de:97:39:02:33:cb:
f4:f6:05:bb:27:0c:ee:e0:d5:c1:fc:22:2f:8d:65:
e0:d7:24:cc:75:9a:fe:5b:5a:cf:ee:24:ad:7f:c8:
32:2b:47:87:b6:2d:17:9f:8a:6d:ed:2a:68:43:e2:
86:7a:ce:be:7b:e8:92:f5:48:bf:99:55:d1:17:24:
d6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8E:0C:1A:8A:F5:5A:4E:D6:23:DF:7D:AC:AC:F2:63:93:7B:08:B3
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/k44MGor1Wk7WI999rKzyY5N7CLM.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
38:30:1e:3c:51:3c:c2:ec:51:9e:0c:ad:f4:a2:0d:3b:a8:86:
3a:88:2c:f5:91:8d:83:10:6d:07:4f:23:b0:67:f6:2c:4c:87:
a3:61:62:c2:74:79:dc:8a:6b:50:26:0f:4f:a5:f6:86:71:96:
28:1e:d5:54:b2:3c:b3:ad:bb:3b:3a:e2:ef:92:c6:b0:ae:59:
90:27:b6:6f:ad:6c:19:44:4b:cb:db:81:f6:fd:b6:03:d3:ef:
c3:11:b1:e7:13:01:af:4a:fc:55:53:22:b1:c9:ac:e4:66:53:
e7:cd:ba:27:93:59:fe:cf:6f:16:a7:e2:fc:f3:50:f4:e2:5f:
b0:d6:cb:b2:cc:d5:42:27:4d:a0:b2:6d:75:f2:d9:90:1e:b1:
71:8e:94:3b:a2:9a:2a:b3:81:28:c9:d6:97:21:47:b2:e1:a9:
d8:2e:af:f0:83:f8:55:7e:7a:19:88:dc:ed:08:4d:8b:ac:e3:
4b:4c:9f:15:53:53:20:91:19:9f:0d:9f:1f:9c:71:9d:4e:57:
c2:bc:49:9e:fb:96:c7:4d:32:f2:37:fe:c0:4c:06:25:ac:8f:
2d:41:a1:ea:1f:90:47:98:80:f1:9f:77:b0:ef:13:22:8c:c2:
5c:35:56:17:6d:06:52:a6:b5:fd:39:87:74:85:49:bd:8d:f1:
f8:43:52:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org