Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/nvUDaapjNlWY7-sd7o9rFaLJMAw.roa
File: nvUDaapjNlWY7-sd7o9rFaLJMAw.roa (raw, json)
Hash identifier: Fi77UylsaPvjU2G0aRnUkJNcnWmaouypSQKs4kaIEC8=
Subject key identifier: 9E:F5:03:69:AA:63:36:55:98:EF:EB:1D:EE:8F:6B:15:A2:C9:30:0C
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4331
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/nvUDaapjNlWY7-sd7o9rFaLJMAw.roa
Signing time: Tue 15 Feb 2022 00:30:06 +0000
ROA not before: Tue 15 Feb 2022 00:30:06 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17201 (0x4331)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 15 00:30:06 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=9EF50369AA63365598EFEB1DEE8F6B15A2C9300C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:85:48:fe:dd:3a:20:93:da:b0:a0:59:d9:38:
fc:ac:06:a8:c4:99:fa:89:87:9e:68:5e:e1:5f:c6:
a4:94:57:de:59:35:e5:93:0b:b5:7f:47:78:66:ed:
e6:00:91:d7:9f:e6:77:a0:69:84:75:8c:1d:2a:15:
a5:f9:56:56:49:17:b2:0a:80:e5:4e:78:a0:d5:d3:
87:aa:ee:9c:e6:5a:09:df:d6:31:0a:a7:05:a7:04:
99:fd:08:dc:56:a4:73:dc:06:bd:7b:85:60:0f:fc:
a2:d3:2a:a3:dc:e3:81:86:ac:5b:91:85:28:be:b5:
f2:a1:4b:a8:f9:5f:8d:8c:fa:86:77:e3:ca:16:77:
47:91:a1:e8:31:4f:4c:87:cf:a8:6d:b4:42:6a:b4:
28:71:55:40:76:ab:64:8b:cf:cf:92:ae:30:a6:2e:
f0:8f:77:90:a5:57:28:27:ab:19:f7:36:ea:5d:9c:
28:48:ab:ad:56:09:e9:7f:bd:30:6f:05:e7:16:70:
23:95:ed:b4:7a:86:03:72:5d:45:5f:50:3e:e8:02:
d4:73:64:d1:d5:97:07:a6:5a:36:2a:f1:8f:b5:b4:
80:24:4c:2c:5a:a5:22:be:b3:8f:ac:b0:19:f3:b7:
e5:75:fe:5e:01:23:33:8c:b7:3f:01:82:53:f9:3a:
75:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F5:03:69:AA:63:36:55:98:EF:EB:1D:EE:8F:6B:15:A2:C9:30:0C
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/nvUDaapjNlWY7-sd7o9rFaLJMAw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:9e:08:e8:06:02:4a:79:ea:d1:c7:28:90:70:58:24:03:75:
11:91:d9:2c:3f:8f:a8:43:83:53:0e:82:4b:ba:90:74:10:5b:
85:e9:da:65:5e:5d:59:b9:3d:23:d3:0e:0e:4a:e1:4a:be:50:
41:a2:db:cb:f8:91:73:de:9d:30:94:f5:e7:e5:2e:75:5b:50:
3b:35:15:ad:12:ef:f7:12:24:fa:2c:57:42:3f:58:da:2e:46:
70:f4:cb:43:9a:92:d2:b1:0f:eb:4f:38:fa:4c:20:98:1a:a6:
61:6e:dc:d9:25:f5:20:db:13:66:ca:f0:87:52:e5:e7:73:b1:
7f:b4:c9:da:72:62:c6:cc:45:24:dd:79:90:b2:d8:46:ac:44:
23:cd:30:32:c7:a5:f1:a2:ad:37:03:a9:0f:71:57:fb:41:32:
25:09:33:31:1b:f7:ee:56:69:b1:21:4d:92:a8:d0:0a:c9:10:
d6:a2:ed:5e:2f:4b:33:9d:1d:65:c1:5b:27:f1:ab:25:c2:40:
89:ce:9a:da:3b:8d:46:bb:77:ff:62:42:12:d2:36:3a:16:75:
7a:c1:7d:22:c6:98:a5:7a:3b:27:0b:00:26:04:84:74:92:3b:
60:39:29:0d:3c:dc:e3:73:7e:b3:38:d4:f4:47:e6:a3:93:f0:
aa:c7:b8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org