Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/qrO6_US38K-CwYsTUa1Q2t5hDbA.roa
File: qrO6_US38K-CwYsTUa1Q2t5hDbA.roa (raw, json)
Hash identifier: vILqdHARi5na6HB05QU9WqOQSREtkvxgR19M9Q27BFA=
Subject key identifier: AA:B3:BA:FD:44:B7:F0:AF:82:C1:8B:13:51:AD:50:DA:DE:61:0D:B0
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 46AB
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/qrO6_US38K-CwYsTUa1Q2t5hDbA.roa
Signing time: Wed 20 Apr 2022 00:30:05 +0000
ROA not before: Wed 20 Apr 2022 00:30:05 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18091 (0x46ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 20 00:30:05 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=AAB3BAFD44B7F0AF82C18B1351AD50DADE610DB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:aa:c4:e7:a1:3a:23:c4:e5:ea:1e:41:ea:44:
3d:ab:06:5f:07:a7:05:b0:21:11:1e:b3:72:cd:72:
64:52:63:22:47:41:a7:92:34:ba:f1:20:4d:71:33:
25:c3:41:15:6d:01:a2:4e:34:43:0d:8c:13:83:23:
67:7b:a1:a7:53:e8:6c:75:76:89:b9:73:0a:13:06:
cd:69:2b:db:28:e1:8a:51:81:b2:a7:e7:ef:c6:73:
7d:3e:6f:01:ea:21:9e:0a:a0:2b:66:95:0f:45:fe:
f9:b5:20:80:0e:6a:9d:ca:72:1e:d5:c5:dc:75:0c:
16:1c:f3:e3:9f:7b:40:6c:b4:45:96:5c:c5:fb:9d:
46:fc:15:69:24:f5:f0:ba:54:c6:ce:47:9e:8d:c8:
4a:7d:39:18:a0:ab:0c:f4:bc:52:0f:4d:4a:01:df:
b7:f3:f4:de:ed:bf:00:09:0b:63:4e:ef:a8:44:e2:
9b:cd:83:c3:85:5f:fd:3f:38:04:2f:bd:50:49:22:
a4:bc:4e:c2:8d:3d:f9:28:f7:b9:8a:da:16:30:ae:
54:dc:4c:f0:6f:9a:0d:c8:3b:8c:23:ff:62:cc:f0:
d6:36:b3:bd:d4:fe:5a:09:d4:dd:23:9b:c2:9a:5e:
76:9b:83:d0:ee:97:b9:8c:96:1c:9c:83:5a:9a:47:
33:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B3:BA:FD:44:B7:F0:AF:82:C1:8B:13:51:AD:50:DA:DE:61:0D:B0
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/qrO6_US38K-CwYsTUa1Q2t5hDbA.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
54:ed:91:fb:30:cc:54:ca:06:6b:a4:4f:dc:2e:da:30:77:93:
20:b2:d5:f4:e5:d2:ac:c5:6e:7a:d7:fb:9f:1d:0e:2b:1b:36:
36:9b:40:c3:74:e4:e1:a5:3c:bb:d8:e3:36:60:50:ec:ed:a4:
b5:30:67:46:b4:03:45:5c:e9:5b:ff:bd:56:cc:fc:d1:02:0b:
f5:af:ac:39:b0:a2:92:b1:2d:26:34:63:d5:8f:f6:f2:04:07:
bf:9a:ff:2d:83:91:3d:cf:ef:95:48:fd:ef:24:60:df:e3:00:
a8:cf:f1:e5:01:77:38:c2:4e:90:c4:80:8a:48:eb:07:e8:1b:
fb:82:eb:ab:a6:8b:f7:f7:0c:fb:0d:fe:47:53:fb:79:7c:7a:
d4:20:1b:57:09:87:ea:ef:6a:61:40:ea:57:ce:f9:1e:8b:d2:
9a:7f:c1:1d:38:5b:97:7c:5a:a7:bb:ce:eb:e4:cf:ca:14:7e:
30:0f:96:64:51:95:f1:67:5f:16:03:28:59:cd:41:06:55:db:
55:86:60:5e:75:93:4c:73:41:dd:70:fd:3c:53:96:8e:ad:9f:
74:5c:bf:80:a1:f2:be:0a:4e:70:b3:99:fc:63:b9:ea:c5:a5:
32:94:3e:29:70:83:1f:eb:5d:b9:3c:5d:fc:77:3b:8c:52:c2:
ed:43:a2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org