Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/k67h_sdv0QLZpAZY8M6LfUo5rek.roa
File: k67h_sdv0QLZpAZY8M6LfUo5rek.roa (raw, json)
Hash identifier: 5r2td2N5I4rl4KUw9QzIht0GUbpIKoCMPQ14OOmZJhY=
Subject key identifier: 93:AE:E1:FE:C7:6F:D1:02:D9:A4:06:58:F0:CE:8B:7D:4A:39:AD:E9
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 43AD
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/k67h_sdv0QLZpAZY8M6LfUo5rek.roa
Signing time: Thu 24 Feb 2022 00:30:07 +0000
ROA not before: Thu 24 Feb 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17325 (0x43ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 24 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=93AEE1FEC76FD102D9A40658F0CE8B7D4A39ADE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b8:f9:64:8e:c5:13:e1:92:1c:f3:8e:6e:36:
48:05:59:b1:af:72:eb:7d:8e:b5:e0:2a:be:1f:61:
2a:56:0f:37:1c:0d:a7:d3:a5:72:ab:12:27:77:06:
3c:07:e3:b1:0b:98:e8:e7:0b:3d:57:07:19:af:9e:
2f:da:41:70:73:51:59:de:cf:40:fe:00:48:ad:d9:
3b:a5:70:92:62:fc:86:5a:c0:5b:1b:5c:ed:2a:25:
64:29:6d:09:38:65:77:42:91:d0:5e:74:ad:08:36:
e2:98:73:77:c5:74:5d:9c:25:03:c7:63:93:57:d7:
7d:62:6c:82:8e:5e:3e:42:f3:c2:0d:cd:95:cd:ba:
43:83:fc:9c:21:24:8b:29:19:57:19:64:02:c8:01:
c2:37:b5:ac:a5:ca:55:ca:ed:1e:ef:72:61:7c:91:
f7:e5:de:00:74:d3:71:e0:8e:a0:82:72:32:13:a2:
74:ab:1c:80:a3:50:14:84:77:18:ef:01:9b:1e:2a:
f3:b0:22:b6:21:c3:4f:7a:b9:3e:1c:69:fc:5b:01:
81:1d:66:65:63:fc:dc:f8:41:08:37:67:0d:ba:8b:
44:99:9b:fa:10:59:2b:38:0c:16:48:e9:9e:79:dd:
78:5b:f0:c9:9d:a6:7c:0d:69:dd:08:85:48:17:49:
08:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AE:E1:FE:C7:6F:D1:02:D9:A4:06:58:F0:CE:8B:7D:4A:39:AD:E9
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/k67h_sdv0QLZpAZY8M6LfUo5rek.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
07:e7:52:00:bd:a6:d4:6e:4b:fa:34:cd:34:9b:c2:10:3a:dd:
eb:f0:bf:77:26:62:29:35:de:44:4b:a8:09:ae:b2:7c:c1:98:
50:f4:88:a0:87:41:ee:d3:c5:27:85:69:74:98:63:5d:6a:45:
24:5c:98:75:91:8a:29:bf:a3:0b:c7:fb:33:1b:4f:6a:93:24:
0e:0c:08:87:dd:65:27:0f:4c:c1:32:45:7e:47:cf:12:29:14:
27:ba:05:9b:f9:af:1c:97:9c:c9:82:90:a3:6b:60:8f:4e:e4:
cc:8a:22:da:4d:01:c7:29:24:d4:4d:8c:3f:52:be:58:34:09:
76:61:a0:e7:4a:f6:63:ef:75:b9:22:83:09:a1:fc:ca:e2:9f:
cf:4f:da:67:b6:e4:60:48:1e:df:3c:5e:f8:a2:32:70:33:69:
66:92:c7:03:08:90:88:bc:20:f5:98:11:02:49:aa:be:8d:de:
f0:9f:1c:ef:72:70:7c:5c:da:7f:61:4c:41:43:66:5d:cc:89:
d2:9b:3d:af:ff:01:5d:51:f3:73:ef:64:51:80:bd:b7:2e:82:
d9:8f:f4:5d:75:8f:99:69:30:0d:78:1a:04:55:ba:f6:b4:33:
ae:ae:c4:c4:62:db:7e:27:d0:ac:6a:e0:63:2b:5d:fe:bb:df:
08:b3:5a:8c
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICQ60wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAyMjQw
MDMwMDdaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKDkzQUVFMUZFQzc2RkQx
MDJEOUE0MDY1OEYwQ0U4QjdENEEzOUFERTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKuPlkjsUT4ZIc845uNkgFWbGvcut9jrXgKr4fYSpWDzccDafT
pXKrEid3BjwH47ELmOjnCz1XBxmvni/aQXBzUVnez0D+AEit2TulcJJi/IZawFsb
XO0qJWQpbQk4ZXdCkdBedK0INuKYc3fFdF2cJQPHY5NX131ibIKOXj5C88INzZXN
ukOD/JwhJIspGVcZZALIAcI3taylylXK7R7vcmF8kffl3gB003HgjqCCcjITonSr
HICjUBSEdxjvAZseKvOwIrYhw096uT4cafxbAYEdZmVj/Nz4QQg3Zw26i0SZm/oQ
WSs4DBZI6Z553Xhb8MmdpnwNad0IhUgXSQjfAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUk67h/sdv0QLZpAZY8M6LfUo5rekwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9rNjdoX3NkdjBRTFpwQVpZOE02TGZVbzVyZWsucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHA8wDQYJKoZIhvcNAQELBQADggEB
AAfnUgC9ptRuS/o0zTSbwhA63evwv3cmYik13kRLqAmusnzBmFD0iKCHQe7TxSeF
aXSYY11qRSRcmHWRiim/owvH+zMbT2qTJA4MCIfdZScPTMEyRX5HzxIpFCe6BZv5
rxyXnMmCkKNrYI9O5MyKItpNAccpJNRNjD9Svlg0CXZhoOdK9mPvdbkigwmh/Mri
n89P2me25GBIHt88XviiMnAzaWaSxwMIkIi8IPWYEQJJqr6N3vCfHO9ycHxc2n9h
TEFDZl3MidKbPa//AV1R83PvZFGAvbcugtmP9F11j5lpMA14GgRVuva0M66uxMRi
234n0Kxq4GMrXf673wizWow=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org