Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/obV-lGS134LRTDB9OG38WoZMevk.roa
File: obV-lGS134LRTDB9OG38WoZMevk.roa (raw, json)
Hash identifier: mgvLT1p2i2Af0nOR1ep2DmbOEK/Ok61HB2kDMTohsVM=
Subject key identifier: A1:B5:7E:94:64:B5:DF:82:D1:4C:30:7D:38:6D:FC:5A:86:4C:7A:F9
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 45E7
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/obV-lGS134LRTDB9OG38WoZMevk.roa
Signing time: Wed 06 Apr 2022 00:30:06 +0000
ROA not before: Wed 06 Apr 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17895 (0x45e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 6 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=A1B57E9464B5DF82D14C307D386DFC5A864C7AF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f5:32:cd:be:fb:c8:e8:8c:04:9a:e2:50:35:
bc:20:7f:6a:0c:ca:50:ba:06:c9:98:0b:4f:f4:f8:
74:2a:19:71:01:32:85:fc:00:88:35:a7:07:38:1f:
8a:58:26:6a:10:35:5a:09:a1:8d:56:c9:38:3f:ac:
1e:e9:61:5c:77:68:26:c1:89:a3:3b:95:e3:7e:be:
e5:97:35:cf:71:b1:1c:7a:b2:7c:11:c7:19:40:32:
fd:37:60:d6:1b:90:66:e7:f4:cd:cb:ad:16:cf:4f:
5b:34:a2:c0:e2:8d:ea:cd:e6:2a:d9:e6:53:f6:4e:
63:71:76:69:23:b9:9b:f3:fe:c9:a0:04:52:5c:82:
5e:0f:ef:03:6c:60:f9:45:cb:7e:40:4f:5d:ee:58:
e0:d6:95:f7:f2:70:0d:46:f3:d4:4c:f7:83:67:d8:
8f:b8:90:5a:ae:23:f7:6d:f5:68:bf:e4:4f:17:cf:
eb:8c:14:c7:34:5b:23:2a:cf:3e:3b:7e:87:6f:f0:
8e:e8:cb:e1:8b:57:21:40:94:e6:a2:c9:24:61:7f:
52:f3:c3:0b:c6:eb:44:68:8a:ce:21:a3:30:9f:46:
07:96:25:fc:48:11:dd:23:1e:62:3c:9f:a8:05:a9:
fc:77:f7:88:cf:f7:d1:a7:88:6c:67:9d:46:36:a9:
03:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B5:7E:94:64:B5:DF:82:D1:4C:30:7D:38:6D:FC:5A:86:4C:7A:F9
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/obV-lGS134LRTDB9OG38WoZMevk.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:a5:df:4b:6e:a5:8b:91:c7:82:38:3d:55:67:63:b5:a6:d6:
d7:30:b6:f9:8b:50:f2:6b:60:eb:51:bd:e4:12:05:df:e0:ef:
c8:7e:27:68:89:37:11:0a:67:83:25:66:58:bc:d0:c7:b0:7f:
34:a9:cc:11:ca:ac:e4:78:4c:e7:54:d6:3c:b8:86:a6:51:7e:
13:d0:fa:8e:2a:19:37:a8:5b:74:30:8c:c2:59:6d:ff:9b:6b:
5e:42:c0:71:8b:dd:79:65:e7:7d:5c:42:15:cc:b3:d4:8f:c6:
32:1a:1a:8b:d3:ea:ae:ff:e8:39:37:91:9e:d4:1d:7b:7f:cc:
e9:37:e3:4d:43:eb:4d:7c:17:b8:a9:28:47:ff:bc:ef:f6:05:
ee:e4:35:07:b8:6b:36:41:09:a1:9c:f6:c5:da:f9:45:4a:41:
de:8c:bc:77:2f:64:75:76:8a:5e:f0:06:e9:1c:79:ee:2a:41:
30:86:95:55:ee:d3:ed:00:49:2f:90:10:32:76:17:33:b9:5a:
0d:11:9e:0f:24:6f:c9:21:d4:83:1f:22:8e:4a:0d:35:5b:77:
4e:48:c1:3a:63:2a:b2:f7:dd:73:dc:8f:c4:b0:fb:87:03:49:
1a:9a:ca:b0:1a:e9:93:59:c3:93:17:ae:f1:cb:a7:3c:9c:9f:
51:6a:9d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org